Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/TWRKKonnfXhfqEty2NjjGHJ38Ig.roa
File: TWRKKonnfXhfqEty2NjjGHJ38Ig.roa (raw, json)
Hash identifier: 90+17VWm7XXD1hh6tn0KYpFNvA9g6G8CApbuCOoQfp4=
Subject key identifier: 4D:64:4A:2A:89:E7:7D:78:5F:A8:4B:72:D8:D8:E3:18:72:77:F0:88
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 0192426FD7E7F23FA2D3AE38244224C3CACD
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/TWRKKonnfXhfqEty2NjjGHJ38Ig.roa
Signing time: Mon 30 Sep 2024 10:17:58 +0000
ROA not before: Mon 30 Sep 2024 10:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 193.47.104.0/22 maxlen: 22
193.47.108.0/24 maxlen: 24
193.47.109.0/24 maxlen: 24
193.47.110.0/24 maxlen: 24
193.47.111.0/24 maxlen: 24
193.47.112.0/20 maxlen: 20
193.47.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:6f:d7:e7:f2:3f:a2:d3:ae:38:24:42:24:c3:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Sep 30 10:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d644a2a89e77d785fa84b72d8d8e3187277f088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:6b:57:fb:f7:20:bd:15:39:9a:83:e2:27:
c0:f8:18:ca:f2:ba:d5:98:ac:ea:df:b7:cd:e4:bc:
e9:de:5b:02:67:ce:23:9c:9e:1c:9a:d2:85:02:60:
95:ee:25:d7:ec:0c:3d:ac:16:d9:a7:1e:ab:b5:09:
9d:00:3d:ce:a9:d2:b9:8d:87:01:69:f2:1d:3e:8f:
20:b7:7e:d5:c0:68:a3:35:ee:06:67:f9:07:a1:48:
dd:bd:bd:98:e9:d7:a2:76:a9:0f:7c:7b:e5:db:7f:
12:e7:ea:35:50:12:4a:cd:20:6b:5f:ba:a3:88:3a:
b9:4c:72:21:69:d0:b8:16:71:15:ba:19:89:14:da:
d1:04:02:be:97:35:8a:9e:18:ff:e0:37:33:06:03:
f5:76:c0:52:51:47:0f:0f:0b:c6:b9:0d:7e:f9:c8:
c7:e1:c4:dd:3d:9d:5e:34:0e:93:ad:48:9d:63:f5:
a8:a8:90:e5:39:03:bf:93:d5:b9:21:4a:fb:2f:60:
b1:6c:5d:4b:3f:01:0d:9a:05:89:4b:71:31:54:4a:
c4:79:53:37:b6:22:e5:1f:67:50:ef:af:2b:25:72:
74:6e:d2:6a:1c:b5:02:83:5d:90:d5:be:67:99:99:
49:46:11:4e:b3:6b:fe:2d:f7:6b:e2:ac:0a:80:01:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:64:4A:2A:89:E7:7D:78:5F:A8:4B:72:D8:D8:E3:18:72:77:F0:88
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/TWRKKonnfXhfqEty2NjjGHJ38Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.104.0-193.47.131.255
Signature Algorithm: sha256WithRSAEncryption
83:56:0b:e1:6e:31:93:39:f0:e7:31:bf:b3:1b:48:3e:a9:21:
7f:c9:79:b4:46:a0:3c:86:27:50:31:19:c3:85:22:db:be:81:
b0:f3:17:5d:c1:06:37:5c:83:07:f6:ce:ea:f6:bd:83:cd:0d:
58:c6:6e:9d:a0:46:1b:17:69:47:4b:76:95:2b:9b:24:43:eb:
9a:ba:36:b8:08:9f:5d:e4:c4:7a:aa:69:fe:ab:13:3f:9e:51:
1b:11:4b:76:e3:44:70:eb:c5:10:36:57:ca:ca:01:8a:68:be:
a1:a2:b1:7a:4e:ef:16:3f:34:01:ca:92:70:77:61:f7:2f:14:
c7:32:ec:5b:1a:73:43:45:0b:5e:42:65:04:48:79:4b:26:a3:
87:8b:53:8a:a0:86:df:ea:fb:65:91:e0:1a:43:f0:77:02:1a:
10:4f:8d:de:e1:01:fc:6a:90:86:46:1b:5a:e8:83:19:b0:63:
86:f0:29:25:65:c0:72:70:a1:4d:ab:39:c5:27:12:f0:50:a6:
fa:47:59:49:85:e8:d2:f3:f9:94:bd:88:6a:8e:de:d9:49:83:
e7:19:15:4b:db:d2:b6:58:49:83:61:da:30:88:07:32:d3:67:
f5:6e:ee:a9:c7:fe:9e:a9:63:9e:8b:6d:c0:a0:e5:cc:7d:d9:
7a:04:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:57 2024 by rpki-client on console-fra.rpki-client.org