Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TFKoKEKJMmB0G_kz1bjL65DCKLw.roa
File: TFKoKEKJMmB0G_kz1bjL65DCKLw.roa (raw, json)
Hash identifier: RVDxlkLJYWDWFEgleAMewLQDlRN7Gny0tFmCzR92Cjo=
Subject key identifier: 4C:52:A8:28:42:89:32:60:74:1B:F9:33:D5:B8:CB:EB:90:C2:28:BC
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA2965E0F9C5AA86DE7EF8A0685073D4
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TFKoKEKJMmB0G_kz1bjL65DCKLw.roa
Signing time: Tue 02 Jan 2024 12:32:39 +0000
ROA not before: Tue 02 Jan 2024 12:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211480
IP address blocks: 2a0e:8f02:f026::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:65:e0:f9:c5:aa:86:de:7e:f8:a0:68:50:73:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c52a82842893260741bf933d5b8cbeb90c228bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:d2:c5:fc:78:a2:58:f3:e0:58:87:d1:98:
48:8c:8e:ab:84:f5:a2:a3:f9:03:02:a3:55:b4:ba:
9c:e3:7c:8d:ca:91:85:3c:15:05:05:9b:01:ac:9b:
44:db:9b:67:76:3c:f3:40:62:61:d8:09:08:f1:f2:
d8:4d:c5:da:41:2c:51:9a:93:8e:ff:a3:de:bd:06:
7b:01:28:7b:aa:76:a6:6c:bc:58:84:a1:dc:16:91:
ea:db:2a:bb:f9:df:2b:aa:79:80:67:b7:ac:c4:d2:
12:7f:2e:7c:47:81:bc:d6:5f:1a:ff:22:79:d4:4a:
0c:12:76:c3:c7:46:27:82:21:9d:93:9d:d2:b6:9e:
c6:09:4e:8c:88:87:07:3f:2f:dc:7e:e6:6d:2d:05:
22:be:c5:79:fd:46:54:03:f1:5a:9c:db:1f:a1:cc:
c0:d2:ec:7b:ac:5d:77:f6:e7:85:e7:aa:9b:f2:13:
ee:6d:8f:19:09:c4:a4:41:40:ff:68:0c:32:5f:7f:
96:cc:55:ee:e9:70:5b:6f:c7:c7:a3:a7:d5:e8:cc:
26:90:dd:76:49:e2:26:21:d5:5d:6d:0b:c9:15:f0:
72:21:a7:c5:78:e7:91:fd:b6:a8:a0:0e:88:2f:7e:
90:7e:eb:0b:b8:6a:db:49:c1:1e:30:14:0e:51:3a:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:A8:28:42:89:32:60:74:1B:F9:33:D5:B8:CB:EB:90:C2:28:BC
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TFKoKEKJMmB0G_kz1bjL65DCKLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f026::/48
Signature Algorithm: sha256WithRSAEncryption
15:38:2c:f9:e5:77:7c:6c:20:93:a2:ef:f9:c4:b8:ea:e9:60:
fe:2a:1d:16:41:32:04:7d:d1:7c:71:14:91:23:25:11:c4:09:
a6:86:ab:1a:4f:08:c9:d7:11:47:cf:a6:64:9b:52:d5:5a:0c:
90:45:a5:52:f0:11:0d:65:1b:6f:bc:fd:51:d9:29:6f:f7:26:
33:2e:4a:c1:8a:89:89:dd:40:57:fc:af:96:a4:68:18:b2:76:
3b:c9:95:68:c4:f5:c9:20:e5:3d:09:a2:53:92:fb:9f:55:ef:
fd:4e:80:dd:42:2b:93:3a:6a:23:9d:52:22:29:ac:e0:10:58:
0a:42:a8:73:0a:fe:59:49:b9:a4:01:15:a9:93:0a:b8:ab:10:
a9:f0:98:d9:0d:dc:ec:21:a4:9b:75:f8:61:6f:52:48:1e:f4:
85:ff:4a:8a:d6:93:96:3b:8c:47:f3:16:38:82:a8:98:d1:87:
62:70:e1:96:70:20:5e:16:28:75:3f:36:da:92:34:cc:5e:7b:
82:d1:99:30:0e:da:a9:6d:7d:50:15:a1:6e:56:8d:11:93:16:
0f:b1:76:9b:e5:95:01:cd:87:ef:16:b1:75:95:27:21:e3:a5:
28:28:68:85:54:04:3a:fc:cd:b2:f1:0d:d0:12:ba:90:a7:b2:
50:8b:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:03:37 2024 by rpki-client on console-fra.rpki-client.org