Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/TcK18Oov25N70UM9Q1ULicom1ME.roa
File: TcK18Oov25N70UM9Q1ULicom1ME.roa (raw, json)
Hash identifier: 7bL0dSBl+KEYpPExomsUvVTZj04A5lsrByj4CVD7Nnc=
Subject key identifier: 4D:C2:B5:F0:EA:2F:DB:93:7B:D1:43:3D:43:55:0B:89:CA:26:D4:C1
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018CC2DB4461176AE42F83C99DADD3E8025C
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/TcK18Oov25N70UM9Q1ULicom1ME.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400040
IP address blocks: 45.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:44:61:17:6a:e4:2f:83:c9:9d:ad:d3:e8:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dc2b5f0ea2fdb937bd1433d43550b89ca26d4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:73:50:40:a3:29:15:fa:b6:5e:d1:fa:bc:
9b:b6:71:9f:bd:a7:d5:88:b2:df:f1:0c:5e:a5:33:
75:de:1d:68:37:14:ba:2b:9f:3b:ce:5a:c5:7a:31:
aa:65:93:aa:bd:1a:f5:42:bc:2c:a0:16:91:fe:6f:
4d:3b:f4:11:16:8f:37:f1:f4:19:ad:b5:dc:c0:b3:
a7:f9:30:a8:56:45:87:97:27:a4:b0:8d:36:bf:27:
a4:03:61:99:ff:2d:07:b9:8c:86:48:75:f8:41:d5:
4e:e7:a3:33:98:28:81:a8:38:a8:cb:ee:6a:1a:e7:
e0:f6:9f:07:e0:f1:51:9e:81:d1:29:d9:67:3b:1b:
63:44:28:3d:0e:1a:8e:c6:1e:44:d2:63:88:32:aa:
c3:e9:e2:24:9d:a6:3a:bc:18:7e:01:25:1c:ec:b1:
9a:dd:b5:7f:75:e5:d7:e2:e1:db:91:e6:0a:54:d2:
b7:26:9c:c1:a4:4b:0f:4c:ae:53:07:46:84:72:05:
a9:e8:44:79:93:87:e3:83:65:01:5b:ff:f6:a7:b8:
ed:5e:79:bf:d1:48:7c:8d:8b:10:78:c4:02:81:e5:
37:a9:4b:9e:17:75:59:c0:82:53:7e:ed:fb:b8:5e:
73:1b:48:1f:15:4f:7b:25:0c:e4:c9:ef:d5:ea:90:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:B5:F0:EA:2F:DB:93:7B:D1:43:3D:43:55:0B:89:CA:26:D4:C1
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/TcK18Oov25N70UM9Q1ULicom1ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:a8:6d:eb:67:54:d5:93:db:19:d7:2d:b6:15:9f:8e:a0:b7:
a4:20:c0:83:b5:db:2f:21:66:bc:36:fe:02:96:e2:e3:1c:f4:
4c:6f:bf:7e:2d:10:0a:08:39:b8:13:02:4d:b6:c0:5d:86:42:
c2:6c:e6:54:18:2c:92:16:c6:e8:b6:d2:51:2e:9c:8d:f1:71:
69:8d:4b:13:71:a0:92:f0:00:de:07:9e:1b:dd:59:49:85:2d:
5d:31:68:79:48:ca:36:a7:02:a1:cb:af:d5:ef:cb:a0:3f:7b:
60:fb:a7:26:51:b9:ab:f1:6f:df:fd:c1:a5:9f:14:50:d7:4b:
14:fe:85:c3:b8:de:bd:c3:29:8a:09:c2:1d:ac:d5:b0:d0:03:
3b:61:ca:d4:b7:5b:9a:90:5f:4a:89:1f:99:57:0c:ea:a6:e6:
28:43:58:ec:aa:ca:8b:6c:9a:d8:8d:08:d5:75:89:0f:e6:bf:
2f:ad:60:13:33:a7:a4:20:74:f4:e3:e6:cd:5e:38:1c:11:cb:
1a:ea:fa:be:78:f0:2b:9e:3c:7d:d2:ab:d6:23:93:74:12:ce:
b3:13:03:3f:ce:a7:13:ed:86:5d:73:2c:37:e8:cb:95:7c:b1:
de:f4:3e:a7:45:76:ff:8c:dd:e0:ef:b1:44:5f:74:05:15:23:
99:34:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:01:41 2024 by rpki-client on console-ams.rpki-client.org