Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/yCJOTIB5kNiECcJ6GfqzQOMKlnM.roa
File: yCJOTIB5kNiECcJ6GfqzQOMKlnM.roa (raw, json)
Hash identifier: cq/yYmr3mpDtIVaMpeZ6JnYxRKFNW2xeMzABJr0Zx1Q=
Subject key identifier: C8:22:4E:4C:80:79:90:D8:84:09:C2:7A:19:FA:B3:40:E3:0A:96:73
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 018CC793372F49FD8FBF09685E37F7383996
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/yCJOTIB5kNiECcJ6GfqzQOMKlnM.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.39.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:37:2f:49:fd:8f:bf:09:68:5e:37:f7:38:39:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8224e4c807990d88409c27a19fab340e30a9673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:a0:35:c1:ef:39:77:dc:f2:ce:72:52:7f:
77:30:23:21:1a:b6:82:2a:64:f6:06:15:ac:3b:6a:
ed:b3:cb:a4:5b:e9:f1:35:63:6f:42:ed:b2:9c:65:
1d:c7:a0:70:30:22:da:c0:08:9e:e0:c3:f1:ab:69:
81:f8:1b:c8:df:78:fa:fb:4d:a2:93:95:9e:84:31:
18:e5:92:6a:1a:42:fd:43:71:6e:25:46:bb:a8:79:
4c:b9:87:82:b4:2c:e6:c8:3f:ab:f6:fb:de:3c:7b:
06:a5:11:14:7a:0b:c5:d0:d4:8e:fe:a6:9e:a3:c6:
19:c4:e8:3e:2c:19:f4:0f:62:eb:a3:30:db:d8:9a:
60:20:ad:c0:f1:53:3e:12:88:e0:af:58:a2:c3:94:
58:d7:72:12:4e:6f:42:df:c4:b5:fa:50:c3:36:1c:
a5:58:e7:22:a9:6c:06:0d:db:d4:a6:a4:10:3c:2c:
fa:8b:bc:7b:5a:11:3a:f4:2f:f3:5b:25:f3:ad:40:
9c:f4:2f:11:d8:d3:6e:c2:cb:fc:d8:bb:16:79:ab:
b3:63:80:15:59:74:f4:26:b7:b2:65:93:a8:28:f6:
f2:8b:3d:7c:8e:21:76:ef:30:54:7d:c7:35:7d:a3:
1c:35:3b:ca:33:ea:1e:6b:2e:fa:02:a8:14:57:43:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:4E:4C:80:79:90:D8:84:09:C2:7A:19:FA:B3:40:E3:0A:96:73
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/yCJOTIB5kNiECcJ6GfqzQOMKlnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.114.0/24
Signature Algorithm: sha256WithRSAEncryption
99:65:9b:8e:38:1a:c8:d5:1e:87:c6:58:b2:f7:d9:d1:27:1b:
b5:a6:df:72:c7:bb:95:12:4f:3f:00:8c:e4:96:fc:b8:f5:ef:
c5:3d:81:5a:55:5f:14:cf:2d:ca:bf:a4:94:86:5e:8e:19:28:
82:ec:86:10:e4:99:ce:f0:34:1f:11:29:61:3a:35:3b:b3:40:
ad:cd:b8:ed:eb:9d:b3:87:41:59:22:f2:13:c7:3f:73:95:f3:
27:25:c0:55:eb:1a:c7:07:a7:d1:11:fe:1e:78:30:bb:ea:8c:
3c:5d:45:89:e7:d1:28:3d:35:5d:33:3d:9c:22:14:40:8d:37:
ba:c7:ef:47:d7:12:40:1e:e7:58:76:4a:04:9d:2b:5a:f4:9a:
5b:05:4e:8b:93:75:cf:51:5c:14:34:71:a6:38:05:d0:4c:ca:
32:50:35:97:c2:9f:5c:d8:10:d0:f1:d2:5d:05:2d:64:98:0c:
b1:c7:0c:ba:46:f7:cd:8f:fe:13:a8:9f:ae:f2:25:78:c0:42:
4e:58:19:52:ca:a5:0b:64:b8:67:61:63:ee:bb:75:04:68:e9:
68:b1:8b:70:76:6e:1d:2c:14:8b:42:ce:bc:1b:0e:fe:71:6e:
cb:01:8a:10:c6:a9:b5:3d:64:5c:6b:c5:cf:49:3c:a6:cc:6e:
c5:55:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:00:04 2024 by rpki-client on console-fra.rpki-client.org