Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Myp3-dQghgDVccNg2NsBHmTeeb8.roa
File: Myp3-dQghgDVccNg2NsBHmTeeb8.roa (raw, json)
Hash identifier: n/IHFmZAYHLNnu25LVmx6eKOtpUNk+4Axkz7ySOcYMo=
Subject key identifier: 33:2A:77:F9:D4:20:86:00:D5:71:C3:60:D8:DB:01:1E:64:DE:79:BF
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 018F9543E015DA3616C1A5882B00D878AC41
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Myp3-dQghgDVccNg2NsBHmTeeb8.roa
Signing time: Mon 20 May 2024 09:10:04 +0000
ROA not before: Mon 20 May 2024 09:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199978
IP address blocks: 193.8.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:43:e0:15:da:36:16:c1:a5:88:2b:00:d8:78:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: May 20 09:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=332a77f9d4208600d571c360d8db011e64de79bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:52:79:cd:32:4b:67:06:50:d3:4b:a3:ef:
9d:f0:9e:b6:be:51:d0:fa:1b:d6:9a:cb:f3:59:81:
4b:73:cd:1f:33:93:d6:e3:fa:0b:82:ac:b8:8e:65:
b7:87:08:e6:74:41:ed:cc:68:9f:f7:fc:e1:b6:ae:
bf:f4:bc:29:5d:7f:47:b2:30:32:37:df:f4:1a:c0:
0b:96:0b:57:0b:a8:c3:4c:94:e4:eb:d7:d3:8c:84:
0f:6e:29:e7:ac:42:b7:80:2b:02:ef:57:4d:2f:36:
7e:e6:72:55:5f:bd:63:de:61:a6:71:24:43:93:c1:
1a:0e:d1:3d:7d:4f:7a:99:85:e2:ca:c1:8b:32:d1:
c9:f7:b0:74:cb:54:31:8d:55:67:7b:4d:c7:c0:d3:
58:71:53:ae:97:04:6e:58:af:e0:b5:49:1c:67:b3:
cf:98:d1:9d:c5:0f:8a:7f:e9:68:30:3a:30:b9:10:
00:34:cb:60:9f:c9:ca:98:1f:98:bf:6e:de:a5:04:
2e:87:41:a5:41:44:5e:fd:37:52:d2:cb:65:d3:17:
65:ce:68:19:5c:ec:f3:0f:0e:ce:b4:75:57:d9:5a:
4a:17:3e:60:ee:b9:e2:15:87:fb:bb:83:82:cf:f9:
00:d1:9d:74:70:2f:e6:9f:06:32:d4:9d:6b:51:78:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:77:F9:D4:20:86:00:D5:71:C3:60:D8:DB:01:1E:64:DE:79:BF
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Myp3-dQghgDVccNg2NsBHmTeeb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.54.0/23
Signature Algorithm: sha256WithRSAEncryption
25:e9:11:bb:b1:af:56:9d:f7:93:1c:f0:b6:16:17:aa:85:43:
25:b7:0b:45:19:00:d3:4b:7d:85:4f:85:0e:cc:bf:b5:f4:15:
95:e3:84:1f:b3:9e:5f:85:17:d7:58:aa:b7:ad:cc:1d:67:2f:
49:42:8b:b1:9d:ac:94:4c:a5:aa:ee:e8:0b:65:85:b7:66:1e:
b9:44:fd:7f:0c:29:10:19:b1:86:0c:55:82:92:eb:1f:e8:6f:
c8:d0:1e:26:5f:6b:25:39:c7:3a:72:47:18:b4:c7:41:6b:bf:
2e:c1:1d:f1:81:1d:df:54:cb:78:b0:0d:3b:73:bc:92:c7:e4:
a2:4b:39:20:0a:3f:df:cc:c4:09:0e:7d:d1:1a:65:df:63:a2:
d2:e4:15:38:df:4b:90:9d:3c:17:95:55:70:d2:58:14:98:1d:
d0:67:e5:f9:26:22:1c:29:e2:55:3f:ef:fd:0b:7e:97:fd:8d:
af:e2:97:0b:92:d0:21:db:1a:1a:d9:4b:ae:19:ed:a6:c2:d0:
f0:03:84:fe:ce:71:cd:47:75:4c:46:aa:74:36:82:57:c2:bb:
65:2f:56:f1:e5:b8:db:75:3b:51:2f:c8:39:e3:c3:50:46:ec:
0e:bd:b9:69:b3:72:9c:15:43:c1:9b:aa:2d:63:a9:19:16:f6:
8d:e6:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:27:18 2024 by rpki-client on console-ams.rpki-client.org