Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/TM9SvkiU-ue3UUcXwbJuhGKMjZY.roa
File: TM9SvkiU-ue3UUcXwbJuhGKMjZY.roa (raw, json)
Hash identifier: xcfYevbju5tPkL6+BrJCHtmUIUxxqHkqbCw8jsLavkU=
Subject key identifier: 4C:CF:52:BE:48:94:FA:E7:B7:51:47:17:C1:B2:6E:84:62:8C:8D:96
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018D64405E5A4E1AD22B3EA787F50DC31FF1
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/TM9SvkiU-ue3UUcXwbJuhGKMjZY.roa
Signing time: Thu 01 Feb 2024 10:39:16 +0000
ROA not before: Thu 01 Feb 2024 10:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.225.225.0/24 maxlen: 24
188.191.96.0/24 maxlen: 24
188.191.107.0/24 maxlen: 24
193.3.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:40:5e:5a:4e:1a:d2:2b:3e:a7:87:f5:0d:c3:1f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 1 10:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ccf52be4894fae7b7514717c1b26e84628c8d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:4d:5a:e6:3e:ce:a2:26:1d:84:75:6f:a5:
6b:01:96:5c:5c:ee:c6:c8:ae:8f:49:d5:f6:99:2a:
b8:81:71:6c:76:f2:bb:0f:f0:94:a2:f4:98:e2:b4:
7b:2b:ea:d2:0b:fc:2e:54:6e:06:89:5d:89:a7:68:
98:0b:96:3d:b9:f6:32:17:20:1e:47:d6:6e:5f:6e:
02:5a:75:80:c8:9e:7e:2b:64:8b:af:05:f3:c9:2d:
a0:ad:e6:5f:62:7c:52:35:5c:09:ce:1f:76:f4:8d:
be:be:19:9d:68:52:57:38:aa:64:d9:f7:5b:04:97:
68:0c:4b:d2:e8:2c:ac:e4:fc:24:d7:32:fd:05:a1:
66:1f:e5:c6:1f:a5:b6:3d:4f:1a:c9:7e:28:13:01:
a6:7c:f1:bd:b9:00:68:61:a0:04:0c:76:7b:f8:b0:
00:ac:c1:86:9e:d4:bf:4b:6e:9b:f8:a4:0f:cb:d5:
9e:27:58:17:f0:46:5f:37:b4:a5:f9:b5:99:86:2f:
af:56:1f:c5:7f:79:52:0f:96:86:91:cb:f7:3f:8f:
7e:b5:83:95:f9:a1:ca:e2:02:f8:97:6b:9e:a4:41:
3f:eb:39:49:f4:7a:79:80:d9:06:07:5d:a5:29:ff:
3b:90:d8:8f:f4:0d:93:72:31:97:5d:6f:5b:a4:7f:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CF:52:BE:48:94:FA:E7:B7:51:47:17:C1:B2:6E:84:62:8C:8D:96
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/TM9SvkiU-ue3UUcXwbJuhGKMjZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
188.191.96.0/24
188.191.107.0/24
193.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:82:e1:3f:82:6d:e0:1d:25:d6:fa:d6:ba:a6:61:c7:e1:b9:
05:dc:d7:5e:7a:ad:b3:1d:6d:44:8a:f2:0b:cd:e2:3c:c9:a7:
46:e8:6b:7a:eb:0d:e4:40:2f:79:48:87:49:f3:b1:44:59:a2:
82:7a:fd:ec:d7:1f:fa:d3:56:1b:a0:64:09:36:df:c2:f8:ec:
4b:52:26:e3:2c:2a:2f:68:f9:df:7b:6b:36:6b:95:a7:a0:2c:
9c:d9:bb:de:2b:f6:fd:88:96:fd:dd:49:b3:42:20:21:0c:29:
78:0f:10:b7:6f:c2:e8:66:33:57:6c:ed:0b:45:1e:3c:43:a7:
1c:fe:27:08:51:fb:88:69:f8:a4:6c:70:7a:34:73:02:d1:0d:
a0:6a:3e:d7:14:32:e6:9f:6b:b4:d1:f1:36:71:74:c5:1c:32:
c3:37:1c:70:b7:84:1c:ef:9d:c1:86:2d:eb:dc:71:4e:fb:ba:
51:2d:2a:6b:21:74:9b:c2:40:ae:1e:d6:fd:d2:14:2a:d0:cb:
a5:fb:e3:70:1f:cf:19:61:a1:cb:37:83:f1:7e:ba:2e:cd:30:
34:a2:11:12:85:31:d0:66:ef:32:d0:58:9b:76:af:33:b3:76:
90:d1:e7:59:aa:a5:d8:24:81:5c:91:65:5d:83:6b:20:30:86:
c3:cc:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:07:38 2024 by rpki-client on console-fra.rpki-client.org