Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/Tkvu0udPIozi8Vzbnw8JVpR8Mgo.roa
File: Tkvu0udPIozi8Vzbnw8JVpR8Mgo.roa (raw, json)
Hash identifier: RcGdbjXBN/i9lN3fWQeKzhYDCO8w3v1F4GyUyTZAs8A=
Subject key identifier: 4E:4B:EE:D2:E7:4F:22:8C:E2:F1:5C:DB:9F:0F:09:56:94:7C:32:0A
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 018CC5DC80AE4D8722BBEE02F932BA510AF3
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/Tkvu0udPIozi8Vzbnw8JVpR8Mgo.roa
Signing time: Mon 01 Jan 2024 16:30:11 +0000
ROA not before: Mon 01 Jan 2024 16:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137
IP address blocks: 155.185.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:80:ae:4d:87:22:bb:ee:02:f9:32:ba:51:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jan 1 16:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e4beed2e74f228ce2f15cdb9f0f0956947c320a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:f7:0b:a2:fe:ed:3c:ff:08:24:34:66:74:
2c:80:74:9a:9f:cf:9f:47:09:34:d7:c0:5c:84:c4:
8c:fa:e0:43:af:0f:e2:2d:63:b2:da:58:8d:8e:1b:
21:86:66:9d:00:fc:40:82:b4:da:e0:71:ca:e1:f5:
f8:6f:69:63:55:26:31:b4:de:55:a3:65:a6:0a:2e:
0a:b8:6f:20:d4:a5:77:be:fd:e4:7b:48:75:11:b3:
f7:21:af:2e:51:e4:24:a7:ae:be:e6:27:c0:76:d6:
41:87:2d:35:2a:75:07:0d:fb:55:ee:ad:62:18:a1:
28:1b:8a:ee:a7:82:cf:4f:64:50:7a:e9:8a:e1:1a:
05:c2:c8:05:b6:02:7a:83:1e:f5:39:72:f1:28:82:
da:ed:9a:d0:30:1f:db:9b:f3:50:ad:55:ac:1c:70:
3a:32:93:a5:2a:39:9a:32:f8:01:9c:bd:a9:1a:08:
05:70:76:6f:fb:bd:9d:b5:92:07:f4:3f:94:cd:f6:
cc:e8:7c:77:b4:dc:8c:d8:58:be:05:d4:7c:43:f5:
91:69:8e:98:7c:42:c2:47:95:57:88:bc:c9:3f:db:
93:f3:11:33:9f:01:cf:f1:55:bd:3b:96:76:ad:ad:
ac:83:e3:f1:e3:8e:4d:3d:d6:84:cd:c7:94:3c:9a:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:EE:D2:E7:4F:22:8C:E2:F1:5C:DB:9F:0F:09:56:94:7C:32:0A
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/Tkvu0udPIozi8Vzbnw8JVpR8Mgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.185.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:88:dd:a8:61:24:67:53:f3:56:69:90:94:48:11:3f:8b:db:
6a:14:f6:69:4d:74:e5:38:19:3c:05:a0:16:37:ce:fe:cb:c3:
31:d6:9a:3e:68:65:bd:09:9a:1b:1f:95:57:41:26:20:99:a2:
db:44:50:84:3d:70:a0:f4:42:64:ab:db:00:b6:fe:60:28:be:
31:4d:d1:d7:bf:00:ec:4d:1b:50:f6:06:f9:82:16:e3:99:a9:
0c:64:bc:8f:4f:f8:fe:d4:47:90:c4:e9:94:5b:9d:29:1f:45:
ce:c9:d1:7f:ce:86:bc:c3:87:86:a7:a6:db:46:8c:c1:b9:52:
3b:0a:50:2f:61:10:30:aa:fb:34:e6:2c:34:f3:f1:48:10:80:
23:57:5b:35:bc:50:69:de:90:0b:fd:f7:de:29:50:cc:ad:37:
9b:81:2d:c5:b1:69:cb:ff:94:a0:ed:13:cf:33:94:05:83:f9:
90:86:0f:f4:aa:3a:52:eb:dd:59:a8:72:2a:79:75:5e:56:08:
f6:5b:f1:74:5f:ea:75:9f:9b:ad:7e:c4:92:59:5a:37:80:1e:
c1:17:31:17:73:f6:4c:18:1b:8c:30:52:95:d2:1e:9e:7c:c9:
38:43:70:65:ad:f1:59:41:f4:43:e0:51:80:b7:ec:6c:fe:90:
80:56:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:01:57 2024 by rpki-client on console-fra.rpki-client.org