Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/TP1OnpeOIC62DVJV477MMUN2Qtw.roa
File: TP1OnpeOIC62DVJV477MMUN2Qtw.roa (raw, json)
Hash identifier: NqIkmpZXjewa0R0/YGeygtBn0hBSZ7oSdI0zxfHir6s=
Subject key identifier: 4C:FD:4E:9E:97:8E:20:2E:B6:0D:52:55:E3:BE:CC:31:43:76:42:DC
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 018CC94E37C161B9DF038FA4EDC775CC3CE2
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/TP1OnpeOIC62DVJV477MMUN2Qtw.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 131.188.0.0/16 maxlen: 16
192.44.82.0/23 maxlen: 23
192.44.84.0/22 maxlen: 22
192.44.81.0/24 maxlen: 24
192.44.88.0/23 maxlen: 23
192.44.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:37:c1:61:b9:df:03:8f:a4:ed:c7:75:cc:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cfd4e9e978e202eb60d5255e3becc31437642dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:dd:ef:81:3b:01:e0:7a:cf:f3:ba:25:5e:
9b:28:f3:cd:f6:6d:ed:a6:fd:e4:da:ee:a7:fd:95:
50:6d:ec:26:9a:c9:73:2f:78:60:49:e6:9c:12:10:
25:10:68:c0:4e:ab:f4:fc:68:87:2e:8b:95:fa:f6:
21:c5:89:47:fe:89:dc:13:ed:c0:d1:e8:01:8e:1d:
91:10:65:30:c1:2d:ce:38:a0:23:ed:3a:88:f1:bb:
3d:82:05:aa:81:86:a3:ff:8c:d2:90:e1:aa:4a:50:
28:29:fa:7b:c7:47:a1:48:83:b5:81:6e:eb:39:38:
3a:6b:96:b4:0c:b6:8d:e4:79:28:08:b1:6a:e6:21:
c8:18:61:cc:9a:37:4d:dd:5d:f8:41:9f:91:ed:92:
34:79:17:16:fa:07:e8:7a:da:78:52:e6:06:6e:40:
2a:35:f5:1e:38:d8:a6:29:98:e7:89:4d:af:ff:61:
b4:2d:ce:61:98:d6:84:a0:36:2d:01:00:c9:da:b3:
02:bf:7d:7c:61:45:4f:5e:cf:1e:28:3d:fa:14:fb:
62:3a:6b:49:85:40:ce:c3:1e:e1:07:8a:f1:72:24:
2c:0f:05:18:d3:b7:07:d3:15:45:27:8e:d2:2d:0b:
81:2d:50:94:95:35:4e:e3:23:71:bc:02:aa:49:db:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:4E:9E:97:8E:20:2E:B6:0D:52:55:E3:BE:CC:31:43:76:42:DC
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/TP1OnpeOIC62DVJV477MMUN2Qtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.188.0.0/16
192.44.81.0-192.44.90.255
Signature Algorithm: sha256WithRSAEncryption
8f:1a:f0:fa:9f:3b:b2:0f:5f:ea:43:2c:d2:78:c3:e4:d9:80:
f3:2b:f9:87:8a:88:6c:1b:70:53:bd:0e:72:ca:31:d5:3b:b9:
73:d2:c2:3a:12:ae:cf:5b:39:ef:ed:95:80:c7:2d:a2:74:da:
9e:9e:93:2f:9a:2f:fc:83:5f:4b:83:12:73:50:07:e1:9d:83:
70:21:be:bf:99:a8:5e:d0:8e:26:2f:49:24:d8:24:88:33:65:
7a:c0:d5:71:a2:21:16:49:15:1c:28:fb:3b:19:44:06:5f:d4:
90:13:8c:ff:d1:07:1f:cb:94:a3:79:a1:57:97:f9:d6:df:e9:
4f:42:f8:b5:a9:31:9c:71:71:65:14:59:c8:8e:da:36:36:a0:
c4:f7:37:69:60:fe:c9:34:77:c8:c4:b2:ce:a0:b8:f3:0d:e3:
65:5f:e1:72:ab:76:3e:e5:5e:5d:fa:3b:41:39:88:0a:88:0d:
f4:1d:b4:a7:dc:24:be:e5:0a:09:f4:69:a7:62:a7:7c:60:8e:
cc:d5:7f:e1:c8:6c:5e:02:4f:d2:31:5b:e3:4b:67:f5:7b:15:
39:90:e8:5e:5f:ec:a0:71:ec:fb:55:1c:43:c1:01:0e:d1:98:
c8:21:8c:04:2d:55:c5:8a:17:c0:4a:9e:79:72:ae:73:38:04:
71:d5:ae:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:41:07 2024 by rpki-client on console-ams.rpki-client.org