Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TeECjU1dQ44ot7bdMhKfK07WHf8.roa
File: TeECjU1dQ44ot7bdMhKfK07WHf8.roa (raw, json)
Hash identifier: 0XrkpFMzE9WZZlzwsC8fOnPgaBRttO+p9kAfuym/7OQ=
Subject key identifier: 4D:E1:02:8D:4D:5D:43:8E:28:B7:B6:DD:32:12:9F:2B:4E:D6:1D:FF
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FB67DC742E5F07AF774216E492AA7
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TeECjU1dQ44ot7bdMhKfK07WHf8.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210811
IP address blocks: 92.119.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b6:7d:c7:42:e5:f0:7a:f7:74:21:6e:49:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4de1028d4d5d438e28b7b6dd32129f2b4ed61dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:83:82:1a:e6:5b:90:46:86:aa:8c:67:9b:
9b:43:0e:4b:ec:15:bb:c1:17:ed:45:5b:5d:97:0a:
88:9d:aa:6f:5d:87:c3:68:95:02:1e:b0:72:f6:75:
a9:7e:da:53:dd:71:b9:e5:26:2c:82:08:de:f8:12:
53:87:90:79:4f:0b:e5:4a:18:b8:77:bf:f2:38:28:
3c:10:37:e3:55:65:2d:4d:20:cd:64:5b:7c:e8:16:
31:e7:76:38:b1:f3:4d:92:ec:43:2a:87:32:57:f5:
50:1a:6d:a6:b3:72:55:7d:b7:33:f2:bc:3b:94:f2:
ea:87:7f:c8:e5:82:2a:e1:fc:9a:76:e2:41:01:4e:
cb:c6:32:e6:ba:4a:47:4a:63:cf:e4:09:3e:e3:18:
1e:d9:ec:7d:72:02:61:41:e1:73:51:9d:d1:91:ab:
47:d1:35:d8:78:4c:2a:e0:1f:2e:e0:1f:c8:07:be:
b8:ac:17:a5:6f:ed:52:00:62:bb:47:c2:3b:fc:05:
19:8a:d1:50:67:ed:15:94:df:5d:f4:81:4b:a7:fb:
78:31:a2:77:2b:ec:54:5f:76:67:f1:8e:3d:83:56:
4d:2a:70:3c:d1:e2:ee:70:a3:aa:4b:98:ab:6d:35:
af:0b:5f:5f:ca:1c:b3:58:ea:b7:af:42:ad:f2:0c:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:02:8D:4D:5D:43:8E:28:B7:B6:DD:32:12:9F:2B:4E:D6:1D:FF
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TeECjU1dQ44ot7bdMhKfK07WHf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:91:4e:93:a0:45:f5:08:6d:8d:b5:ac:77:51:23:99:65:f2:
16:cd:cc:df:d0:9a:1f:8c:d2:61:9d:e5:03:68:ac:8d:6a:7c:
21:4d:8c:15:da:ae:51:12:5b:f4:5e:e6:4b:c8:42:b7:86:df:
06:f6:6c:33:eb:cf:95:43:14:a3:02:0f:5d:81:36:71:6c:9c:
7b:5c:ad:a3:fa:b4:57:9c:9c:a3:51:ee:4c:cd:b7:bc:01:6a:
c5:6d:33:d7:32:38:d3:22:66:30:65:ba:26:28:42:01:ae:14:
74:e1:f5:b4:05:3a:e0:dd:5c:96:eb:ae:e8:58:8d:33:80:e6:
bf:dd:42:1e:42:f1:5b:28:0f:cd:bc:06:7e:6d:5d:7a:8e:d5:
90:a4:79:4f:6c:ee:92:11:ff:a2:0c:c1:e6:10:d6:67:d7:0d:
02:7f:ff:29:43:11:25:92:e8:ae:9c:ec:09:2a:dd:c9:0f:cb:
af:21:d8:a3:55:f2:57:de:95:f5:71:c4:af:ba:95:57:c1:5b:
1c:d4:e9:48:04:95:75:0f:23:a7:6a:b0:7e:d5:f7:9f:3a:bf:
b5:2e:af:11:20:f7:e7:b7:26:6f:55:d9:df:11:28:cb:a9:7c:
6c:01:53:83:82:09:86:3c:ab:e1:ae:16:0c:07:89:fd:55:51:
ec:b5:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:07:27 2024 by rpki-client on console-fra.rpki-client.org