Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/tiMAzBIztzBTAe0qj84xIYBvQKc.roa
File: tiMAzBIztzBTAe0qj84xIYBvQKc.roa (raw, json)
Hash identifier: 5d8ZpHPrpO1Q7JddTXn+4CK4BjcqhwkPPgVamwwOCXs=
Subject key identifier: B6:23:00:CC:12:33:B7:30:53:01:ED:2A:8F:CE:31:21:80:6F:40:A7
Certificate issuer: /CN=91a1173a70e41f4593547669ada22f0d7f68f354
Certificate serial: 018CC7943153B8875CB3ABC60B2AE7746063
Authority key identifier: 91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/tiMAzBIztzBTAe0qj84xIYBvQKc.roa
Signing time: Tue 02 Jan 2024 00:30:26 +0000
ROA not before: Tue 02 Jan 2024 00:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209509
IP address blocks: 152.89.176.0/22 maxlen: 24
152.89.176.0/24 maxlen: 24
152.89.177.0/24 maxlen: 24
152.89.179.0/24 maxlen: 24
152.89.178.0/24 maxlen: 24
2a09:3345::/32 maxlen: 32
2a09:3341::/32 maxlen: 32
2a09:3344::/32 maxlen: 32
2a09:3342::/32 maxlen: 32
2a09:3343::/32 maxlen: 32
2a09:3347::/32 maxlen: 32
2a09:3340::/29 maxlen: 32
2a09:3340::/32 maxlen: 32
2a09:3346::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:31:53:b8:87:5c:b3:ab:c6:0b:2a:e7:74:60:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a1173a70e41f4593547669ada22f0d7f68f354
Validity
Not Before: Jan 2 00:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b62300cc1233b7305301ed2a8fce3121806f40a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:32:ba:37:26:68:53:17:44:ea:a2:30:b3:
69:4b:3f:e2:23:2e:46:a6:66:f2:dc:f5:c6:f9:13:
11:b3:2d:95:fa:f0:18:c0:4b:f8:7a:df:a9:3e:04:
93:c1:fb:2c:b0:b0:06:14:54:70:5d:d9:46:0d:14:
92:69:eb:8c:fa:a1:80:2b:07:8d:f1:ef:ff:cc:eb:
28:aa:8b:6f:cd:04:e0:9f:ba:82:fb:84:0e:41:b2:
fa:26:f1:ba:d1:56:5d:8e:bc:49:a2:8d:2f:82:6f:
ed:f9:54:b5:38:67:bd:b9:1c:e9:03:35:57:e1:e0:
2b:6d:76:b1:2c:94:04:47:ba:cf:9e:13:80:09:34:
b7:f6:0d:65:61:ea:28:b5:21:e6:69:8b:55:1b:b8:
4e:b5:8c:76:3b:ca:8c:df:59:31:e4:f7:4b:8d:da:
ae:cb:ef:3d:f9:5d:bd:2c:a0:0a:ea:2f:b0:8c:21:
cb:65:87:3a:f8:6a:11:ab:df:ab:1d:6b:72:c2:a3:
c0:65:8f:b0:6d:23:69:2c:73:bd:b4:8c:a7:da:81:
81:36:07:e0:87:74:66:89:90:09:7a:30:1d:dc:a0:
ac:fc:05:15:ee:3a:14:3b:b6:96:31:9f:7e:6d:f9:
73:9a:f5:6a:96:4c:dc:33:ad:95:8f:e5:a8:76:ad:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:00:CC:12:33:B7:30:53:01:ED:2A:8F:CE:31:21:80:6F:40:A7
X509v3 Authority Key Identifier:
keyid:91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/tiMAzBIztzBTAe0qj84xIYBvQKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.176.0/22
IPv6:
2a09:3340::/29
Signature Algorithm: sha256WithRSAEncryption
6e:91:ee:26:b6:64:66:40:3f:63:0c:9e:39:ad:aa:81:59:70:
b0:a4:54:86:5b:c7:d1:23:53:ef:c1:67:43:af:33:5e:6d:24:
b1:fc:c9:bc:4a:58:47:b4:15:ad:f6:68:a8:74:52:eb:1d:f8:
b2:ce:3f:fb:b4:b2:6d:48:6d:be:61:3d:39:1b:ac:46:4a:c6:
32:1a:70:f9:85:ce:62:d0:f6:9e:23:1f:9b:f1:3d:f5:db:c3:
de:ca:a0:2b:18:6a:81:7d:b4:73:9e:51:af:3c:6d:88:f7:10:
93:37:fb:b8:f2:6d:a1:30:2b:a3:56:c1:3f:d1:8f:12:90:c0:
13:10:4b:3c:fe:b3:65:41:b7:a1:80:6f:4b:ea:60:be:59:40:
83:d6:18:1f:44:2b:fe:70:52:bb:aa:19:0e:ff:d0:92:01:af:
df:b3:a2:e8:b6:20:db:33:13:26:4a:56:44:03:c1:de:7a:9b:
1b:92:7f:cd:e8:e0:63:2e:b8:c6:9d:60:e9:0a:66:40:0d:81:
49:49:80:e2:19:3e:e7:2f:2a:db:16:51:33:05:f6:f2:c2:56:
ab:79:a2:da:3e:e3:85:4b:f3:08:52:d2:2d:46:d5:37:ed:cc:
1c:d4:32:80:2b:bf:aa:2a:a9:e1:78:7e:7f:c1:02:21:67:ec:
50:2a:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:36:15 2024 by rpki-client on console-ams.rpki-client.org