Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/TfdenJYaNti8esR6f08uTCiek7I.roa
File: TfdenJYaNti8esR6f08uTCiek7I.roa (raw, json)
Hash identifier: l0hFvBXZXwobqRB09kkmILZ3DQOuiBwKaxrw78EqaJY=
Subject key identifier: 4D:F7:5E:9C:96:1A:36:D8:BC:7A:C4:7A:7F:4F:2E:4C:28:9E:93:B2
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC500497B8A761F7970E91D4F085DACD7
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/TfdenJYaNti8esR6f08uTCiek7I.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198265
IP address blocks: 217.113.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:49:7b:8a:76:1f:79:70:e9:1d:4f:08:5d:ac:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4df75e9c961a36d8bc7ac47a7f4f2e4c289e93b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:df:99:91:c9:c2:90:c1:d4:12:03:f2:6e:
5b:5a:71:23:21:25:b6:9a:60:e4:7a:3b:8d:49:d8:
72:8a:28:ed:e6:ba:58:7d:00:5a:78:36:85:6e:b7:
ac:e2:99:03:c8:16:45:81:87:9c:13:49:e9:38:49:
ec:3b:57:01:98:db:ea:6a:25:87:1d:91:fa:52:94:
6f:04:2b:e8:eb:19:a2:42:60:5c:49:0a:90:10:f2:
4a:ad:0b:eb:a6:1c:d3:af:47:3b:88:63:3d:8d:8e:
04:f2:8e:d1:81:de:5b:9b:69:03:25:0b:aa:2d:20:
97:17:b2:b2:52:1d:fc:9b:a9:b4:d0:34:35:46:24:
ae:63:b0:7d:0d:bd:5f:67:ed:07:22:48:24:51:c1:
b2:65:f2:e3:71:66:da:ff:48:c1:ea:d2:fc:c0:9a:
f2:f0:69:93:b0:d8:fe:db:ec:e8:cd:83:90:95:ff:
a7:f5:59:de:21:48:97:f0:02:96:5c:15:34:8b:5c:
35:30:21:2c:2c:db:54:26:6d:10:76:f1:75:ef:c8:
ef:be:04:b4:29:4a:d4:b0:bd:e0:16:f9:d7:71:cd:
e9:ee:ae:c0:ee:82:11:88:9d:44:dc:5b:1e:bc:3f:
0f:b2:0a:fa:44:18:ea:e5:7c:12:6c:c6:25:06:a2:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:5E:9C:96:1A:36:D8:BC:7A:C4:7A:7F:4F:2E:4C:28:9E:93:B2
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/TfdenJYaNti8esR6f08uTCiek7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.25.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8f:f5:d8:51:9b:02:70:90:ca:95:37:d1:63:4d:fb:24:0a:
d5:29:2f:9c:bb:18:64:24:28:25:9a:b0:ff:14:11:f1:fa:df:
13:a5:9e:a0:bb:d3:e6:84:75:d3:41:0e:66:d0:4b:71:89:bf:
d5:f1:2b:93:4d:82:07:08:f9:5b:95:ab:55:b1:ad:0b:2e:33:
42:0f:a9:0e:df:1e:39:5c:96:df:37:7c:28:e8:56:21:75:1d:
8a:23:a1:3d:85:8d:3b:ee:b6:e0:55:08:92:94:8d:5a:c9:5c:
88:1e:bf:3a:a4:8a:2b:2b:a5:cd:3f:23:71:ba:72:82:5d:a7:
c0:94:ea:d7:f1:94:b1:1f:1e:73:0f:d2:f5:83:84:dc:6f:1d:
fb:15:30:bf:c5:da:e9:56:9d:70:e1:e3:c4:ec:d7:66:e8:69:
eb:20:9b:84:b4:a5:d3:87:37:75:40:3a:42:de:c1:e5:75:94:
20:59:dc:ed:b4:89:a3:e0:94:91:a8:4d:d1:6f:51:d9:09:02:
c2:32:3e:6b:70:99:ec:0f:65:0c:bf:75:5d:da:f7:27:4e:ed:
1c:df:83:f1:1e:e5:f1:ac:7d:85:d1:7c:d2:ab:27:02:48:ba:
14:10:b2:a1:5a:a0:a4:0e:be:6d:38:83:8c:fe:ae:6e:ba:11:
b0:38:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:08:39 2024 by rpki-client on console-ams.rpki-client.org