Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/as2TG--Witc3SxECV0byUSuAEeQ.roa
File: as2TG--Witc3SxECV0byUSuAEeQ.roa (raw, json)
Hash identifier: AdnpM8dfuRAdDlIp73jbbe3h1Q7kcN374FWYBONfHfw=
Subject key identifier: 6A:CD:93:1B:EF:96:8A:D7:37:4B:11:02:57:46:F2:51:2B:80:11:E4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7953A8BD6B3FB0744BE08E8A15D5FF9
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/as2TG--Witc3SxECV0byUSuAEeQ.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 147.45.197.0/24 maxlen: 24
147.45.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3a:8b:d6:b3:fb:07:44:be:08:e8:a1:5d:5f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6acd931bef968ad7374b11025746f2512b8011e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:ea:6d:4e:2f:ed:71:9a:40:2b:04:78:a6:
87:95:61:2e:72:87:e9:cd:85:a0:f0:ba:93:ee:8d:
e6:02:de:61:95:fc:26:44:14:00:60:5d:d5:ce:87:
f7:e3:fc:77:ab:82:75:74:d4:ea:66:02:8e:1d:49:
f8:56:1a:5f:6d:93:18:ee:98:92:c0:ca:1a:00:0d:
f5:8d:72:4a:15:17:3a:0e:5a:c9:3e:9e:a0:02:b6:
f7:01:1f:c1:8a:c9:d0:46:57:09:63:7a:24:69:4e:
22:09:c9:ed:91:e6:8d:1f:ed:a8:5d:6c:ef:a7:41:
32:68:6b:a9:f5:52:53:1e:9c:b3:d4:bc:22:ab:52:
7e:b4:31:d0:99:46:a3:e5:af:f2:c6:0f:39:a9:2a:
bd:8b:5d:d6:c1:cc:96:e8:44:05:d5:ef:e3:b5:e6:
c0:10:3b:dd:c5:b6:14:96:a6:0b:ae:f4:d9:fe:d5:
55:47:6b:ea:eb:3c:76:c5:3b:ce:eb:44:d1:d9:2b:
d9:29:7d:2c:4a:65:19:01:37:9c:d3:f9:a0:68:29:
43:54:4c:0d:72:e5:90:9d:f6:c0:67:f4:32:4e:7d:
86:de:4c:7e:7e:fc:d2:02:fb:36:8c:30:6e:5b:1a:
f2:1a:a0:d7:8b:fd:66:20:0d:1f:73:05:6d:b7:fb:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:93:1B:EF:96:8A:D7:37:4B:11:02:57:46:F2:51:2B:80:11:E4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/as2TG--Witc3SxECV0byUSuAEeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.196.0/23
Signature Algorithm: sha256WithRSAEncryption
19:37:10:93:91:d1:d0:3e:36:d3:c2:27:3d:8a:f8:6a:1c:d8:
03:ff:82:bb:56:4f:d0:6a:83:93:92:52:8c:5d:a5:c4:5d:c5:
3b:71:6e:c6:6d:18:9c:4a:ec:6d:53:26:3a:25:ba:3f:21:7f:
4a:fa:ca:da:51:ee:1a:9a:2f:ae:bd:1a:99:4f:e3:5d:e3:37:
be:b1:35:84:ae:21:08:52:59:bd:9d:5d:f6:c9:31:34:ef:6d:
d1:6d:5b:28:a9:ec:a9:8b:90:d7:20:55:db:9f:10:79:09:a8:
49:8f:ad:8e:a9:41:2c:5b:94:af:7d:14:c3:41:58:72:d1:05:
42:6d:50:d1:d7:4b:3a:f4:43:f7:df:c2:a1:ae:d2:d6:36:60:
9c:50:dc:26:7e:ef:00:21:44:6a:44:94:24:27:1b:5c:03:cc:
ea:6f:aa:53:db:d5:19:43:df:87:29:99:c4:af:19:5d:87:d0:
e4:50:74:d6:fb:a7:6a:d7:d1:9f:e1:9e:45:ea:10:60:66:ae:
1a:7a:b5:f9:8b:60:a8:42:bb:b4:29:22:8b:d4:3b:94:67:00:
dc:07:d7:e6:02:5a:48:b5:8f:84:d1:13:85:9a:5c:26:a1:cf:
0a:48:fe:80:4f:93:04:9d:cb:1d:52:21:3a:e4:00:94:56:d3:
a3:21:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org