Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/TI8VUpkSUcLSoaTgg1o7bTrg-bs.roa
File: TI8VUpkSUcLSoaTgg1o7bTrg-bs.roa (raw, json)
Hash identifier: 5aPbltoPtKGU6SBi7C3VRRNk9D0DIqLd1VBoWUah09U=
Subject key identifier: 4C:8F:15:52:99:12:51:C2:D2:A1:A4:E0:83:5A:3B:6D:3A:E0:F9:BB
Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial: 018CC7271C342EDA4B9BE58A005666C16DF5
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/TI8VUpkSUcLSoaTgg1o7bTrg-bs.roa
Signing time: Mon 01 Jan 2024 22:31:18 +0000
ROA not before: Mon 01 Jan 2024 22:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.28.159.0/24 maxlen: 24
91.223.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:1c:34:2e:da:4b:9b:e5:8a:00:56:66:c1:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Validity
Not Before: Jan 1 22:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c8f1552991251c2d2a1a4e0835a3b6d3ae0f9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:dc:11:e7:c8:27:0f:3a:14:39:a5:94:8b:
9f:82:e3:24:4a:ab:13:5b:41:07:75:54:be:8c:7f:
a2:a5:13:bb:64:df:93:b2:a9:ff:34:d8:94:30:1f:
11:99:b4:4b:1c:19:7f:e9:dc:2d:0a:64:a5:27:54:
07:e5:f2:a1:0c:9d:d8:0c:54:1e:78:e4:d8:00:cb:
5b:58:24:86:f6:a3:b5:43:ba:91:49:cf:8b:83:79:
a1:a1:30:88:4a:f3:88:7d:d0:76:49:4e:59:4a:27:
a9:82:01:00:80:b4:30:1c:fa:aa:69:c8:75:d5:56:
ab:bb:53:2a:c6:9f:96:6e:a3:71:8f:64:6f:cd:20:
c5:e8:57:ea:2c:cf:1d:51:ca:88:2e:ef:c2:32:6e:
c9:bd:c5:2a:75:6c:e5:37:96:a1:7d:1b:81:76:aa:
7b:08:85:39:31:96:e1:8d:25:35:06:f4:ea:d2:f4:
33:c1:20:d9:df:a1:23:4c:25:38:af:f2:e4:98:59:
02:c8:3e:1d:49:73:c6:54:3f:b9:1f:96:51:0d:41:
58:bb:fb:ff:cc:b8:8f:b1:94:e3:5f:a1:a5:3a:ae:
27:7c:a6:82:cb:a2:84:58:10:c1:8b:df:60:90:d1:
db:3b:ed:12:5b:ea:7a:b1:bd:06:5b:5b:36:8f:09:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:15:52:99:12:51:C2:D2:A1:A4:E0:83:5A:3B:6D:3A:E0:F9:BB
X509v3 Authority Key Identifier:
keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/TI8VUpkSUcLSoaTgg1o7bTrg-bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.161.0/24
193.28.159.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7c:91:e0:b3:3f:cc:44:5c:79:40:91:c5:25:3e:b3:29:af:
5c:a1:ec:a1:68:13:10:db:23:21:f4:f0:d6:ce:bd:68:1a:ca:
b0:3d:b3:e5:b7:53:8d:0a:21:bf:ed:9e:26:03:78:56:50:bd:
78:1c:ef:ee:8f:42:9d:43:e8:c8:4d:63:99:69:ec:ec:3b:8f:
42:88:4e:cc:2f:a1:93:9b:53:95:62:83:a8:80:c2:5d:8d:e6:
17:dd:fa:55:fb:57:df:75:a5:7a:64:25:c5:a5:0f:69:bc:77:
9d:84:62:f4:15:98:0a:1d:08:73:e8:2b:d0:f1:77:ae:5f:fd:
1e:a6:41:0a:18:07:58:04:9d:2a:86:15:f0:09:ea:fc:84:17:
d7:19:36:b0:88:4a:4c:55:56:34:ba:93:cf:18:2b:14:20:07:
20:2b:37:80:f8:ca:c7:d4:55:89:ac:f4:ab:2a:28:98:fb:da:
e9:f2:d6:7b:0b:67:fb:89:93:35:ce:7f:4b:5a:79:46:84:0d:
0c:5c:b3:b7:af:fa:c9:4d:0b:e9:62:0d:1a:f6:22:d5:2c:0a:
2c:d4:62:b8:68:a1:4d:54:78:4b:ec:04:6d:10:46:c8:fd:eb:
33:58:e9:e9:be:48:7e:4d:d7:31:86:ac:79:5a:55:94:71:55:
a4:33:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:18:54 2024 by rpki-client on console-ams.rpki-client.org