Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/TVmZWoq_PxJkUvWG93LTu_fIjUE.roa
File: TVmZWoq_PxJkUvWG93LTu_fIjUE.roa (raw, json)
Hash identifier: Fr+JAWlqUP0mtF4kPrz/g+rEXLYTPqXvfAlk7mTrc5g=
Subject key identifier: 4D:59:99:5A:8A:BF:3F:12:64:52:F5:86:F7:72:D3:BB:F7:C8:8D:41
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8B8A807320B49748C84AC6F9C3B0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/TVmZWoq_PxJkUvWG93LTu_fIjUE.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198851
IP address blocks: 193.192.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8b:8a:80:73:20:b4:97:48:c8:4a:c6:f9:c3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d59995a8abf3f126452f586f772d3bbf7c88d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:20:94:d1:b1:41:36:ab:8c:ba:fb:2e:7d:
e1:17:89:93:a9:00:f6:09:d1:20:73:07:89:b5:ae:
ce:d4:4a:74:f2:c5:60:85:ea:8b:dc:9a:52:79:a7:
9a:bb:39:3f:99:31:d0:55:50:fb:dc:fe:6c:00:78:
ae:71:c9:d0:ae:bc:cf:57:a6:73:07:3e:95:d6:19:
da:56:f1:10:c7:b8:bc:df:32:6f:47:d0:78:94:3f:
b2:ce:8d:46:c1:89:63:b0:05:58:6e:95:21:55:0a:
ae:a4:c2:ae:30:7c:f2:10:ed:b7:f6:4e:cb:2e:09:
24:98:11:66:a7:11:5f:8a:c6:2a:e7:b6:b5:d6:2c:
69:e4:1b:bd:5c:82:71:ff:e4:ef:0a:7c:6d:9d:75:
7b:d9:51:98:3a:6c:49:49:b3:9b:e5:78:59:fd:e9:
33:62:ac:00:a1:c7:ee:d0:d1:1e:22:a6:6a:31:4f:
e2:72:cb:3f:4e:e1:98:a6:e1:65:a6:22:3e:02:72:
4b:be:cc:46:f9:f5:e2:52:28:50:4e:5f:ac:6e:f3:
77:11:11:27:71:4f:2f:3a:ca:aa:60:40:17:3f:ab:
ec:02:8e:02:c2:67:d4:a4:3a:4b:5f:4f:5a:14:38:
f2:d3:a3:19:be:50:a0:2f:61:33:eb:2b:5b:ad:c1:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:59:99:5A:8A:BF:3F:12:64:52:F5:86:F7:72:D3:BB:F7:C8:8D:41
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/TVmZWoq_PxJkUvWG93LTu_fIjUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.168.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b6:88:5f:da:56:1e:15:3c:7e:85:15:61:d7:af:e0:d3:3c:
d5:c6:92:0c:73:95:50:ac:ce:45:a0:a4:e1:dd:02:34:27:86:
64:bf:8c:14:47:62:8b:cd:f5:32:6b:60:0c:47:f7:0a:9d:18:
80:84:9e:4a:fa:5f:f6:aa:d8:04:b3:58:c3:72:d1:65:6a:7b:
7c:99:1d:09:f5:18:65:92:60:77:45:36:92:6b:0b:28:95:2a:
bb:2c:85:ad:64:41:a1:9c:e5:32:9a:8c:5d:6e:49:cd:4f:64:
cf:3f:b1:d7:8d:e0:ba:71:5c:95:83:5e:7b:a1:8e:3c:c3:47:
ff:29:2a:ef:44:05:c4:d9:13:4f:d3:a8:bd:e9:85:85:d3:17:
c6:36:73:1a:39:07:9c:f1:57:4f:d1:44:45:4e:25:ee:7f:9e:
56:80:4b:5d:cd:37:ea:70:6d:f6:7a:23:d0:da:df:43:b2:c8:
a8:d2:bc:16:46:1d:c5:8d:30:41:41:93:93:8c:a2:d2:04:aa:
15:25:ae:a4:c7:d2:b8:74:42:dd:f0:31:25:35:a1:dd:26:7f:
19:15:51:67:da:6c:a5:55:7b:f6:3f:4a:82:37:dc:9b:3e:f4:
25:ad:90:67:1e:06:87:c0:12:da:4d:b8:c5:b5:59:7f:f1:3d:
78:07:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org