Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/T-sU7hKy8e8CiFC_CKa2XdQrp3c.roa
File: T-sU7hKy8e8CiFC_CKa2XdQrp3c.roa (raw, json)
Hash identifier: Bokjsf3IvQwOf0gg7fQ9RPN94MsuKh2ZZGHJVoYHMDs=
Subject key identifier: 4F:EB:14:EE:12:B2:F1:EF:02:88:50:BF:08:A6:B6:5D:D4:2B:A7:77
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA8D8BB38712B7F534C7A451C6F44
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/T-sU7hKy8e8CiFC_CKa2XdQrp3c.roa
Signing time: Tue 02 Jan 2024 04:30:10 +0000
ROA not before: Tue 02 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47377
IP address blocks: 93.185.160.0/23 maxlen: 24
45.93.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a8:d8:bb:38:71:2b:7f:53:4c:7a:45:1c:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4feb14ee12b2f1ef028850bf08a6b65dd42ba777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:ca:63:89:c2:d9:1f:c1:46:e1:05:7b:32:
6d:3b:08:1d:cb:64:35:7c:39:bb:81:e8:24:cb:eb:
36:46:98:3c:f7:cf:be:05:e0:f9:03:1e:b0:5e:90:
2e:0f:0f:94:18:bf:50:b5:6b:51:f5:80:c6:3c:f4:
a2:86:60:6c:27:54:ad:1a:c0:49:5b:67:0d:6f:25:
fa:59:77:76:77:e3:c3:51:3c:b9:82:2f:e4:25:ca:
0c:96:be:20:5b:98:06:bb:58:c1:8b:aa:d7:81:36:
5a:42:6a:76:d1:ee:38:c5:46:13:b4:da:5e:03:1a:
0d:a8:91:85:fb:48:1d:c4:a3:bb:b1:c9:6d:6e:bf:
6e:9b:74:59:d6:98:dc:15:ed:62:a9:b2:4c:e1:70:
e7:df:91:15:66:b0:00:0c:b0:99:8d:30:27:5b:bb:
68:e0:ad:4d:76:27:55:e4:a5:56:bd:7c:0e:a3:a9:
a6:51:aa:bf:ec:95:59:d0:a3:a4:51:c7:61:e7:b2:
28:64:f5:13:e1:11:4a:8e:4d:ad:0b:f1:b8:4c:1c:
ad:ca:ea:8e:a1:84:7e:a8:fc:ed:2f:11:d4:ed:27:
d1:8a:b8:6d:58:96:ba:9b:50:46:fe:07:66:78:1d:
4f:77:1f:61:82:61:e2:a5:a3:ac:1e:69:1a:ac:51:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EB:14:EE:12:B2:F1:EF:02:88:50:BF:08:A6:B6:5D:D4:2B:A7:77
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/T-sU7hKy8e8CiFC_CKa2XdQrp3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.164.0/23
93.185.160.0/23
Signature Algorithm: sha256WithRSAEncryption
81:27:ca:d1:44:65:59:37:55:0d:b9:57:e0:70:f5:53:5c:a3:
5c:0a:17:d6:d5:b7:d8:82:5b:31:87:03:0c:6f:93:cf:cd:8b:
93:e3:df:11:be:89:3c:31:a7:87:93:44:25:1f:b9:aa:40:a1:
b6:bd:97:53:3d:68:c8:9c:92:1c:3a:9b:77:4e:41:5c:ca:b2:
97:4d:1c:8f:34:ab:19:19:2d:15:52:a7:19:5b:79:65:c1:48:
7e:d8:28:ef:a6:ce:66:a0:fc:44:c6:b7:3f:23:46:93:b1:d9:
b3:7a:a7:28:82:3d:78:8d:3c:da:2c:9e:c1:19:f6:23:86:f4:
b9:24:c6:70:ff:79:11:e9:bf:7d:eb:25:59:49:a4:0d:4e:56:
d0:2d:9e:3e:2d:f4:88:dc:a1:87:e7:e8:73:a6:ab:0b:55:e1:
1b:6b:1e:58:aa:33:3c:b7:ad:07:68:27:54:f4:71:14:6b:3d:
89:b3:52:f8:aa:8d:2d:d7:37:85:3e:94:3a:be:d3:ab:e7:82:
3b:3d:09:ae:b3:56:14:76:32:39:5e:84:5f:e0:bc:b7:b5:3d:
79:5a:ff:9d:24:6d:29:d2:b2:41:2c:1d:4f:fc:2f:60:c3:e9:
e9:ee:ce:37:e0:3a:26:18:4a:9b:d9:47:5f:21:52:18:1e:56:
f1:29:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:56:50 2024 by rpki-client on console-ams.rpki-client.org