Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/TncKO9usCM42zbHfNFl4UgZXciM.roa
File: TncKO9usCM42zbHfNFl4UgZXciM.roa (raw, json)
Hash identifier: rGWWfBD7dB+lCBmTkjDxL1bq5W36FI9AxJB2wEAWy+8=
Subject key identifier: 4E:77:0A:3B:DB:AC:08:CE:36:CD:B1:DF:34:59:78:52:06:57:72:23
Certificate issuer: /CN=75d003bee173163d19a9927ab371221f95f10fd3
Certificate serial: 018CC86F4E68DA94F8BAFF8E6006F64EFF5F
Authority key identifier: 75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/TncKO9usCM42zbHfNFl4UgZXciM.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 178.211.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 19:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4e:68:da:94:f8:ba:ff:8e:60:06:f6:4e:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d003bee173163d19a9927ab371221f95f10fd3
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e770a3bdbac08ce36cdb1df3459785206577223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:4b:92:93:9b:aa:fe:7f:6f:03:95:69:83:
62:c9:8b:57:ad:48:08:d9:ed:0e:b4:8d:f4:28:e4:
1e:7b:c4:1a:b7:08:74:23:58:f3:fd:af:b9:f5:0c:
f7:79:42:2b:1d:82:7e:7e:e6:c1:83:97:53:27:94:
1f:39:19:6c:2c:2c:63:bf:57:37:3a:5c:f4:93:56:
37:c4:29:72:a1:61:84:99:cc:49:b1:db:60:f9:7a:
fd:fa:a9:42:e0:68:cc:2b:1a:3c:00:88:da:bf:b2:
72:8b:58:1f:97:f0:c9:87:f5:63:6f:ed:f9:82:c4:
cf:ff:82:d7:d7:19:8d:3a:99:b0:2b:8a:06:4f:b6:
3b:14:fe:99:39:c7:7a:b6:00:d3:4c:cd:69:a7:b7:
00:0a:13:c5:54:4a:da:70:6b:f7:71:e3:50:30:39:
9e:de:c9:d2:8c:8e:00:12:bb:dd:b4:c6:a7:b3:34:
65:e7:d4:08:86:cc:d8:e7:81:58:d9:0e:34:08:ff:
73:64:18:e9:1b:67:80:6a:98:0f:23:fc:8b:21:f7:
ab:b2:d5:48:df:0b:53:d3:bc:f8:18:2d:0c:3e:09:
f0:15:3d:fa:c7:77:b5:3d:2d:d2:1c:c3:81:12:a3:
8b:5f:2a:58:04:49:fb:74:90:f2:b2:04:6b:d6:89:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:0A:3B:DB:AC:08:CE:36:CD:B1:DF:34:59:78:52:06:57:72:23
X509v3 Authority Key Identifier:
keyid:75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/TncKO9usCM42zbHfNFl4UgZXciM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.154.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f0:e5:2f:35:d1:7e:c9:b4:8d:f1:0a:6d:3f:12:24:d8:53:
c3:bb:17:78:fa:36:e5:78:f1:64:0a:ab:da:36:f8:0b:78:ce:
cd:e3:5b:fa:15:b4:f4:2f:12:22:02:24:9a:08:3a:a7:92:bf:
cb:b7:6a:1a:e6:b1:68:9b:63:54:c6:93:5a:c8:32:88:ad:00:
05:0e:00:ae:a0:fb:26:09:5d:e2:32:8f:b9:9c:ad:78:9f:7f:
cd:10:46:fc:bc:d8:cb:67:63:01:0b:40:bd:73:ad:88:75:f6:
0c:a6:cf:20:2c:f0:d1:07:3d:c0:ee:f0:02:ca:24:c8:d4:36:
1a:51:06:99:6a:a3:1e:62:dd:b0:c1:ff:68:d2:91:6f:31:e1:
ee:a0:04:d1:35:b0:62:0e:02:43:86:ef:46:93:d4:50:29:6c:
4b:d6:e8:cb:56:43:dc:44:7c:e2:84:5c:8d:1d:b1:43:1d:dd:
ad:be:43:dc:53:a6:9b:d8:ed:83:57:94:d0:82:61:38:77:7d:
a5:7b:b6:e0:3a:68:c5:c7:5e:2a:58:21:72:ca:b7:14:c5:26:
f7:c5:de:0c:d3:1b:dc:e6:5b:3c:1c:cf:24:10:9b:6f:ab:59:
b7:80:03:32:8c:08:23:43:ef:fc:50:bd:ed:5e:8e:8a:59:41:
7b:59:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:55:45 2024 by rpki-client on console-ams.rpki-client.org