Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/mYnkfFAFJ-zept2nSkGaDlhY4HI.roa
File: mYnkfFAFJ-zept2nSkGaDlhY4HI.roa (raw, json)
Hash identifier: NY7orzW5fV2bBnbhD1eNK1U0FrUDrYBh/qp8Ow39SPw=
Subject key identifier: 99:89:E4:7C:50:05:27:EC:DE:A6:DD:A7:4A:41:9A:0E:58:58:E0:72
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 018CC56F0397F3FDBB28062A1F55383C58C1
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/mYnkfFAFJ-zept2nSkGaDlhY4HI.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198611
IP address blocks: 193.239.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:03:97:f3:fd:bb:28:06:2a:1f:55:38:3c:58:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9989e47c500527ecdea6dda74a419a0e5858e072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ac:a3:5c:27:1d:24:06:5a:36:42:9e:8a:06:
bb:b2:46:4a:86:85:ea:5f:5e:59:ca:18:bd:28:db:
ff:1f:63:42:fc:a3:c3:62:e0:99:7f:82:04:c2:5f:
81:ab:0f:6f:64:4b:8b:b6:20:92:c2:72:3f:02:34:
77:0a:e3:77:da:fd:d5:3b:a9:30:90:ad:5b:08:19:
f0:84:1f:01:1f:d0:e5:38:a6:83:84:a0:c7:8f:31:
a1:3b:6d:19:1f:9e:cd:5c:af:22:96:9a:f9:0d:c0:
e4:96:7f:21:49:8f:4d:d0:12:8e:ee:4a:de:7d:7f:
44:70:a2:24:30:0c:fd:0a:dd:8d:97:a4:05:11:52:
c7:30:bc:14:62:c1:7d:23:b9:93:61:11:4d:2d:24:
54:c8:58:67:e2:30:6d:2d:c8:b0:ec:25:aa:d9:be:
57:d4:6b:a2:4e:ad:b6:64:23:2b:b5:9c:ed:57:39:
4f:72:72:21:e1:5e:59:5e:4c:10:b9:f1:17:0b:0f:
8e:17:07:59:16:0e:ba:b6:fb:97:b0:46:1b:96:db:
f0:f4:86:94:64:42:bc:0c:6c:7a:f6:2b:65:fe:26:
08:10:39:f1:d5:3a:e5:07:10:0a:65:69:58:e1:88:
9d:c5:dd:0f:78:82:4b:02:ea:44:11:7a:e7:fe:3c:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:E4:7C:50:05:27:EC:DE:A6:DD:A7:4A:41:9A:0E:58:58:E0:72
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/mYnkfFAFJ-zept2nSkGaDlhY4HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:cb:0a:6a:78:e6:07:0b:52:75:9d:5f:57:23:04:c8:13:a9:
6d:a1:4f:6e:11:65:31:29:c9:17:78:ff:ac:b0:ba:be:c6:e0:
50:2b:0e:1c:10:fa:72:e0:01:65:1f:9b:94:c8:f9:25:1d:29:
8b:39:be:ca:c4:aa:e5:30:9c:8c:eb:f2:1b:3e:91:ae:aa:dc:
9a:b7:39:78:6a:20:bb:06:d3:2e:ca:14:33:7a:72:7b:9a:8c:
d9:8a:8f:eb:ee:e8:41:f8:db:c0:10:d7:ec:90:aa:a3:46:c3:
85:8f:d3:09:0c:ad:4b:19:24:c2:38:96:8f:b0:ed:22:e8:c8:
7a:a6:75:6b:09:9e:aa:dd:54:18:47:80:83:e6:85:8d:98:d5:
6d:12:8d:17:75:c3:f4:c8:43:84:bc:48:c5:bb:b8:8e:ba:96:
60:c0:f7:d1:ab:ae:e3:30:d7:7d:e2:6c:9d:d6:06:c1:c4:04:
de:1d:67:74:fc:45:b5:e5:50:2c:1b:4e:1d:15:b3:6f:4a:a7:
b6:9a:49:ac:3c:14:45:df:c7:53:d3:f0:a7:87:45:be:11:af:
39:e4:58:80:b2:31:c0:35:36:5c:a7:f9:42:6d:ec:ac:77:8d:
22:97:20:fd:e3:3a:f6:21:af:7b:ec:a1:37:fc:e9:16:04:ee:
de:7b:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:50:22 2024 by rpki-client on console-fra.rpki-client.org