Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/TfQskO7R5LVZ9axeYujrjREBNWM.roa
File: TfQskO7R5LVZ9axeYujrjREBNWM.roa (raw, json)
Hash identifier: pbxpqwc59sRWN78cvuuLW14xb0Fxzm58dyk/xlLwi6o=
Subject key identifier: 4D:F4:2C:90:EE:D1:E4:B5:59:F5:AC:5E:62:E8:EB:8D:11:01:35:63
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 018F805689B932F2809562FE273769A41063
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/TfQskO7R5LVZ9axeYujrjREBNWM.roa
Signing time: Thu 16 May 2024 07:38:25 +0000
ROA not before: Thu 16 May 2024 07:38:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208377
IP address blocks: 193.242.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:56:89:b9:32:f2:80:95:62:fe:27:37:69:a4:10:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: May 16 07:38:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4df42c90eed1e4b559f5ac5e62e8eb8d11013563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:74:12:32:d3:c8:31:9a:49:f6:83:4c:4e:
74:93:a3:2c:b8:5e:89:a7:bf:0c:87:81:fa:a4:7f:
18:bd:54:2f:96:ba:3e:38:80:50:4b:6b:8c:01:f1:
5e:ab:39:b5:43:41:ae:8d:1e:14:2f:e4:c8:b5:f1:
8f:76:cb:b5:31:b4:b6:d4:4f:d5:28:e8:b8:d3:ab:
ef:21:ba:c6:93:03:25:74:36:e8:44:e5:78:60:9c:
c8:3c:f6:2b:0d:31:50:23:a7:2b:5e:0a:9e:43:85:
92:3a:00:a5:fb:6a:01:3f:41:6b:ff:e4:89:9a:90:
d6:fe:e6:bf:ea:4b:13:fc:45:f0:2d:16:71:52:4d:
44:2f:f2:6e:8e:b0:87:c1:ff:e0:7e:df:80:5a:55:
9c:d0:78:b5:67:ee:a3:06:36:91:32:aa:86:cd:a0:
0d:0d:66:74:d9:8a:33:03:3e:3e:ff:2a:87:47:d9:
ce:82:0e:a0:d1:93:4f:83:b0:91:ae:25:74:c5:30:
86:bf:ec:c7:76:05:b8:b3:a1:fe:49:2b:e5:f9:f3:
fd:95:f2:9d:a7:26:89:d2:6e:fd:0b:48:59:eb:c5:
20:05:c9:d6:32:03:c4:92:91:15:bd:b9:32:ab:b8:
95:f3:e2:f6:31:ac:9e:75:df:18:23:d9:0c:62:ac:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:2C:90:EE:D1:E4:B5:59:F5:AC:5E:62:E8:EB:8D:11:01:35:63
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/TfQskO7R5LVZ9axeYujrjREBNWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ac:0f:56:9a:ac:1d:d2:4e:b4:75:20:20:99:87:7b:26:f6:
c8:92:aa:b6:90:10:20:62:c9:66:45:3d:6f:cd:40:df:5d:10:
3e:61:f2:73:ed:3d:47:c6:88:cf:03:34:67:6a:ba:19:11:c9:
11:41:74:42:25:f6:6b:b1:ca:bb:a4:0d:1a:61:3c:e6:ee:c5:
94:de:c7:39:de:c5:4f:c9:d7:c3:a5:71:97:f9:c3:35:93:1e:
3c:19:44:42:a8:7c:0b:54:1e:c5:eb:97:cc:7f:0d:71:86:5c:
63:1a:1e:c0:42:46:04:9d:4e:0f:ae:40:e6:9f:fb:ef:7b:b8:
36:9b:ab:29:f1:c3:db:eb:b7:0e:b3:f4:75:83:d7:16:3a:f5:
34:f4:cf:63:3b:cb:b2:8a:1f:0b:d6:69:81:9e:9e:67:99:88:
7f:f0:69:a9:ad:89:29:98:4c:f5:a7:79:ef:ef:99:31:5f:fd:
c9:d5:c9:50:d5:8e:f2:c0:20:55:f8:59:2c:e9:30:73:c1:44:
d7:cd:e5:70:70:ea:71:eb:31:a7:7b:93:33:10:7f:48:5f:07:
38:4e:05:6b:cf:5f:16:f0:d3:de:f7:fa:5c:3c:63:a4:29:ac:
08:e7:d4:af:cc:77:3b:9a:2b:c8:a0:d5:93:28:45:47:e5:89:
b9:cf:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:40:14 2024 by rpki-client on console-fra.rpki-client.org