Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tmt_g2OB4QRuMo_150755e0C33o.roa
File: tmt_g2OB4QRuMo_150755e0C33o.roa (raw, json)
Hash identifier: IvW/IFqzfuxdzyyGBEFwsWPv4HADTes8YrW/dbwGASY=
Subject key identifier: B6:6B:7F:83:63:81:E1:04:6E:32:8F:F5:E7:4E:F9:E5:ED:02:DF:7A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01935268F335929F9102378F1855A18B1AF9
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tmt_g2OB4QRuMo_150755e0C33o.roa
Signing time: Fri 22 Nov 2024 05:47:09 +0000
ROA not before: Fri 22 Nov 2024 05:47:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59642
IP address blocks: 188.209.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:68:f3:35:92:9f:91:02:37:8f:18:55:a1:8b:1a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Nov 22 05:47:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b66b7f836381e1046e328ff5e74ef9e5ed02df7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:9e:f8:95:c3:26:a5:8e:e3:bb:7d:c7:38:
ed:c7:8f:03:37:47:d8:1c:f4:98:cb:cb:86:68:2c:
c5:60:38:5c:8e:3f:17:3f:38:e8:45:30:bd:64:cb:
b5:8e:15:03:de:32:93:58:31:84:13:e5:cf:06:be:
7b:44:4c:ed:96:22:4d:56:e3:82:9f:13:c1:f9:0e:
a9:f8:7c:f8:d9:94:d7:6f:61:47:59:cf:fd:09:3c:
43:62:52:36:ab:db:2f:c6:62:a8:fb:a4:b0:a7:65:
6c:4a:12:a6:9a:79:3c:aa:51:88:be:d4:e3:2a:90:
a7:7c:eb:09:5a:38:35:77:3e:70:0b:33:a6:ff:90:
ab:32:27:c5:27:62:14:cd:61:b2:c7:77:bb:d8:75:
05:77:43:49:e2:39:03:4a:24:69:a6:a8:aa:76:11:
ea:19:b8:40:71:06:36:ee:c3:23:53:a3:de:49:34:
d4:31:2e:93:1a:90:fd:4e:86:eb:9b:1c:98:12:91:
f6:e6:07:30:2c:22:16:98:38:4b:75:01:51:5c:0e:
be:7c:0c:0f:88:ca:a9:7c:68:1c:8a:71:32:4c:ff:
e5:38:eb:5e:fd:37:f5:5f:94:79:37:a8:c1:2f:4c:
5a:e8:88:62:e7:a0:7c:e6:8d:f5:b1:65:92:b3:5f:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:7F:83:63:81:E1:04:6E:32:8F:F5:E7:4E:F9:E5:ED:02:DF:7A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tmt_g2OB4QRuMo_150755e0C33o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
75:93:b5:4c:2c:92:52:06:97:2d:f6:fa:14:90:4c:93:27:39:
e4:a7:93:51:9a:60:cf:e2:90:b1:ea:4a:de:bd:7e:36:99:60:
26:a3:f0:61:7f:92:33:4e:94:f1:01:d6:d6:4b:08:5f:ca:15:
67:e9:6c:a4:09:79:b3:ce:7b:b5:75:1e:b5:ba:50:47:21:59:
9e:6e:c9:9e:64:34:e2:13:d9:50:07:d3:c9:87:58:0a:a3:c7:
66:ae:be:f6:3b:43:a2:4b:39:e3:62:24:68:ef:12:80:67:22:
84:54:16:5d:12:48:74:f5:cf:85:05:99:0d:65:0e:66:73:6c:
b2:f5:59:a5:dc:62:90:ca:b3:ee:55:53:13:39:86:5e:2c:0f:
2b:7e:0a:d7:21:51:6c:52:85:ac:c5:15:b7:45:79:29:bb:0b:
97:2c:80:01:8b:bb:63:af:0f:b1:fc:ce:1e:f5:62:20:d1:11:
38:b1:6e:63:94:cd:88:88:00:ad:d7:32:03:b3:dc:35:b7:77:
d2:ac:19:79:fa:19:5a:42:6f:50:3a:76:95:c5:ff:d3:ce:84:
1d:e2:f9:22:eb:38:37:f2:ad:d4:be:fd:df:18:e8:b1:07:07:
41:65:ba:78:c7:09:36:3e:f8:ad:a6:b2:04:69:c6:30:b9:e9:
ff:87:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:03:56 2024 by rpki-client on console-ams.rpki-client.org