Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TwV7vufFFJKsMFCsR3Lptf1rF50.roa
File: TwV7vufFFJKsMFCsR3Lptf1rF50.roa (raw, json)
Hash identifier: xVDosTWJMAvZQEqmxBqgepLD8mA8GwcJHfJVJR4jAYY=
Subject key identifier: 4F:05:7B:BE:E7:C5:14:92:AC:30:50:AC:47:72:E9:B5:FD:6B:17:9D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB376E42E995A913A1E2A69A1EF5A5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TwV7vufFFJKsMFCsR3Lptf1rF50.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206582
IP address blocks: 193.31.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:37:6e:42:e9:95:a9:13:a1:e2:a6:9a:1e:f5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f057bbee7c51492ac3050ac4772e9b5fd6b179d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:32:38:59:ce:99:ab:81:35:1a:29:17:3d:
4c:8e:50:7a:d2:95:ec:cf:2d:b0:8f:9f:c6:4f:42:
8a:f0:2e:58:8b:30:a2:b4:0d:b1:6e:1e:3f:89:ec:
f1:91:49:43:4c:8b:c0:69:38:dc:b4:e7:19:6f:29:
e7:ca:fc:7e:4a:e1:6f:2a:b9:13:dc:28:aa:4c:83:
4c:63:25:e0:04:0a:39:15:1c:88:5f:79:05:34:8a:
a1:15:7e:f3:a1:14:96:52:11:6e:47:a1:6a:d6:68:
8a:3d:c0:dc:c2:17:60:48:cf:d9:25:43:70:fd:67:
7b:a1:ee:72:9f:b6:4e:56:78:f8:bf:4f:03:3b:46:
0c:3d:f3:c7:ed:24:4a:02:84:3b:4f:14:84:dc:68:
36:65:c1:fa:2b:8a:95:87:ee:35:0a:9c:e8:f6:53:
a5:88:7e:a3:e9:c5:19:6e:49:40:e6:db:34:29:05:
5d:05:ac:91:44:e1:07:eb:96:17:5d:3b:8d:7f:af:
39:6e:c8:ad:02:37:83:eb:9e:34:4a:e2:69:85:bd:
71:59:07:13:bd:f3:ae:3f:28:29:9f:7e:a5:bc:0f:
33:d9:55:d8:39:da:09:99:b0:ed:5a:9a:6d:ec:fe:
0d:6c:dd:95:ae:ff:8d:01:cd:ef:08:c5:8c:5b:bc:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:05:7B:BE:E7:C5:14:92:AC:30:50:AC:47:72:E9:B5:FD:6B:17:9D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TwV7vufFFJKsMFCsR3Lptf1rF50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
43:9b:fa:c8:6f:53:59:5e:e3:b9:27:d4:15:c4:f4:1f:10:9a:
a4:f6:b7:ec:e5:fd:4f:d1:cc:39:1e:79:d6:4a:ae:78:54:69:
66:42:d1:19:ad:2c:91:1b:7d:f8:91:86:f4:57:72:d2:9d:00:
89:d5:98:0f:36:a2:f6:b4:82:9c:81:c3:5b:2e:86:19:a5:69:
57:88:68:58:90:09:e6:e3:64:f3:27:39:bc:a7:75:18:d5:91:
21:58:d4:3f:e6:b9:cb:8f:ec:db:f7:4b:64:ee:6f:84:4f:f1:
e1:d5:1a:a3:a3:ab:29:43:dd:09:66:71:0a:86:42:5a:2f:0f:
7b:8c:f0:2b:4f:f4:03:4c:92:cd:ba:e7:6f:eb:90:51:51:b5:
ca:09:05:89:2f:23:67:15:e0:32:08:62:dd:bf:d2:34:4e:6d:
c0:63:c3:d3:6d:9c:ff:e5:eb:37:65:4e:60:76:25:41:4b:03:
03:c2:a3:c1:61:21:cd:c7:38:83:1d:db:f6:e3:64:7c:fe:bb:
72:62:21:0c:69:34:df:39:c8:19:f8:b2:8a:d4:4d:f5:fc:12:
21:69:c7:ff:c0:35:81:7f:ca:9b:be:dd:24:d2:ca:3d:ab:b7:
2d:55:a6:60:3b:f4:ba:3a:e2:48:3b:66:6a:7f:ba:35:f2:8a:
4e:40:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:57:30 2024 by rpki-client on console-fra.rpki-client.org