Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TS3l6ECp39F4QOZzYRCDWU_E44M.roa
File: TS3l6ECp39F4QOZzYRCDWU_E44M.roa (raw, json)
Hash identifier: B2nqSV7jlM7DV5h+IYOJ605UBpucAtPiw3vwOjW40Is=
Subject key identifier: 4D:2D:E5:E8:40:A9:DF:D1:78:40:E6:73:61:10:83:59:4F:C4:E3:83
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649F11B8048E95CFD1C78C389255E97
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TS3l6ECp39F4QOZzYRCDWU_E44M.roa
Signing time: Mon 01 Jan 2024 18:29:43 +0000
ROA not before: Mon 01 Jan 2024 18:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210024
IP address blocks: 92.247.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f1:1b:80:48:e9:5c:fd:1c:78:c3:89:25:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d2de5e840a9dfd17840e673611083594fc4e383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:13:1d:d2:4d:c5:60:c2:d9:73:66:63:94:
91:da:40:bd:3d:f2:bb:b9:27:b0:e3:24:cf:1d:f4:
75:85:dc:9d:a4:40:e9:78:34:34:6a:73:73:66:62:
6b:3f:86:57:e4:8e:1a:21:74:7d:6c:0a:d5:18:3c:
77:7c:d1:f6:fb:b2:0b:49:d3:66:4a:fe:b0:fb:11:
17:d0:dc:43:4d:98:9f:70:0e:d4:dd:a0:7a:d9:07:
91:3d:e3:11:86:1c:e5:ca:b2:46:8c:9f:af:94:8d:
cf:42:26:51:7d:07:de:2c:95:8a:80:9d:98:ec:11:
6c:cc:fc:f5:f0:ed:53:3c:d2:bf:da:d2:61:f9:31:
b9:48:41:3c:26:8d:1c:f3:fa:6a:87:44:ae:a1:0b:
0e:3e:31:e5:13:55:16:b9:68:f6:78:df:a6:70:60:
eb:16:7a:4b:81:65:ed:c1:88:c3:a3:25:5e:0e:90:
9c:76:39:7c:8e:c6:4e:bb:cb:10:1c:ea:e0:3f:49:
43:de:e4:88:9c:dc:ba:55:c3:e0:49:96:be:1e:4f:
4a:58:b9:9e:15:4d:0d:67:e5:f8:1a:95:07:35:20:
6c:e2:3f:4a:ae:e5:ee:ca:5a:1e:d6:3c:c9:f5:c2:
d9:b6:cb:9c:68:c9:b9:d7:ae:03:22:7a:25:cc:83:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:E5:E8:40:A9:DF:D1:78:40:E6:73:61:10:83:59:4F:C4:E3:83
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TS3l6ECp39F4QOZzYRCDWU_E44M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.78.0/23
Signature Algorithm: sha256WithRSAEncryption
41:f2:a2:9c:fa:bc:0c:7c:24:98:0e:5a:8f:65:6e:78:ff:89:
05:08:db:02:ea:f6:cd:35:5c:92:8f:c0:a2:85:9d:b0:52:5f:
e6:30:8f:d4:b8:89:20:f8:41:09:e7:68:c6:33:87:d9:7d:a7:
6e:d5:29:65:b6:2d:f2:b2:ca:fc:fe:72:d2:bc:df:06:c1:e7:
b6:0a:b2:97:6e:d2:9a:95:1f:72:39:d6:65:05:55:2d:19:4e:
95:dc:d8:77:f7:70:2a:5a:04:d0:70:a6:f4:e8:77:a8:d9:7b:
e6:e3:07:c5:f2:0c:22:f2:a4:54:28:b8:e7:29:2d:73:05:84:
6f:a5:9e:e8:85:52:71:d5:e8:0f:fe:27:5e:44:aa:2f:a6:aa:
5f:26:09:d1:8f:fb:8d:e5:16:e5:f9:d8:17:19:ee:62:a8:36:
e7:c1:26:33:ad:34:86:ee:ca:24:b2:dc:6a:37:29:db:36:0a:
5f:43:f9:be:55:e6:99:7b:03:35:e2:a2:32:91:71:89:fe:0a:
ac:db:59:b4:42:d6:3e:5c:9d:e5:7d:ee:80:32:a8:59:05:15:
52:a0:94:5a:98:80:dc:b4:69:40:9e:9e:88:14:fc:78:9b:1b:
76:12:0a:13:2d:ca:d7:25:d8:89:f7:53:58:9a:e8:9f:2e:7e:
71:e8:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:32 2024 by rpki-client on console-ams.rpki-client.org