Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ykBS0A0HaialTqx62sxYR4LdICQ.roa
File: ykBS0A0HaialTqx62sxYR4LdICQ.roa (raw, json)
Hash identifier: lDEVPNXQvG2C6tJB9usDZmajOP7b2HmCL9a7KSPm9fU=
Subject key identifier: CA:40:52:D0:0D:07:6A:26:A5:4E:AC:7A:DA:CC:58:47:82:DD:20:24
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F96A1723998750F0CED29599D4653
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ykBS0A0HaialTqx62sxYR4LdICQ.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199577
IP address blocks: 80.233.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:96:a1:72:39:98:75:0f:0c:ed:29:59:9d:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca4052d00d076a26a54eac7adacc584782dd2024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:75:a4:74:dc:7f:25:0b:44:3b:98:99:33:
55:a1:c7:eb:60:8d:3d:f9:25:f4:f0:3d:9f:7d:07:
09:71:a6:5e:36:03:58:7d:24:34:f1:d8:24:e0:61:
16:a3:35:98:61:90:e1:6b:86:f3:51:77:cc:8c:e0:
85:ee:90:c5:c1:05:ba:a4:9d:00:fc:3a:4b:5b:fd:
5e:d3:fb:d4:05:e4:55:4c:fc:3f:68:71:16:e6:a9:
97:f1:b5:cf:d6:76:10:e6:55:17:0a:44:62:3f:9d:
e2:6e:08:85:ed:90:9b:5f:36:02:02:c2:11:2f:fb:
49:4c:26:0c:23:68:27:e5:29:85:65:b0:04:9d:fe:
13:e8:bd:33:05:f2:e9:61:cc:64:24:ba:d0:13:de:
4b:bc:3b:82:5c:9f:89:bc:07:89:01:5f:99:c3:3b:
31:c6:4f:44:3d:f8:12:19:e8:59:c6:c5:8a:1f:b5:
4e:03:5a:90:0c:28:06:1f:e5:bb:96:0f:ff:59:93:
a1:66:49:0c:2a:7c:43:b6:67:46:9b:73:03:c1:e1:
a3:1c:c5:94:e7:37:53:8f:1e:bb:c1:8f:f5:97:b1:
35:3f:62:e8:4f:00:15:8d:a5:94:04:93:cf:36:75:
38:7c:b5:da:2f:68:14:d2:89:ab:7d:e7:33:7e:39:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:52:D0:0D:07:6A:26:A5:4E:AC:7A:DA:CC:58:47:82:DD:20:24
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ykBS0A0HaialTqx62sxYR4LdICQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.187.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cc:23:a4:c6:d4:89:c5:62:1a:ad:cd:18:1a:51:a2:ae:44:
8f:cc:15:03:9d:75:da:1f:9a:74:4e:49:06:e2:c1:ad:d5:11:
05:e2:d9:47:af:f4:e4:2b:63:f7:52:26:5c:0a:1f:6e:1e:e6:
b6:8b:2a:17:52:6e:0e:e2:6c:78:44:87:5a:f2:6a:87:6d:87:
b0:02:4d:9b:82:23:fb:05:26:d5:ea:38:54:6a:96:9a:fc:aa:
4c:85:d6:9b:e2:54:09:1c:3a:b4:c4:83:86:04:04:08:d3:e5:
4d:f1:0b:a8:16:7c:51:d7:30:44:ac:68:1e:c7:5b:a4:58:41:
93:63:58:98:47:6a:96:eb:95:ee:11:39:31:40:c9:02:8b:8e:
2b:3b:dc:9c:6c:d2:ca:ea:e9:da:8b:b5:5e:86:cb:09:52:4c:
0e:42:20:37:15:83:19:51:af:b8:45:cf:53:e1:aa:44:56:6e:
9a:25:46:a1:33:49:44:2f:7d:66:8e:0e:2e:14:57:d6:08:12:
80:90:72:e7:80:f7:b3:cf:e9:c2:5b:a7:d7:2f:a9:25:af:94:
52:03:2a:cf:9d:03:64:7c:20:fa:05:f5:92:84:8a:2b:a4:37:
6b:15:13:67:14:a4:94:ba:f2:48:eb:05:d1:1a:56:f5:bd:0c:
d8:19:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 15:18:19 2024 by rpki-client on console-fra.rpki-client.org