Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/Tv4rLOzOguqL7noFGRj03_NiySA.roa
File: Tv4rLOzOguqL7noFGRj03_NiySA.roa (raw, json)
Hash identifier: Je5kCedyRSZXj/3lNdUjZr/mE5P+DcaVKu6/lROHb9c=
Subject key identifier: 4E:FE:2B:2C:EC:CE:82:EA:8B:EE:7A:05:19:18:F4:DF:F3:62:C9:20
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 0190DE70490445268A5BD603037ECF897D10
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/Tv4rLOzOguqL7noFGRj03_NiySA.roa
Signing time: Tue 23 Jul 2024 07:13:39 +0000
ROA not before: Tue 23 Jul 2024 07:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212190
IP address blocks: 45.90.239.0/24 maxlen: 24
213.232.217.0/24 maxlen: 24
2a14:7940::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:70:49:04:45:26:8a:5b:d6:03:03:7e:cf:89:7d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jul 23 07:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4efe2b2cecce82ea8bee7a051918f4dff362c920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:93:47:03:27:67:5b:73:d4:cb:e7:ea:d3:
8d:ec:2c:6a:22:fa:71:62:81:e7:23:80:af:03:3d:
5f:a2:65:08:5d:44:f5:a3:18:45:79:69:d7:e6:76:
de:7d:93:7a:47:62:56:18:d7:90:cc:cb:13:6d:cd:
7a:f4:2a:41:ca:e4:0b:c0:39:2f:8e:17:84:1b:5c:
27:76:eb:22:b3:6d:49:ee:95:3d:d5:4a:0c:12:bc:
98:8e:82:3e:ea:6f:a3:61:a9:71:ae:2a:2d:ff:43:
d5:2d:e4:d3:b1:61:e4:25:75:be:6c:cf:05:43:21:
7a:be:59:13:7a:04:4a:5c:9f:ab:5f:1e:4e:d2:e4:
51:ec:83:18:43:10:2b:3b:51:0b:dc:a8:4a:da:18:
49:97:99:e8:73:d7:ef:a1:6c:d8:9b:26:75:9e:54:
7f:00:d7:f9:31:88:46:cd:6e:2b:61:54:b0:7d:40:
e4:92:f3:1b:85:cd:6a:d5:55:ef:69:70:57:1e:e0:
55:cf:ea:7e:49:9e:a7:84:81:e3:d2:63:27:07:35:
ce:35:13:76:43:2a:68:4a:81:c2:a4:4d:8c:15:7c:
7b:89:bf:7b:72:bd:41:a9:07:25:b0:88:3d:eb:14:
18:ac:6a:ac:6c:d3:e3:39:74:e2:51:68:8e:3f:9b:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:2B:2C:EC:CE:82:EA:8B:EE:7A:05:19:18:F4:DF:F3:62:C9:20
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/Tv4rLOzOguqL7noFGRj03_NiySA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.239.0/24
213.232.217.0/24
IPv6:
2a14:7940::/31
Signature Algorithm: sha256WithRSAEncryption
4d:1f:ce:92:01:34:7b:e4:55:10:5a:a2:9b:4a:11:f5:81:c8:
9c:be:06:ed:1a:d2:41:5c:a9:ef:65:b7:f5:e7:2e:f5:2c:01:
32:a6:ec:39:92:00:ca:ed:78:5f:5d:c2:e9:ed:06:bf:e0:19:
72:ba:6c:bb:d8:88:95:17:2b:37:3a:87:cc:b3:ec:e0:47:ea:
68:7c:a3:09:a6:5a:c7:4d:ce:78:77:32:c3:fa:63:8f:5b:a3:
de:e2:68:ad:25:5f:60:25:6b:b7:84:ff:4e:92:59:f5:37:d4:
c5:eb:8c:0b:c1:f0:9b:74:91:14:3f:7c:10:1a:e7:88:89:e3:
95:ee:fb:b0:a7:ff:59:7f:c5:d7:68:29:ee:47:72:07:0c:75:
5a:0f:ce:0f:ac:c0:46:0a:54:4f:c2:3d:aa:5b:44:b0:76:50:
98:5c:dd:d7:b9:50:29:da:89:d4:ca:2b:9c:3e:94:5f:cb:37:
4e:da:cf:06:fb:87:a7:c2:f7:a6:76:f0:6d:3e:5f:f2:ec:0e:
fb:9c:df:cd:91:54:01:a3:41:66:17:b7:08:51:f5:a9:f4:2b:
33:76:a2:72:2f:66:2f:48:b9:29:60:fe:44:1b:d9:23:0f:e5:
d3:32:8c:33:4e:68:91:d7:5e:56:9b:18:b8:a8:f5:ae:c3:2d:
5c:24:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:10:19 2024 by rpki-client on console-ams.rpki-client.org