Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TAamK51T-O1YnL1OgjI9u605KbY.roa
File: TAamK51T-O1YnL1OgjI9u605KbY.roa (raw, json)
Hash identifier: nAq4p3reMu9/4++bJRJ6tqGDnwdNfhmMpx4pL3ZsNok=
Subject key identifier: 4C:06:A6:2B:9D:53:F8:ED:58:9C:BD:4E:82:32:3D:BB:AD:39:29:B6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018DA668CB11E96B62A0E5ABB5F3A8B73EFE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TAamK51T-O1YnL1OgjI9u605KbY.roa
Signing time: Wed 14 Feb 2024 06:58:21 +0000
ROA not before: Wed 14 Feb 2024 06:58:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 84.32.20.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:68:cb:11:e9:6b:62:a0:e5:ab:b5:f3:a8:b7:3e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 14 06:58:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c06a62b9d53f8ed589cbd4e82323dbbad3929b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:b8:fd:bd:36:a3:57:83:c2:bb:84:48:c7:
1e:b1:24:43:22:a5:c5:3e:d3:d3:1d:94:f4:bd:f0:
cb:7f:eb:03:0b:7f:3f:a4:97:42:6a:97:2d:99:81:
ce:1d:23:e4:41:82:af:21:98:2d:2f:0f:67:b1:7e:
0c:9c:d4:e6:be:e9:cb:29:f7:d8:ec:79:6c:0a:90:
2a:7d:e2:f8:e3:bb:62:88:94:d5:1c:d8:df:d0:ee:
ea:0e:df:93:02:78:b5:48:84:ef:57:08:7b:f9:80:
12:98:d4:ad:3d:c9:d6:2d:9b:fb:d8:4d:f0:36:65:
23:6d:e8:5c:32:27:85:14:fe:11:d0:6f:c1:68:fa:
ea:79:ff:ee:8d:2c:dc:dd:d6:6e:55:1a:a4:d7:8e:
fa:c8:dd:21:10:92:b2:3e:b9:dd:5b:f4:56:a4:7e:
0f:ac:fd:07:1c:60:77:44:b5:8a:6d:18:67:40:5a:
19:c4:c0:ad:cd:8b:31:e1:cc:88:51:67:0e:4e:43:
56:7b:a5:c1:d0:2d:33:46:60:72:ef:ed:2b:dc:fc:
a3:a1:fc:ed:dd:45:44:54:13:db:f8:1e:cf:86:40:
98:aa:4a:fd:49:eb:61:f9:72:eb:e4:07:92:65:9d:
89:67:f3:80:7e:86:a1:2e:74:67:06:6e:ff:e6:ca:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:A6:2B:9D:53:F8:ED:58:9C:BD:4E:82:32:3D:BB:AD:39:29:B6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TAamK51T-O1YnL1OgjI9u605KbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.20.0/24
84.32.58.0/24
84.32.60.0/23
88.216.36.0/24
88.216.92.0/23
Signature Algorithm: sha256WithRSAEncryption
10:79:54:e1:7f:2f:90:01:f3:e2:eb:ed:ad:52:b4:a6:ad:9e:
ad:80:13:52:ac:e0:c0:82:8d:c4:7d:de:85:17:d8:a8:5a:e4:
d6:03:c1:33:40:4a:eb:97:2f:54:09:33:4c:9a:5b:7f:21:7d:
19:c9:91:11:6f:f6:33:35:ad:35:ba:9e:62:ff:aa:ff:a5:72:
79:42:fc:c5:d3:72:3a:19:ae:63:a3:94:74:74:56:e1:a2:75:
ca:cc:73:f2:50:9d:ad:9f:f1:e1:67:d2:9b:86:85:4d:b7:92:
c5:3c:50:b8:d2:39:96:f1:62:53:75:29:8f:36:2c:7c:34:65:
2d:f1:8d:db:a6:70:ac:50:80:b7:4b:54:d7:32:89:04:2c:4a:
22:df:ef:e3:2f:06:a1:5c:c2:9c:d9:6e:f5:ce:a0:49:43:9c:
40:f2:e3:2c:61:0e:b7:4a:41:89:d8:8c:6a:76:05:7d:0a:67:
9a:9a:0f:3d:76:1b:a6:bc:48:3f:a3:28:85:24:95:dd:b1:44:
87:d9:69:35:46:dd:90:fd:3a:a3:65:c4:12:d8:99:b6:aa:98:
7c:80:98:04:59:a9:96:1b:aa:ea:7e:d2:a5:63:d6:d3:da:ab:
79:7b:3c:1b:7e:8e:f7:91:03:53:99:f5:aa:a6:fc:54:f1:6e:
cf:b0:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:54:07 2024 by rpki-client on console-ams.rpki-client.org