Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/tmJbireS00ohIgKHaFjN0tPjUJc.roa
File: tmJbireS00ohIgKHaFjN0tPjUJc.roa (raw, json)
Hash identifier: 4htofaTZCNqV768vRnG5WW7wWm4NZ2ome1OpNbMA34o=
Subject key identifier: B6:62:5B:8A:B7:92:D3:4A:21:22:02:87:68:58:CD:D2:D3:E3:50:97
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB63B528DDDE591F57B87455DFD70A
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/tmJbireS00ohIgKHaFjN0tPjUJc.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:b5:28:dd:de:59:1f:57:b8:74:55:df:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6625b8ab792d34a212202876858cdd2d3e35097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:cb:78:36:8c:f8:43:42:93:3f:ae:05:3e:
07:94:90:a6:07:5a:43:c2:f7:23:e8:58:96:3a:7f:
16:b8:af:c2:be:38:6f:70:a1:7c:af:59:1f:64:89:
02:62:17:58:cb:3b:d0:0f:a2:be:cf:2e:b5:41:4c:
4f:7f:41:cf:3b:25:9e:27:71:c6:8e:88:c2:48:8b:
42:b7:15:3e:78:97:63:64:fc:20:ec:da:84:aa:0a:
7d:02:4a:37:0b:06:11:cd:4e:c4:01:4e:41:f3:45:
cb:ab:5b:ed:c3:ee:8f:36:05:48:ac:ee:2b:69:cd:
b7:b9:17:d6:4e:89:12:08:13:2e:ea:59:b4:d1:af:
85:aa:86:e5:7a:64:79:ba:39:ad:ae:83:83:ef:ef:
ea:0f:70:b9:48:b7:10:0f:7a:01:bc:59:29:be:1e:
8a:80:f8:6f:c6:b2:e1:ea:cb:9b:df:d6:b5:5f:60:
30:3c:24:01:f9:58:f3:27:2d:b2:38:32:6e:4f:33:
ca:90:57:97:ae:9d:75:24:1f:4f:93:92:c9:b5:10:
f0:14:bc:78:2f:f2:51:7b:7c:74:01:2c:da:e4:00:
db:6c:fb:e9:d2:3c:88:9d:65:96:74:92:c5:56:bd:
4c:aa:b3:20:83:85:14:89:56:76:09:05:f4:f7:07:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:5B:8A:B7:92:D3:4A:21:22:02:87:68:58:CD:D2:D3:E3:50:97
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/tmJbireS00ohIgKHaFjN0tPjUJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
Signature Algorithm: sha256WithRSAEncryption
15:12:ca:ec:53:84:a0:03:3c:16:7f:33:e1:f9:aa:8c:50:73:
9e:f4:72:30:8c:6d:06:2f:61:4b:fe:f8:a4:81:d6:0d:22:90:
0f:2b:c0:8c:a2:f3:37:b1:ef:45:78:e3:f6:be:02:b4:42:3c:
d5:ae:43:ef:14:40:56:f9:5e:42:ba:a6:6e:a8:65:7f:2b:01:
28:f9:78:ed:84:61:e3:b4:78:c0:30:5c:89:11:13:1d:5a:db:
e5:5b:6d:8f:4b:92:bf:81:78:9e:d0:28:38:1e:13:35:b0:91:
91:03:de:0a:83:a8:b1:36:88:1a:70:ba:2e:a0:32:f5:16:84:
41:50:6c:d8:e3:1f:92:d3:1d:e4:5e:24:12:aa:ed:11:e1:a0:
d7:c6:57:32:3e:5c:65:2e:86:fe:78:f3:9f:00:bf:82:90:1c:
3a:42:75:5b:9f:24:12:61:ac:9a:12:40:15:86:23:c0:64:43:
7c:6c:7e:87:9b:5a:22:47:2e:38:b8:cb:3b:80:05:96:c3:ef:
6a:3e:c8:43:6f:f4:79:13:f6:f7:6e:4a:e0:ed:f0:35:0a:ce:
83:e7:84:71:46:aa:67:10:e0:cd:8c:09:fe:1b:13:a2:9b:62:
42:f3:6d:1f:ca:5d:c5:f7:40:15:ae:ab:77:b0:96:eb:a0:b3:
a5:d6:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:35:23 2024 by rpki-client on console-ams.rpki-client.org