Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/tv3gfeNWbekN6uk04WS39x8cTjI.roa
File: tv3gfeNWbekN6uk04WS39x8cTjI.roa (raw, json)
Hash identifier: uHjqPiJHQ1rMIGI97GglxBRMDLjm8Cn3gjA80uc1V6M=
Subject key identifier: B6:FD:E0:7D:E3:56:6D:E9:0D:EA:E9:34:E1:64:B7:F7:1F:1C:4E:32
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 018CC500B685F6EEC0E3B32BBC1935DE8D99
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/tv3gfeNWbekN6uk04WS39x8cTjI.roa
Signing time: Mon 01 Jan 2024 12:30:07 +0000
ROA not before: Mon 01 Jan 2024 12:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197684
IP address blocks: 91.201.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b6:85:f6:ee:c0:e3:b3:2b:bc:19:35:de:8d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Jan 1 12:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6fde07de3566de90deae934e164b7f71f1c4e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:a5:b3:80:b3:62:4e:53:cf:6a:ac:ff:fb:
d8:83:68:af:05:be:b9:63:24:59:d5:d5:64:30:9f:
14:04:50:63:35:80:3c:a2:66:7b:2b:e7:2e:2b:b0:
89:b7:b7:2f:09:37:cd:12:fe:d3:9f:f3:fe:c0:98:
a8:5f:03:7b:b0:10:dc:18:71:f7:01:ff:16:08:98:
71:3d:71:74:b4:6f:ff:08:2a:1b:5f:29:af:bd:44:
ca:84:51:2c:de:49:b1:d8:f9:4f:e4:63:8a:5c:30:
8a:b3:a9:b3:db:b9:90:e5:3a:3c:ea:a5:ce:77:db:
ef:19:13:69:09:15:9e:98:06:3d:c0:8b:35:53:84:
f1:ae:39:e1:ae:83:d1:84:32:07:30:70:43:9e:6c:
cf:c8:df:7a:9f:bd:92:07:91:f3:5f:65:ef:f0:2b:
59:74:c9:08:a9:a0:42:86:42:69:4c:ba:65:2e:cc:
59:41:8e:4c:63:dc:16:5e:38:a2:95:41:fe:98:b4:
e3:5f:5c:35:d3:a1:4a:10:be:21:59:4c:17:d5:03:
a7:63:74:8c:66:5b:c6:44:1d:0a:69:a3:26:31:a2:
d5:a7:05:ad:28:b2:a2:f4:68:7a:98:68:2f:7d:d8:
4c:8f:1e:cd:5c:61:1b:55:9b:27:39:b4:c5:59:6d:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:E0:7D:E3:56:6D:E9:0D:EA:E9:34:E1:64:B7:F7:1F:1C:4E:32
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/tv3gfeNWbekN6uk04WS39x8cTjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.202.0/23
Signature Algorithm: sha256WithRSAEncryption
99:e5:19:b7:96:65:34:32:9f:fb:ed:41:00:3d:1f:3b:85:08:
d6:93:27:bd:c7:61:31:ab:67:ab:eb:ef:13:11:29:25:9f:a8:
c8:88:51:a8:1d:f0:2f:15:46:02:6b:c4:0a:47:d6:b6:8f:d2:
1d:27:a9:d8:5e:fa:d4:fe:c3:37:09:ee:c6:84:7b:55:d2:25:
4c:36:61:9b:5f:e3:77:57:b0:d7:fa:3a:dc:48:4a:6b:70:ff:
1c:31:e9:7b:3b:49:a6:95:fe:75:d3:76:40:11:32:aa:13:2f:
6c:27:8a:0b:3c:a3:bf:72:1b:d4:b1:cd:d4:d5:21:33:08:11:
7f:4b:00:33:f5:79:0c:2f:c6:3b:23:95:dc:d3:24:cf:44:17:
e7:9b:79:36:2c:7f:08:8d:29:79:e4:8e:f0:da:9a:a8:3a:e3:
b6:d4:83:1e:3a:2e:6f:88:fb:b6:54:f5:ab:10:b6:03:e4:5e:
b6:e9:6a:f3:91:dc:56:96:f0:24:4d:88:2d:99:35:be:ca:88:
ad:3b:48:57:1e:0c:45:f1:0f:ac:02:97:ae:c5:5c:62:af:6d:
ff:b8:9f:99:ea:5a:70:51:52:c8:20:7a:7c:c4:bd:ab:2d:b2:
08:7f:86:51:c7:e0:83:92:67:be:38:c9:31:ae:df:ef:6d:cd:
54:81:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:46:05 2024 by rpki-client on console-fra.rpki-client.org