Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/tsNNB61zqUktwdARi2XYKgyBxo4.roa
File: tsNNB61zqUktwdARi2XYKgyBxo4.roa (raw, json)
Hash identifier: z1M5kcxRpvvhazA7wdbubfsAhKiGHS2UqoAAkSgXuns=
Subject key identifier: B6:C3:4D:07:AD:73:A9:49:2D:C1:D0:11:8B:65:D8:2A:0C:81:C6:8E
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 018CC94AAFFF7399EE21A87CB0F9C92EE366
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/tsNNB61zqUktwdARi2XYKgyBxo4.roa
Signing time: Tue 02 Jan 2024 08:29:24 +0000
ROA not before: Tue 02 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35236
IP address blocks: 91.241.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:af:ff:73:99:ee:21:a8:7c:b0:f9:c9:2e:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Jan 2 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c34d07ad73a9492dc1d0118b65d82a0c81c68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:ec:d4:69:46:60:dd:8e:17:a6:ad:17:3b:
02:3f:5d:f8:12:ca:6b:61:a7:a1:50:49:7d:af:b8:
7b:4b:67:c7:cf:e0:b4:c7:3a:f2:9d:a6:ef:f2:a7:
28:3f:a8:d6:6d:f0:5d:6c:90:38:b7:22:d5:27:38:
ac:67:59:0b:71:d8:1b:82:6e:65:4f:de:6d:61:db:
3f:3e:00:43:93:54:ac:26:60:3d:b5:32:2b:13:ac:
b9:ce:4b:54:40:75:9d:09:1d:85:f6:09:d0:6b:59:
ed:17:ba:7d:a1:a5:6d:0c:71:4b:1c:8f:43:73:9b:
4f:7e:47:f9:b7:a3:9f:2b:dd:f8:f6:d1:5a:77:fe:
24:71:7a:0c:6f:86:3f:b2:9e:c4:e0:7f:dd:fc:ef:
35:16:7f:9e:fa:6c:d4:d8:ad:f4:18:93:f1:3f:a8:
cd:41:ce:33:de:e7:50:dc:06:d7:2a:8f:07:2d:65:
6b:32:83:59:0e:72:c4:d2:b9:d7:7e:a7:d7:91:f0:
15:0c:76:f2:f6:32:9c:26:54:ee:fb:a4:11:c4:c2:
c5:8a:e8:56:f0:7f:4e:24:c9:b7:24:04:d5:81:f6:
77:48:e8:42:07:a5:3a:7d:56:9f:24:c9:28:4f:6c:
84:f0:0a:c9:de:98:4c:3f:21:02:bc:70:f5:04:39:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C3:4D:07:AD:73:A9:49:2D:C1:D0:11:8B:65:D8:2A:0C:81:C6:8E
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/tsNNB61zqUktwdARi2XYKgyBxo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.8.0/22
Signature Algorithm: sha256WithRSAEncryption
37:58:8d:c9:70:6a:3f:08:e0:65:40:2d:6b:ce:46:5a:2f:98:
c4:af:6f:7c:c4:27:53:3c:de:23:f7:12:f9:27:99:fc:02:23:
21:6c:f1:0b:d5:e1:f7:7e:4b:03:5f:68:01:5f:e0:b1:ab:78:
c0:9f:c2:57:94:2b:8f:42:74:88:d7:ca:26:df:e6:9b:14:46:
1d:77:2b:bb:57:d6:71:93:54:3a:11:d2:67:10:82:a5:d4:73:
3f:13:74:4d:74:5e:e2:02:29:89:61:d6:b2:c6:84:52:03:48:
37:0f:9d:d3:28:52:6e:e2:90:89:62:43:0c:fa:1f:ec:30:85:
44:bc:06:a5:72:f6:86:a4:dd:c9:01:71:79:a4:b3:ba:f1:e0:
db:d8:e0:0e:b2:44:92:5d:69:3f:ea:39:41:1c:df:99:6b:98:
6d:a9:30:c0:c5:fb:db:2e:b1:c5:24:86:02:fa:1d:22:af:a6:
79:d4:95:72:16:cb:2e:3a:55:77:3f:34:44:67:bc:a3:53:2d:
7f:c1:1b:7c:95:2a:79:4c:24:cd:f7:5b:e0:f4:35:7e:8f:6c:
b6:d8:62:3a:f9:96:47:2f:85:4f:19:72:ea:45:bd:13:80:1f:
d7:78:6b:0e:6f:b2:dc:23:8c:51:b9:f7:32:9e:9b:a8:02:33:
1a:f5:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:06:03 2024 by rpki-client on console-fra.rpki-client.org