Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TVIy_spBFJZPFI9xaTnuL3RbJbE.roa
File: TVIy_spBFJZPFI9xaTnuL3RbJbE.roa (raw, json)
Hash identifier: VqWwsqg5bFedRIIfcyvvataBVTvtvfSf2DWHZYvHwLo=
Subject key identifier: 4D:52:32:FE:CA:41:14:96:4F:14:8F:71:69:39:EE:2F:74:5B:25:B1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEFDB67704EC6AD50076365E72860
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TVIy_spBFJZPFI9xaTnuL3RbJbE.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60615
IP address blocks: 85.120.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ef:db:67:70:4e:c6:ad:50:07:63:65:e7:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d5232feca4114964f148f716939ee2f745b25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:0b:9f:53:be:62:07:c9:2f:c4:14:3e:6d:
ed:03:1e:36:9e:d0:84:f5:b5:f3:ab:7e:b0:72:72:
3a:76:d3:d4:df:02:8a:2c:c4:da:15:d1:57:44:9d:
3a:6e:44:9e:b0:21:11:6f:a1:49:dc:af:72:27:a3:
7c:c1:46:1f:51:30:32:63:12:fe:37:52:11:0d:d3:
b2:f5:d9:75:9d:bd:fd:18:b0:ec:ef:08:04:54:ef:
ce:de:3a:6f:66:be:5c:36:e4:90:fa:b9:2e:fd:de:
e6:c8:02:35:79:3c:c2:42:f0:ff:95:a1:42:fb:f9:
3d:65:ea:06:00:f1:a9:48:bf:15:a6:33:60:4a:fb:
81:9a:a1:39:eb:b0:b6:b8:7b:e1:55:4a:1d:02:f8:
12:e4:05:b3:92:79:94:53:75:8e:1a:b8:fe:7a:6f:
a3:88:b3:93:bd:06:bf:9d:3a:b0:ae:8d:db:0a:b2:
74:83:a5:6e:ae:3c:ec:fe:e5:d6:96:c2:43:69:25:
66:99:47:9d:6f:ae:0a:83:c9:a2:a6:47:88:54:2f:
2b:82:e5:f9:24:db:06:71:f7:13:d8:07:63:8f:88:
d4:25:dc:16:d2:b6:1c:62:92:0b:58:1e:7e:12:3d:
ef:f2:e0:2b:de:29:d2:d2:10:55:87:2e:7f:19:a3:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:52:32:FE:CA:41:14:96:4F:14:8F:71:69:39:EE:2F:74:5B:25:B1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TVIy_spBFJZPFI9xaTnuL3RbJbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.232.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:dd:ef:14:0a:fd:6f:7f:ae:d2:77:54:9d:9c:76:e2:f3:03:
c5:51:99:1b:2e:26:59:58:a5:3d:ce:c6:07:52:18:1a:ad:f5:
ba:8b:cf:e1:96:e2:e4:08:f0:ec:ae:21:3c:34:80:b3:45:6d:
55:1f:12:61:08:79:59:78:7c:5b:0c:21:84:ca:1d:05:12:ce:
42:ea:33:3d:08:85:6a:66:5c:e8:a8:b0:6d:5e:b6:a2:28:47:
7d:9f:85:26:bd:2e:ad:a1:ee:ca:b4:4f:50:53:db:27:31:20:
46:d5:35:9f:1e:1a:eb:c3:94:17:86:23:c1:4c:79:f3:39:00:
e4:f4:8b:91:0a:5a:2a:70:88:01:ff:9b:23:73:f5:f8:8b:8a:
04:55:a8:2d:53:99:ff:c4:6f:3a:8d:98:b3:9f:bb:c9:22:12:
2b:c0:b9:a6:0b:ba:bd:b3:f8:c0:b8:6a:39:04:b0:cc:4c:a9:
15:87:a9:b2:90:fb:99:22:13:b7:31:2d:0c:e6:e1:3b:85:69:
22:5b:62:57:07:ba:cc:5e:88:a1:30:c6:ee:99:b2:7a:3a:09:
5b:1c:b5:f9:5b:88:19:32:e9:ab:e5:35:06:9d:91:80:bd:e7:
3d:64:aa:39:02:da:56:61:2d:a4:8f:b2:9b:48:f9:65:df:3b:
42:94:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org