Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/TVFVaBS_ULC6deJQNTpVOhh2Qjk.roa
File: TVFVaBS_ULC6deJQNTpVOhh2Qjk.roa (raw, json)
Hash identifier: qke1z3fo1NDSyTTFJuDdm1hNJ3au8tOul7ma+L+oFIA=
Subject key identifier: 4D:51:55:68:14:BF:50:B0:BA:75:E2:50:35:3A:55:3A:18:76:42:39
Certificate issuer: /CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Certificate serial: 018CC8DE3206000F2C51F3045662514F82BC
Authority key identifier: F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/TVFVaBS_ULC6deJQNTpVOhh2Qjk.roa
Signing time: Tue 02 Jan 2024 06:30:54 +0000
ROA not before: Tue 02 Jan 2024 06:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 91.198.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:32:06:00:0f:2c:51:f3:04:56:62:51:4f:82:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Validity
Not Before: Jan 2 06:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d51556814bf50b0ba75e250353a553a18764239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:6f:b3:13:b8:e2:56:53:4b:83:bd:3e:54:
1b:99:d2:c3:89:54:ad:d7:8f:7d:60:87:53:08:74:
8c:f9:fe:2e:b8:bf:e4:b7:52:ab:a5:47:79:25:89:
1e:d7:95:50:68:1e:49:e8:7a:13:8c:a2:2f:29:7c:
d8:b8:dc:bd:b0:b3:3a:dc:fb:31:e0:66:b1:fd:82:
e0:aa:91:56:0b:0d:f7:07:4f:5e:8e:6e:fe:67:98:
a2:78:93:bc:72:80:a4:3c:2d:b0:07:79:ee:9a:6a:
96:56:d4:63:86:2b:69:42:4f:19:a2:2e:97:ba:7c:
9c:28:63:b7:d5:5c:b2:e6:af:c7:b8:03:00:23:17:
05:86:cc:1c:4f:9e:9b:7b:1f:d4:49:fb:d9:7d:21:
2c:01:8a:33:45:53:eb:f3:6e:22:93:c9:ce:8f:bf:
21:1d:71:0d:d8:52:71:e6:98:4d:55:a2:f2:0b:53:
4a:23:95:6f:fc:29:1a:26:33:ad:c7:84:d7:34:f4:
0f:7a:57:1e:30:08:f2:dc:a8:88:d6:d7:5a:18:1d:
93:eb:bd:49:78:e6:a3:be:77:9e:30:3b:75:e5:23:
cc:5a:9b:03:9a:3f:f1:a3:fb:a3:46:03:ad:dd:2e:
1f:48:00:97:9f:ff:5f:b6:55:e2:39:e6:da:cf:b4:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:55:68:14:BF:50:B0:BA:75:E2:50:35:3A:55:3A:18:76:42:39
X509v3 Authority Key Identifier:
keyid:F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/TVFVaBS_ULC6deJQNTpVOhh2Qjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:12:ec:72:13:fd:3e:b9:36:27:0b:2c:62:73:1b:c6:e7:2e:
e5:05:98:c8:a5:10:e0:b5:75:81:e5:eb:2d:9c:da:df:02:e1:
bc:9d:5a:17:ad:3a:7e:f0:1f:65:36:7d:ad:88:15:22:d7:a0:
f7:5d:30:ec:6b:7c:f0:38:0e:c0:4e:d6:09:9a:66:96:21:91:
75:e9:15:e7:23:3e:ae:b1:83:db:04:71:c7:f7:4b:31:7c:4a:
05:5a:1a:d5:87:44:28:fc:35:f6:27:cb:ee:f6:d8:98:da:0d:
58:3f:36:0a:0f:0b:f3:6c:91:3c:65:73:5a:63:e2:3c:b4:8b:
5d:2c:f2:96:2d:9f:13:55:f4:3d:9c:1c:c5:a9:41:23:8a:4f:
43:31:f5:74:2b:f3:23:bd:d2:92:91:fd:87:fd:86:3c:45:c3:
44:fb:fa:36:c4:23:da:7e:65:1e:f2:05:0b:f0:2d:24:75:51:
79:a5:63:3d:ac:49:f0:ab:b8:b3:8a:3a:54:9c:0d:01:18:df:
5a:ed:0e:92:17:f5:23:33:c6:23:b1:d7:42:99:f6:1d:7d:9d:
46:a5:77:d6:a3:4c:be:0b:dd:34:a0:d1:84:d2:be:e0:77:64:
52:8a:65:c6:4f:6a:b4:85:3c:bc:0a:9e:f6:37:23:85:3d:23:
35:95:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:58:36 2024 by rpki-client on console-ams.rpki-client.org