Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/TL9iW2XHt_4OarMRawmAqw1gz8k.roa
File: TL9iW2XHt_4OarMRawmAqw1gz8k.roa (raw, json)
Hash identifier: Hj5gOHijIv7nqiKBBKIJ1hMoo9ogMnE3f32jYUrUisU=
Subject key identifier: 4C:BF:62:5B:65:C7:B7:FE:0E:6A:B3:11:6B:09:80:AB:0D:60:CF:C9
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018CC8DEDC78A43B54E07BF4A5BCD1B3E826
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/TL9iW2XHt_4OarMRawmAqw1gz8k.roa
Signing time: Tue 02 Jan 2024 06:31:37 +0000
ROA not before: Tue 02 Jan 2024 06:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61341
IP address blocks: 193.27.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:dc:78:a4:3b:54:e0:7b:f4:a5:bc:d1:b3:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 2 06:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cbf625b65c7b7fe0e6ab3116b0980ab0d60cfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:94:d8:26:19:06:57:8a:17:76:d9:ac:4d:
0b:2c:ab:0b:b6:38:7c:09:e2:eb:f8:be:74:71:d5:
17:f0:b2:72:2f:47:8e:ff:63:0f:3a:45:4c:43:fd:
2a:ad:47:92:b9:d9:57:32:46:0e:6a:e2:e3:67:d9:
07:6f:c6:77:50:8f:4f:b3:e0:d6:43:93:8d:e5:fc:
5c:a0:36:2f:f9:15:bd:ac:29:83:26:62:9b:7e:1a:
d7:de:66:49:3c:9c:62:88:8c:c8:ac:54:a3:d3:10:
2b:c3:0d:37:d0:99:f5:bb:6d:55:70:ab:5a:3d:b6:
89:e1:a0:11:3d:ce:3b:89:d2:0a:91:56:52:3e:85:
7e:5c:f5:9d:bf:1a:17:4e:75:f1:63:69:65:5d:8a:
04:00:8f:6f:a3:97:5c:ae:bc:01:0b:69:82:56:14:
bf:af:46:04:4a:06:a2:ec:0e:60:04:86:85:ca:10:
c7:35:9f:1c:a4:70:7d:58:9e:da:40:78:fe:60:c3:
a3:5f:c7:30:b9:21:fe:35:ab:72:43:28:14:58:ea:
0f:10:c2:3d:ac:a1:1f:77:b8:94:63:46:36:cb:29:
83:e4:c6:bb:de:d3:98:21:54:6f:c7:b6:9d:fe:ab:
c2:e8:96:f9:c7:00:ab:59:d6:94:04:2d:5b:bf:03:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:62:5B:65:C7:B7:FE:0E:6A:B3:11:6B:09:80:AB:0D:60:CF:C9
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/TL9iW2XHt_4OarMRawmAqw1gz8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
52:95:bb:d7:58:f8:2d:fe:68:1b:fe:0a:1f:b4:8a:0d:9c:97:
1c:d3:bd:09:15:79:74:61:93:f5:d4:55:2b:d2:64:d4:3c:e7:
45:bc:b7:67:f7:ce:c7:87:f2:82:f3:ae:a9:2a:d1:68:30:c8:
13:5a:7a:79:c9:c1:69:88:db:03:06:e5:32:ac:29:a9:d3:2e:
f2:67:8a:cc:e2:f7:8e:85:f8:9c:a6:51:97:42:dc:d7:f1:fc:
3d:38:f4:71:5b:b7:c5:74:74:3e:0d:0b:73:31:99:d3:6c:17:
17:0e:17:80:76:48:55:d7:a1:f2:e3:87:f4:d2:e4:12:13:5b:
71:0a:d2:25:80:ca:d5:2e:db:61:7a:a3:81:e1:bc:31:1e:f3:
db:ed:2b:8d:76:86:a2:0b:7e:cc:ac:bf:3c:e1:3d:37:9b:90:
a5:b4:1f:cf:3d:20:23:8e:42:c4:f0:14:da:2a:b1:34:b1:33:
c3:c8:d4:0e:16:6b:40:cd:e2:94:bd:28:6b:e2:96:8f:98:e4:
7c:31:39:69:53:a0:d8:cf:f1:bd:c7:da:82:ea:7b:3b:84:92:
65:82:87:dd:0d:2c:d4:c0:4a:88:2d:7e:e0:4e:77:70:cc:99:
e6:85:c0:61:07:1f:25:b8:0d:0a:55:05:f3:fc:2c:ec:24:49:
39:9a:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:27:00 2024 by rpki-client on console-ams.rpki-client.org