Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tuDlSbtfZDcR571p6gIk3rGjXcM.roa
File: tuDlSbtfZDcR571p6gIk3rGjXcM.roa (raw, json)
Hash identifier: AKcowYjx9v3/bJ97GdBnTwBjC7cUsuo300D92DuQmWE=
Subject key identifier: B6:E0:E5:49:BB:5F:64:37:11:E7:BD:69:EA:02:24:DE:B1:A3:5D:C3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5014FEA19A803C329003EEEA015D0E6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tuDlSbtfZDcR571p6gIk3rGjXcM.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 84.32.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4f:ea:19:a8:03:c3:29:00:3e:ee:a0:15:d0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e0e549bb5f643711e7bd69ea0224deb1a35dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:9b:5d:9d:dc:f4:5c:14:99:9b:97:66:06:
e1:0b:f1:a5:03:97:31:eb:09:6f:32:bb:64:a2:ce:
2c:fb:d7:b4:40:81:44:d1:0f:55:84:1b:88:87:4c:
ba:9c:d2:1b:61:d2:ae:5f:54:03:7e:93:44:bb:72:
0e:d1:cd:3f:52:5a:b5:76:fb:d4:97:c5:c9:14:c6:
4c:5c:c3:1b:fe:a7:20:e2:02:50:0e:da:bf:11:88:
d7:9e:4c:85:ca:c5:bd:dd:bb:04:6a:bc:38:fb:43:
c9:c4:fe:ae:71:8e:66:f7:2a:8b:db:8f:b5:66:6e:
a7:0c:c0:e9:b8:76:df:1e:4d:8e:5b:14:98:17:1e:
75:eb:5d:3b:6b:cf:1e:5f:2e:9d:43:b0:4c:2a:20:
fb:d5:9e:dd:dd:9e:e7:fc:74:9f:e3:fb:c8:30:66:
7c:fa:9b:76:3a:c6:03:89:fc:dc:be:04:29:6e:86:
dd:75:4c:41:70:1e:2d:7f:d9:23:97:cb:16:d6:b4:
90:cf:b1:02:67:6a:de:67:14:91:07:08:00:f7:e0:
71:0e:23:d7:f3:32:08:a3:35:6e:7d:db:1a:57:c8:
92:4e:51:33:73:39:95:2a:00:1a:8e:7a:f4:5d:5b:
32:8a:bf:87:60:56:0e:2e:39:6b:44:ca:f5:2e:e9:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:E5:49:BB:5F:64:37:11:E7:BD:69:EA:02:24:DE:B1:A3:5D:C3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tuDlSbtfZDcR571p6gIk3rGjXcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.95.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f4:fc:bb:10:42:93:42:0e:0a:2c:20:3b:dd:f4:70:f7:2a:
d5:47:cf:98:3d:69:29:d8:28:bc:d1:aa:3b:f5:fb:c7:9c:18:
dc:17:4e:e0:81:25:d4:6e:0f:60:3b:9e:6e:49:53:c0:5c:31:
0b:e0:ad:8e:cf:2f:98:fe:4a:1d:91:78:b9:16:ae:fb:fa:65:
d4:b0:c7:b3:f2:a1:3e:c3:97:08:35:12:ad:67:c6:6a:0a:fd:
8f:1f:ed:6f:99:d7:7c:f7:93:fc:a1:b0:ee:2f:08:ad:64:8f:
3e:69:3a:52:52:a0:ab:c4:b9:58:9e:3f:88:b3:00:9b:53:9a:
04:10:5a:1c:28:f1:38:4e:4e:42:d2:3d:a4:93:23:92:01:24:
90:fb:35:b5:04:b0:20:d2:57:33:d2:4c:b4:61:18:bb:95:67:
57:0d:18:54:46:18:fb:bc:db:bd:be:19:7f:39:ae:90:7d:4e:
ee:32:94:ce:64:26:65:fa:17:04:7e:d0:08:5e:57:2b:c4:12:
68:b7:e8:97:6f:38:df:54:73:59:2c:d6:20:77:e1:0d:c1:62:
97:9e:6a:15:1b:b0:01:d3:b3:47:a8:89:a7:83:e5:08:8e:08:
a0:3c:d8:a9:a1:51:36:15:2c:da:c9:cd:f6:1b:78:ec:b0:3e:
51:0a:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:23:28 2024 by rpki-client on console-ams.rpki-client.org