Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/Tlk1CEpjJ06A8oTE4FUolbipG-U.roa
File: Tlk1CEpjJ06A8oTE4FUolbipG-U.roa (raw, json)
Hash identifier: S6za2CXDao2QZGbdQbt/r53ziNZMPwre/7RfU3jfmug=
Subject key identifier: 4E:59:35:08:4A:63:27:4E:80:F2:84:C4:E0:55:28:95:B8:A9:1B:E5
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 018CC4937D76C61EAD691AC84D3A091121B1
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/Tlk1CEpjJ06A8oTE4FUolbipG-U.roa
Signing time: Mon 01 Jan 2024 10:30:49 +0000
ROA not before: Mon 01 Jan 2024 10:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213376
IP address blocks: 2001:678:d08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7d:76:c6:1e:ad:69:1a:c8:4d:3a:09:11:21:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e5935084a63274e80f284c4e0552895b8a91be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:76:a3:5a:5c:70:70:bc:da:c6:3b:7f:3f:
92:1a:ad:6d:78:23:66:a7:09:c4:e6:a2:24:32:54:
6e:33:95:71:8e:55:89:15:59:2c:38:57:63:97:7b:
59:d5:9f:8b:2e:bc:19:83:b6:a8:8c:15:ad:20:e2:
01:2d:11:fa:d5:f0:3d:d7:9f:12:e8:bf:4d:1f:ce:
11:88:96:f3:4c:97:8c:ca:3e:7a:ea:82:7f:2d:ce:
94:82:77:79:5a:d3:f3:a2:a3:f2:f5:c4:81:35:30:
c3:b6:19:f1:09:38:a8:d0:0d:65:d6:19:89:a0:c1:
9e:3b:3f:2d:ec:37:50:a8:1f:40:5c:15:3f:9c:09:
1a:25:6d:78:fd:be:5f:82:1f:45:5e:e8:9b:a8:e4:
ea:94:fa:94:90:54:b0:b2:75:f5:cb:09:4d:a5:8a:
5d:d8:e6:ec:38:13:63:62:87:ab:3c:ae:04:d1:c7:
68:18:11:ca:1b:24:48:1f:d8:a9:8e:38:bb:58:92:
73:7e:ea:0f:7d:d8:1a:05:cd:fe:7f:c8:43:df:54:
db:39:8c:47:62:94:56:e7:43:9f:e0:36:aa:dc:65:
77:31:c7:43:aa:17:46:a0:d9:38:84:e4:08:50:30:
25:30:0f:3c:23:a2:b6:2d:f2:c0:62:6c:e9:fa:b6:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:35:08:4A:63:27:4E:80:F2:84:C4:E0:55:28:95:B8:A9:1B:E5
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/Tlk1CEpjJ06A8oTE4FUolbipG-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d08::/48
Signature Algorithm: sha256WithRSAEncryption
75:1d:a1:1b:4c:fc:05:31:6a:d7:0a:4b:9f:22:a4:3f:4d:11:
8d:07:ca:9a:22:62:2e:61:2f:77:24:d3:42:7d:c7:e3:5d:73:
ad:9d:a2:28:9c:0b:a5:e4:d4:7a:ba:f3:1d:10:75:a8:70:83:
ef:6f:69:4b:52:9d:68:16:b0:9e:c8:50:bc:80:b5:58:05:27:
27:3c:56:72:76:43:e8:83:e1:8a:9f:37:62:db:47:04:6a:e6:
b6:64:62:c4:5e:2c:18:9f:98:3a:31:2f:71:02:69:ef:e7:08:
3b:5d:fa:c4:81:96:13:e6:06:be:16:82:29:6b:ea:83:13:b3:
ae:83:21:92:f2:38:92:11:a0:1a:90:49:3a:71:b0:fb:8a:e0:
b9:6f:26:2b:2f:19:47:eb:83:3a:ad:59:7a:da:83:2e:18:11:
e8:33:93:65:b4:19:75:2d:bc:b3:a4:49:0d:f4:bd:08:2e:fe:
a7:81:06:16:3d:73:43:f9:f6:d9:be:6d:94:08:4c:eb:83:48:
c6:bc:9d:7b:fa:a3:ed:af:8a:17:9e:0e:31:e4:e0:b6:79:9e:
03:32:67:e6:b1:9c:29:10:f5:66:37:2a:60:6e:9e:c9:8f:d2:
ca:3e:e1:04:ed:76:2a:af:19:5e:fe:c5:6e:58:df:02:24:2f:
05:46:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:29 2024 by rpki-client on console-fra.rpki-client.org