Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/tsMKOfp5FQSk2DHV9V4-JnSn994.roa
File: tsMKOfp5FQSk2DHV9V4-JnSn994.roa (raw, json)
Hash identifier: Bs5lKADlxoo8zP2tgGPBAp2MrCVsS+hGlz9tk+gY2Us=
Subject key identifier: B6:C3:0A:39:FA:79:15:04:A4:D8:31:D5:F5:5E:3E:26:74:A7:F7:DE
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018FF2FF48AF72A7C305C474C0659C148575
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/tsMKOfp5FQSk2DHV9V4-JnSn994.roa
Signing time: Fri 07 Jun 2024 13:59:27 +0000
ROA not before: Fri 07 Jun 2024 13:59:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216084
IP address blocks: 2001:728:1407::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:ff:48:af:72:a7:c3:05:c4:74:c0:65:9c:14:85:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jun 7 13:59:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c30a39fa791504a4d831d5f55e3e2674a7f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:4b:c5:08:47:94:5d:60:54:f6:24:bb:3c:
88:1e:f7:4e:11:60:c9:35:f4:2f:8f:bd:e8:d0:ad:
9f:f3:1b:19:d0:d5:f9:4d:36:54:a6:d3:c9:4f:c1:
b1:d2:e4:37:4b:c3:88:06:fb:4c:95:0b:f3:44:84:
25:4c:e5:bf:72:71:b4:95:d6:7a:4b:61:c6:64:de:
fb:59:d4:dc:5b:bb:f8:66:54:d6:b9:6d:0d:56:17:
ec:5f:7c:6f:f5:f6:4d:a6:c1:4c:06:0c:97:b6:b3:
78:80:9d:99:71:99:8f:25:e4:23:b6:9d:b6:93:4e:
8d:b1:0f:52:80:34:b3:be:cf:db:e0:b7:0e:de:a6:
89:21:7e:52:e6:ab:0e:42:14:ff:1f:2e:d5:30:80:
2b:69:a4:61:dd:84:ba:46:ae:51:3e:00:e9:84:4b:
78:15:56:d4:00:2f:94:fb:81:12:fe:d0:f1:ab:45:
d2:05:0f:e3:2e:eb:4f:88:46:94:d9:ea:ba:61:40:
24:14:01:a5:bc:c0:6b:82:c5:60:f8:6b:de:94:2e:
0c:88:49:51:b7:0a:7a:db:a4:1a:32:af:86:4c:38:
15:04:8c:9a:77:b6:85:90:1d:95:e3:b1:69:49:79:
54:15:b4:a0:59:8f:85:94:be:e7:cb:56:91:fd:5d:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C3:0A:39:FA:79:15:04:A4:D8:31:D5:F5:5E:3E:26:74:A7:F7:DE
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/tsMKOfp5FQSk2DHV9V4-JnSn994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:728:1407::/48
Signature Algorithm: sha256WithRSAEncryption
3a:2e:80:46:31:2e:17:28:b4:66:08:76:75:fc:29:92:c3:77:
ff:47:b8:58:41:e9:10:10:b5:be:72:17:5e:28:16:2c:0b:ff:
0f:8e:68:4b:ba:ee:3f:9e:98:f0:b3:37:77:37:97:2d:40:7a:
ac:cc:2b:de:55:fb:0d:9c:5a:10:35:b1:24:38:28:4d:3b:bd:
09:93:24:d7:c7:94:e7:79:48:a4:0b:6c:b2:fd:1b:cd:3a:46:
22:b8:64:99:87:e1:a5:91:ef:6e:9b:60:4f:bb:84:2d:68:97:
7f:e1:73:19:9e:1c:8c:63:88:0c:c2:66:9d:4d:4d:50:f9:ea:
e4:79:d6:67:f4:6a:2b:cb:22:ed:c7:72:48:75:11:4d:2c:28:
fe:49:64:71:e9:09:f3:ad:24:ba:ee:37:e8:19:f4:a0:e3:6f:
e5:b5:56:4e:4f:fb:88:f8:5b:ed:35:e5:e8:50:45:03:4f:79:
08:df:13:57:92:24:f0:34:7e:b2:ed:98:25:e0:71:36:23:7e:
9f:b2:c4:9d:85:bc:8f:a1:3b:3e:8e:b8:ac:9e:ef:bb:17:44:
f0:2d:0a:dc:42:73:06:55:21:f3:82:34:e2:f8:7b:45:07:b6:
11:09:45:21:ad:ff:b1:64:31:64:1f:c7:09:81:43:24:70:cc:
37:90:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:27 2024 by rpki-client on console-fra.rpki-client.org