Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/TEEDG_RW92ohnDxBa_luyYfn9vU.roa
File: TEEDG_RW92ohnDxBa_luyYfn9vU.roa (raw, json)
Hash identifier: JO4JTqZfghLocS3qN4IyOU1qbSMVApqpl4Xgw3IcxbE=
Subject key identifier: 4C:41:03:1B:F4:56:F7:6A:21:9C:3C:41:6B:F9:6E:C9:87:E7:F6:F5
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC72745A9097E5A9FCCF177829F4B0833
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/TEEDG_RW92ohnDxBa_luyYfn9vU.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35831
IP address blocks: 94.31.54.0/24 maxlen: 24
213.152.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:45:a9:09:7e:5a:9f:cc:f1:77:82:9f:4b:08:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c41031bf456f76a219c3c416bf96ec987e7f6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:2d:72:07:c9:f3:03:73:7d:cc:c7:ec:d2:
49:1f:30:3f:cc:2c:01:5c:74:65:9d:83:a8:49:35:
77:76:51:eb:f9:82:08:7e:3a:1d:38:66:8c:a6:36:
db:4c:41:75:0a:c0:12:10:6b:ec:2a:c0:a2:74:74:
86:52:a7:26:52:cf:f2:df:93:29:1f:e0:6f:61:44:
fd:f9:70:28:b5:17:7d:62:2a:47:1c:c3:41:22:e5:
18:11:0e:e1:22:0f:6c:a4:ad:77:99:a4:cd:9a:8e:
22:be:85:05:a3:06:c1:d3:31:aa:39:4b:14:2a:61:
71:1e:fd:82:d9:93:dd:a1:8b:93:3f:c2:c2:25:bd:
ed:5b:38:a1:3c:7a:67:c6:54:21:28:06:c4:ea:2f:
8e:dc:d6:aa:9c:f4:65:21:9c:81:5f:13:25:f7:98:
f7:58:b6:d9:05:03:0e:c4:45:b1:bf:96:fe:68:3a:
35:7b:b4:d3:04:45:39:51:04:03:5b:36:d1:8e:bf:
b6:22:12:cd:db:d5:3d:e4:fc:e7:72:74:38:13:ff:
fa:2a:78:31:2f:f6:32:80:19:b5:df:4f:a9:44:c3:
f7:3a:ef:21:f9:a8:1c:7f:54:0f:4a:78:d4:9b:73:
18:67:77:15:7d:cf:17:ce:81:93:72:73:07:6f:2b:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:03:1B:F4:56:F7:6A:21:9C:3C:41:6B:F9:6E:C9:87:E7:F6:F5
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/TEEDG_RW92ohnDxBa_luyYfn9vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.54.0/24
213.152.251.0/24
Signature Algorithm: sha256WithRSAEncryption
49:42:d5:15:2c:a0:e7:60:e1:15:69:b7:37:d3:14:8a:0e:43:
94:98:27:c2:66:03:0a:3e:41:f3:70:b7:9d:47:ca:fe:b9:e3:
21:8b:44:ba:6e:76:c5:d0:2c:d9:7d:c4:c4:f6:e2:80:2f:06:
b4:f2:d4:22:ae:2e:b0:21:99:55:e5:9b:43:53:3d:10:9d:fc:
7d:68:20:cb:7b:ed:53:98:00:72:d0:53:6b:c0:a0:81:cf:b6:
a1:0c:fb:bc:78:9b:cc:6b:ce:6a:79:0f:c4:6f:59:69:15:68:
68:e4:9c:12:60:25:88:73:5a:34:86:74:82:ca:9a:e5:1e:55:
50:30:a9:8a:5f:3a:b7:ec:2b:87:a3:b7:a6:37:00:90:cd:0b:
1a:fb:74:e2:bd:f9:b3:af:2e:9f:d3:c2:58:e1:4d:2f:8b:c0:
35:df:ca:4f:17:eb:aa:c9:52:1f:d5:29:0d:46:55:92:14:38:
69:7b:f0:e6:d6:17:b9:20:23:c7:55:4f:a9:5c:c1:96:00:ae:
e0:08:43:6d:bd:6b:8b:e1:f2:ee:26:ac:91:2c:3a:b7:94:1f:
61:06:d1:1b:17:6d:60:ca:22:f3:3b:b8:16:69:f2:fa:58:e0:
9c:41:cb:0b:78:c8:4a:1a:d3:5b:05:38:39:d3:c9:f8:2c:b9:
6f:bb:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:59:34 2024 by rpki-client on console-ams.rpki-client.org