Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TyuDcTqaP_iiIDkoEs8gsKGQYqs.roa
File: TyuDcTqaP_iiIDkoEs8gsKGQYqs.roa (raw, json)
Hash identifier: 7COu5IVG6ezdE9FD9NxK9dKCFzJijkO7m27ZxOTCXjk=
Subject key identifier: 4F:2B:83:71:3A:9A:3F:F8:A2:20:39:28:12:CF:20:B0:A1:90:62:AB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018D27535EA4CCE05F7E00D9B15ECBAF7334
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TyuDcTqaP_iiIDkoEs8gsKGQYqs.roa
Signing time: Sat 20 Jan 2024 14:43:11 +0000
ROA not before: Sat 20 Jan 2024 14:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216420
IP address blocks: 2a0d:6f80:1f72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:27:53:5e:a4:cc:e0:5f:7e:00:d9:b1:5e:cb:af:73:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 20 14:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f2b83713a9a3ff8a220392812cf20b0a19062ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:5b:f1:c6:93:28:17:ad:6e:5a:40:1c:a0:
e5:30:f3:a6:31:d8:d4:d0:60:6b:06:81:88:65:a9:
cd:8b:f6:7f:94:cc:eb:3b:b1:f6:19:bd:08:e1:16:
d8:89:0d:df:2d:e3:ce:52:c6:49:c5:5c:66:be:bf:
5c:25:5b:ad:fc:51:00:57:0c:4a:56:c1:b7:f2:c0:
a8:d0:24:36:91:c7:80:a1:51:e0:77:a7:34:f6:ae:
c1:41:82:bd:39:27:09:cc:7b:14:53:3c:c6:04:4b:
55:1d:27:07:03:c6:b2:83:40:a8:15:5c:eb:3b:25:
9f:f4:1e:9c:1b:2c:f0:46:18:3f:9d:62:c9:fd:f2:
9c:6a:99:4e:38:1c:f8:7f:c2:43:48:a2:b9:9e:6e:
d4:f8:66:c7:e3:85:8a:45:11:29:c3:82:80:85:61:
80:5b:39:5e:61:e8:c3:00:6e:1a:52:6e:08:dd:18:
46:96:73:6c:6e:4d:85:0a:f2:2e:e4:9a:95:cd:f7:
be:12:23:50:fd:eb:76:0f:12:02:f3:b8:ce:7f:e3:
72:2f:b2:55:76:c7:b3:a4:e1:bf:b1:62:87:09:e1:
c9:67:a9:b2:30:98:45:f4:95:97:51:6d:f6:c0:d0:
3a:57:d8:da:ea:24:e9:c1:ad:fe:46:1e:37:27:37:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:83:71:3A:9A:3F:F8:A2:20:39:28:12:CF:20:B0:A1:90:62:AB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TyuDcTqaP_iiIDkoEs8gsKGQYqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:1f72::/48
Signature Algorithm: sha256WithRSAEncryption
a6:56:1d:36:ca:aa:4e:5a:08:7d:b6:a0:12:14:f9:ff:84:1a:
88:cb:12:5d:a9:31:c6:fc:c1:f2:61:10:fe:32:1e:ef:2c:4a:
eb:0a:0e:e9:6c:3c:ac:54:b3:14:24:21:d2:ea:06:59:49:03:
a0:2f:48:c5:22:ad:c5:b5:7d:07:25:ba:2d:ad:03:b3:e7:d5:
fc:57:6d:46:a7:6a:1a:88:80:8a:21:eb:9a:3a:8f:84:87:e2:
1e:2b:e4:10:76:dd:8d:41:76:cb:87:b0:f7:d2:95:19:79:d0:
9c:d9:92:dc:01:e6:75:f1:5b:9c:20:c6:87:e7:c9:94:44:3e:
1e:dc:50:77:1b:a7:48:42:79:5b:0f:85:de:45:94:25:9e:7b:
6b:ec:6b:67:5e:3c:5e:6c:f3:d7:d1:2a:7e:e5:a0:19:d5:f1:
44:bb:cc:0a:05:ae:df:78:34:4a:17:2c:18:b1:67:10:62:1c:
65:8e:9b:1b:94:35:53:e2:fc:7a:2a:d2:67:b0:19:54:09:fd:
aa:c8:1d:97:22:59:fc:61:9a:78:36:dd:df:c6:99:15:4b:78:
9a:f1:3a:48:51:41:8b:81:45:b7:48:4f:b0:07:7d:dc:a8:84:
32:6e:4e:95:59:a8:9d:e5:a6:f1:97:66:c6:9b:9c:48:5c:7a:
ea:b2:a9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:23 2024 by rpki-client on console-ams.rpki-client.org