Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/tnwYezzwZ0rGYG5_9HikvICInNo.roa
File: tnwYezzwZ0rGYG5_9HikvICInNo.roa (raw, json)
Hash identifier: F7k5wbIpwjKtur0G0WOUIIZvIjMkAtbreB0XT46JyK0=
Subject key identifier: B6:7C:18:7B:3C:F0:67:4A:C6:60:6E:7F:F4:78:A4:BC:80:88:9C:DA
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 018CC500FDB4A5DB833ABE33D920F917F56F
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/tnwYezzwZ0rGYG5_9HikvICInNo.roa
Signing time: Mon 01 Jan 2024 12:30:25 +0000
ROA not before: Mon 01 Jan 2024 12:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64073
IP address blocks: 45.80.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fd:b4:a5:db:83:3a:be:33:d9:20:f9:17:f5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b67c187b3cf0674ac6606e7ff478a4bc80889cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:bb:38:c7:da:c3:c4:51:07:72:58:e0:b0:
d5:cf:c0:5a:80:58:5d:d1:30:c9:80:a6:5e:f6:be:
93:37:38:88:a1:c8:35:22:2a:ba:ec:40:3e:3d:58:
51:e4:c9:98:ba:e3:ea:13:15:e6:76:fc:4a:6c:7a:
88:73:7e:92:1b:94:1f:00:13:b0:c8:12:8e:2e:3f:
2b:38:4c:e2:51:53:e9:75:ad:64:b3:5a:81:46:a2:
90:f0:ba:bb:19:c3:d4:8a:29:73:52:13:00:aa:e0:
e5:91:1d:ba:38:8f:60:d8:13:e7:92:2c:f3:16:49:
80:42:fb:2e:22:56:3f:5b:f4:ff:cd:05:85:6b:88:
5a:b7:43:37:47:ee:03:24:e8:aa:4f:74:c4:7d:8b:
2c:15:70:96:9c:48:87:ff:8b:69:02:78:1b:72:a7:
00:49:d1:6f:2c:bb:04:bf:d6:b5:a5:d7:9f:d9:76:
5f:05:0f:46:09:63:d3:ad:c2:48:17:2f:c6:82:bd:
17:2f:1f:f5:a6:5e:88:69:50:12:7e:e2:65:22:37:
c8:68:1c:fd:93:0e:ff:93:78:ed:b5:85:73:0e:95:
3c:b2:4e:a8:84:6f:06:e9:e7:94:d0:17:ca:77:64:
a9:6d:72:dc:2a:f9:22:07:a6:a3:78:45:d1:c8:fa:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:18:7B:3C:F0:67:4A:C6:60:6E:7F:F4:78:A4:BC:80:88:9C:DA
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/tnwYezzwZ0rGYG5_9HikvICInNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ca:c0:c5:88:f0:43:bb:d0:42:a6:21:dd:e7:65:02:0d:46:
07:ab:d1:53:7d:e2:da:1c:57:0d:c6:7b:e5:10:07:5e:97:e0:
5d:2a:1b:74:33:d4:dd:2f:52:78:a4:f3:58:09:a3:34:d4:e8:
7f:37:29:2e:9b:48:b8:25:9a:65:c6:c3:36:b5:a6:9c:0a:36:
3e:a4:ec:7b:71:6b:06:00:47:fa:2c:f7:3b:7c:a6:c4:3e:f3:
84:5d:13:cf:82:21:c5:6c:0e:1d:9e:b2:d9:25:d7:80:d4:ca:
e1:78:6a:22:e7:97:b6:44:6b:af:bd:0a:4e:c6:97:f0:b9:d3:
da:5a:5d:77:31:81:23:2b:c9:4b:9f:d2:97:e5:23:b4:cc:ec:
40:cd:38:75:47:a7:be:d5:7e:34:ba:ce:2a:5d:df:2a:79:8e:
22:e7:c7:d5:c2:b2:cc:c1:88:ad:0d:37:96:47:f4:1a:b9:65:
7f:04:19:8c:ac:d5:1f:e0:6b:3b:40:ec:5a:8b:c6:49:65:f5:
da:45:94:1b:c6:05:f4:9e:9e:2e:65:66:6c:63:57:a3:97:aa:
1e:24:65:84:09:3d:ec:ce:79:3a:70:c9:11:6e:2d:d2:c0:a0:
8f:c7:41:8d:ce:ea:09:c7:39:65:be:4c:d5:c0:09:dd:ed:67:
79:03:d4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 04:38:00 2024 by rpki-client on console-fra.rpki-client.org