Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/TnXiK3wEakRb3C-3hLbW9Lja3F4.roa
File: TnXiK3wEakRb3C-3hLbW9Lja3F4.roa (raw, json)
Hash identifier: HFDJXM+gYAYjdKFwUHzB5U2kheYWN6BUX3duugsdhsg=
Subject key identifier: 4E:75:E2:2B:7C:04:6A:44:5B:DC:2F:B7:84:B6:D6:F4:B8:DA:DC:5E
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC727736E8C59D51307EFD87E8020A74B
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/TnXiK3wEakRb3C-3hLbW9Lja3F4.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9162
IP address blocks: 82.179.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:73:6e:8c:59:d5:13:07:ef:d8:7e:80:20:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e75e22b7c046a445bdc2fb784b6d6f4b8dadc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:6a:ad:65:a3:1e:00:50:cd:02:b1:7c:cd:
8e:97:05:24:bc:19:86:da:11:31:40:b5:ed:d2:d1:
4f:b7:51:fd:be:1f:cf:6a:24:03:33:29:e7:2f:bc:
e0:44:77:60:18:26:da:a1:ff:6e:40:fb:ed:cb:8e:
a7:1e:ac:70:bc:e6:42:b9:65:bb:c6:00:cb:bf:88:
e8:7a:3e:54:a8:a9:de:7b:cf:57:93:25:eb:cc:3a:
81:9c:ef:c1:3c:97:e6:6c:95:1f:86:c0:5d:90:d3:
fa:2b:3c:ba:4a:ef:76:8b:8e:33:34:5f:d8:92:2a:
83:99:5b:1f:32:39:17:e0:cd:9d:2d:4c:21:e4:c9:
fb:8e:4b:7b:ef:76:d6:9c:e9:05:ec:e8:bc:0a:77:
57:41:03:7c:06:f9:c2:47:bd:fd:34:77:1c:f3:ef:
22:06:c4:47:16:d0:92:bc:f8:6b:0a:97:9c:63:3b:
b6:cc:f7:d0:d6:09:59:e3:c8:5d:40:70:bd:12:de:
d4:f0:a8:2e:5f:76:a3:8d:f7:e6:69:ad:b0:e1:09:
04:bb:03:76:b6:e8:89:02:4e:67:ca:56:73:c6:9a:
8b:5e:d4:c5:1f:6b:79:11:4e:a6:5a:3e:9e:ea:40:
cf:51:13:4b:7f:5f:0b:8e:7a:e1:80:47:cf:92:f5:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:E2:2B:7C:04:6A:44:5B:DC:2F:B7:84:B6:D6:F4:B8:DA:DC:5E
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/TnXiK3wEakRb3C-3hLbW9Lja3F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.144.0/20
Signature Algorithm: sha256WithRSAEncryption
66:d3:ba:74:b4:ff:66:1c:4f:8b:22:34:2c:aa:47:3d:d2:b9:
bf:f3:f8:dc:88:e3:69:f5:cd:ea:15:f3:64:30:56:14:9e:ed:
e4:7c:69:38:f0:32:dd:1a:b5:3d:ae:17:ae:86:45:5e:4d:5c:
41:f0:1f:f5:17:97:f5:bf:e0:f8:f6:e1:e5:48:cf:23:0c:f5:
a8:46:e1:b3:ff:2b:9c:65:43:e2:67:b9:2c:85:1d:51:80:29:
60:8d:c6:46:2b:4f:3e:a2:c9:aa:ac:05:34:b2:ca:03:91:4c:
6f:76:47:de:85:2f:56:65:05:c0:b3:cb:ff:6c:f9:b1:85:79:
df:49:5b:10:66:7f:5b:a5:1b:7f:d2:92:91:2e:95:f0:2a:d8:
60:9d:4c:39:e5:07:4d:b8:01:6e:da:5b:78:6b:c7:c4:b9:ce:
a1:67:24:57:68:f1:28:b7:4d:61:06:90:6b:e9:b0:a9:47:e6:
62:7c:8f:d9:38:3c:d7:bf:4e:41:1d:74:46:cd:30:cd:18:e4:
bb:64:8f:1a:71:48:4f:3b:b6:05:18:55:5f:5f:de:6c:6a:85:
b9:3c:f6:23:86:e9:dd:10:0a:29:a8:bb:30:fe:4c:1e:ef:7e:
30:36:bf:7a:49:0e:60:a4:2c:92:6c:b0:a6:44:28:c5:d5:3c:
49:78:6f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:27:48 2024 by rpki-client on console-fra.rpki-client.org