Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Tzf28BFA4cL6MisEq-Z6cnonwKo.roa
File: Tzf28BFA4cL6MisEq-Z6cnonwKo.roa (raw, json)
Hash identifier: Fk4kF7UR68B9t/ozwq/KUr1ozIS5fmKyhk1J/WkWymo=
Subject key identifier: 4F:37:F6:F0:11:40:E1:C2:FA:32:2B:04:AB:E6:7A:72:7A:27:C0:AA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192839F5BEACC29E892A52240F8A7050E5B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Tzf28BFA4cL6MisEq-Z6cnonwKo.roa
Signing time: Sun 13 Oct 2024 02:05:11 +0000
ROA not before: Sun 13 Oct 2024 02:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 5.83.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:83:9f:5b:ea:cc:29:e8:92:a5:22:40:f8:a7:05:0e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 02:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f37f6f01140e1c2fa322b04abe67a727a27c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:b2:02:c4:fa:46:7f:c6:04:22:ac:68:7e:
57:2f:8d:94:66:ff:1a:1a:01:56:70:fd:0a:1c:a9:
50:cf:c1:12:72:84:18:a4:5b:ba:0d:00:e5:b5:27:
b5:70:46:99:a6:94:c9:b5:71:c4:9a:c7:cf:78:56:
b9:df:fb:a1:9e:87:7e:fa:5e:c9:16:b6:3d:29:81:
e8:30:32:11:08:6d:bf:99:92:0d:18:63:03:46:87:
d1:8a:25:34:63:a2:a1:ed:fe:be:60:bb:43:0e:0d:
17:56:fe:98:68:4b:d7:58:1b:39:d4:68:27:25:b9:
bc:dc:2b:ba:70:c2:2a:8a:99:4b:3d:0d:64:34:f4:
9b:35:ab:0d:3c:13:28:40:65:c3:10:04:c9:90:d5:
ee:78:00:32:40:21:f5:55:1c:fc:84:22:5a:f8:51:
a5:34:3c:bd:1a:a3:65:22:9a:39:7e:15:78:54:65:
a9:af:e7:0a:de:b1:0c:23:5a:d9:a1:dc:65:4d:28:
fc:44:b2:90:8e:f4:69:da:ca:73:5a:71:1c:a9:84:
7e:d4:46:bb:f1:ff:b9:e5:22:57:81:3c:f2:78:76:
36:93:50:15:3a:56:0c:32:4f:40:46:a0:ee:bf:36:
72:ad:5f:8b:3a:9f:26:2a:d5:93:bd:ab:65:53:73:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:F6:F0:11:40:E1:C2:FA:32:2B:04:AB:E6:7A:72:7A:27:C0:AA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Tzf28BFA4cL6MisEq-Z6cnonwKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.141.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:b6:59:b9:0d:1e:27:80:3d:12:66:78:f5:e3:fb:50:0b:4e:
92:ff:d2:b8:2b:f6:a3:3a:02:6f:1d:d5:99:a0:a6:81:e6:17:
5c:ce:55:50:09:a1:e7:0c:b6:00:09:5a:39:5a:3d:7e:42:58:
8b:56:02:10:55:64:35:c2:33:bd:ea:30:05:1c:b2:c3:4b:18:
13:32:44:3f:84:ea:46:ee:4d:e5:0c:f1:ad:b6:4a:91:89:36:
24:1c:9e:87:79:6c:1f:27:17:96:2e:0a:ce:3f:02:86:a4:58:
4e:75:f6:c7:c4:a8:64:01:c5:92:f8:17:e6:24:25:d6:8e:8c:
76:0a:59:22:fb:47:f8:9e:f9:bb:9c:23:c2:03:22:e7:81:22:
e2:12:dc:77:2c:a7:ca:91:7e:db:a7:29:c9:8d:8a:0c:cc:0e:
b2:96:56:0c:e3:df:da:47:e7:7f:a2:b2:39:b1:a4:7f:85:f4:
d0:60:ad:50:19:d0:81:c7:75:35:d8:f2:2b:a3:9c:de:91:41:
b5:b0:18:e4:df:bf:c2:48:22:85:0e:a5:a1:82:f7:6f:6b:52:
60:c9:99:eb:c9:33:e8:ec:b1:9a:0e:43:37:9d:b3:be:51:59:
08:23:8d:fc:b6:b9:22:a3:38:9e:d8:7c:9f:d2:0a:64:61:20:
83:cb:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org