Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/TbZyIIM6i9ampNbUUZwYSSurOfM.roa
File: TbZyIIM6i9ampNbUUZwYSSurOfM.roa (raw, json)
Hash identifier: qYBKeXID0I+EY5KOYtC//IDAfJ4ePYiUnWu5AB687FU=
Subject key identifier: 4D:B6:72:20:83:3A:8B:D6:A6:A4:D6:D4:51:9C:18:49:2B:AB:39:F3
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018CC80189B1EAF5B70A44C28F286F4D871F
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/TbZyIIM6i9ampNbUUZwYSSurOfM.roa
Signing time: Tue 02 Jan 2024 02:29:53 +0000
ROA not before: Tue 02 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.75.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:89:b1:ea:f5:b7:0a:44:c2:8f:28:6f:4d:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4db67220833a8bd6a6a4d6d4519c18492bab39f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:ca:a3:44:23:1c:0f:fd:76:f2:e6:cd:96:
9f:a1:96:47:56:89:21:26:8f:44:0a:91:bc:bb:93:
cc:95:18:24:89:93:3f:f2:32:1c:02:3b:9e:e2:b5:
d3:c6:5c:a3:0f:8f:79:ce:5d:a3:1d:77:86:88:42:
1e:87:e5:61:97:71:83:8e:c0:3c:28:e3:d1:e2:8f:
4f:85:00:e2:70:b7:b5:47:c2:4e:dd:1a:3e:d0:6b:
0c:0c:ef:58:99:db:2e:09:62:c4:93:5e:9b:13:6a:
7c:63:6d:85:70:0f:7a:63:2f:43:b0:7f:f4:66:f7:
1a:cf:e7:29:42:ee:79:14:4b:eb:75:de:7e:88:51:
21:96:2b:4c:fd:a1:ef:b4:2e:e3:83:3c:02:8a:e3:
60:18:4c:8c:20:54:56:f9:55:77:c0:01:f3:e9:2b:
30:5d:91:e7:36:11:4d:67:92:1e:7e:9f:5e:8d:21:
ee:5c:74:1b:a3:99:38:17:86:08:7e:ca:56:61:a8:
0b:b4:f6:09:be:fd:47:20:b1:c8:32:1e:27:09:69:
43:50:3e:eb:1a:38:b2:80:6f:56:7e:df:cc:3e:66:
73:9f:26:2f:d0:11:cd:04:92:0f:2e:38:a3:2a:ac:
98:96:fb:d5:01:3c:6d:0d:3f:8e:0b:e3:72:4e:bd:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:72:20:83:3A:8B:D6:A6:A4:D6:D4:51:9C:18:49:2B:AB:39:F3
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/TbZyIIM6i9ampNbUUZwYSSurOfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:05:de:8a:0c:38:24:75:81:e1:76:63:6e:c4:91:27:eb:45:
a5:38:68:13:58:00:1d:e0:cb:20:8a:7c:9b:b3:a0:5d:fc:0c:
a0:55:c1:0c:6c:f1:30:7f:45:1c:08:f3:62:d5:21:7d:1a:2b:
14:d6:f0:60:8a:91:20:e6:a3:92:37:df:aa:d7:09:9a:e2:be:
cc:01:dd:35:f3:14:d0:cc:98:b4:66:b5:df:d4:a6:e4:f6:3a:
12:df:6c:48:55:11:7a:23:4f:fb:53:83:16:85:c0:f9:d7:64:
bb:fa:e4:24:3c:85:a2:a4:fc:d9:69:d1:ef:34:ca:1e:d0:bf:
98:3f:b3:79:97:f0:09:48:6f:94:a8:14:dc:cf:af:ca:95:cb:
3c:3a:21:ab:2d:6e:60:1e:05:86:5c:ae:62:15:40:35:55:11:
08:6a:b2:35:29:af:c1:60:fb:e1:fb:08:be:b1:5d:9b:83:0e:
01:cc:e5:a7:e8:28:d3:4e:c1:04:af:28:70:fb:fd:ca:26:a7:
32:0a:e9:6a:86:a7:5d:36:2c:9a:c5:a7:70:5d:85:05:4e:7a:
70:93:45:c8:01:50:99:4c:79:99:55:40:cf:2d:ca:2d:fb:a8:
8e:ea:4d:95:13:86:84:3f:21:e6:6e:33:81:d7:ac:8c:03:ee:
9c:14:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:17:49 2024 by rpki-client on console-ams.rpki-client.org