Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Ttma0U0npSmB4yFFgviKSoAFQY0.roa
File: Ttma0U0npSmB4yFFgviKSoAFQY0.roa (raw, json)
Hash identifier: bUS6zyKhks4cvq6b9h2wo8xvSmgp4gNbN0AnQfl4SfA=
Subject key identifier: 4E:D9:9A:D1:4D:27:A5:29:81:E3:21:45:82:F8:8A:4A:80:05:41:8D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0192F1AC4A3DABE6740E6837D3412B58F9E5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Ttma0U0npSmB4yFFgviKSoAFQY0.roa
Signing time: Sun 03 Nov 2024 10:57:33 +0000
ROA not before: Sun 03 Nov 2024 10:57:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140224
IP address blocks: 87.229.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:ac:4a:3d:ab:e6:74:0e:68:37:d3:41:2b:58:f9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 3 10:57:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ed99ad14d27a52981e3214582f88a4a8005418d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:ef:21:cd:b8:6a:12:33:35:3e:30:75:e2:
79:9a:fb:19:b6:ac:3a:17:e7:34:3b:f7:c3:54:94:
f8:07:e1:46:9e:b3:24:ef:e1:43:9a:9d:ae:c5:8a:
19:a1:bb:17:74:f7:f5:93:fd:83:d1:43:03:b2:2b:
4e:b6:5a:47:8b:36:32:cb:45:15:8b:c7:8a:ca:59:
06:ff:22:16:2d:ff:b3:df:96:1a:f3:40:d5:37:00:
f0:79:ee:4a:d2:8d:4e:c7:df:4d:59:61:db:45:e2:
42:cc:16:b8:fe:34:c2:ce:ce:31:56:e3:f0:75:4c:
1e:60:86:7d:5b:48:71:0d:2e:b6:fb:ea:a0:5d:b5:
40:99:c8:fb:5e:19:ce:7b:05:54:fb:0b:3b:b5:da:
3e:0b:0f:fe:8b:4d:71:a8:bb:2b:0f:48:c1:10:e6:
82:76:1f:70:df:62:a4:9e:ad:82:9e:90:67:c6:ad:
69:38:d9:b7:db:5e:01:47:50:f3:7a:64:7a:96:98:
3e:cf:9c:74:9b:33:10:a3:a4:b0:62:b1:e1:fd:a4:
e9:fa:0a:ca:4f:39:98:3d:a3:12:ff:75:6b:bb:37:
28:5e:47:dc:8b:f6:39:9b:b3:82:81:12:22:5e:37:
a1:d8:4f:94:46:84:a2:ec:5a:07:66:5f:bb:b2:fc:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:9A:D1:4D:27:A5:29:81:E3:21:45:82:F8:8A:4A:80:05:41:8D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Ttma0U0npSmB4yFFgviKSoAFQY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.92.0/24
Signature Algorithm: sha256WithRSAEncryption
02:07:7a:35:34:d5:2e:b0:b4:38:67:b0:34:30:ec:65:bf:a3:
ae:66:46:09:64:b4:44:07:83:bd:a1:a8:c4:0e:9d:ed:51:00:
cd:34:14:b8:c8:6b:a6:18:77:fd:0e:d3:5b:7a:80:2d:95:45:
29:ed:a2:fa:ce:ec:ec:3a:31:63:23:48:74:2f:d9:e9:7d:97:
a8:b1:5b:4c:f9:06:61:b0:02:2b:de:e4:bb:f3:46:a1:36:81:
b7:b8:29:93:4c:a7:b5:6a:14:b5:5e:65:1a:e6:30:dd:d7:ce:
68:e9:d1:e2:53:60:d2:20:d6:91:92:a1:55:8a:37:31:f2:2f:
79:86:6c:22:13:39:e7:ce:f4:82:65:60:f7:6d:e0:7d:c8:08:
f2:5a:5e:e2:9e:5a:89:15:43:0b:01:b9:a1:ac:4b:90:70:be:
a3:d1:db:0a:c3:e1:76:ba:37:be:77:1a:0c:7d:b5:60:31:fe:
5c:9d:23:c6:19:34:77:87:ad:c7:cf:55:6f:c5:2f:58:f2:2e:
dc:48:14:47:ef:e0:63:6f:50:e0:0f:ff:8b:ae:03:54:7b:35:
9e:47:29:6b:5a:dc:9c:0c:3a:fb:89:a9:76:04:62:59:a2:60:
42:6c:c1:e7:4c:cf:14:41:27:7c:3a:eb:18:53:c7:6b:82:f3:
ba:7e:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:20 2024 by rpki-client on console-ams.rpki-client.org