Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/tBtk3sh-z1EMITR1WmGERuFjEA8.roa
File: tBtk3sh-z1EMITR1WmGERuFjEA8.roa (raw, json)
Hash identifier: opw0/fGVhNQbw1NS3xfKBXbEZ4u9g/HixZBr3rME7pA=
Subject key identifier: B4:1B:64:DE:C8:7E:CF:51:0C:21:34:75:5A:61:84:46:E1:63:10:0F
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018F949C55CFB8911076163D8614B719411A
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/tBtk3sh-z1EMITR1WmGERuFjEA8.roa
Signing time: Mon 20 May 2024 06:07:04 +0000
ROA not before: Mon 20 May 2024 06:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 93.177.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:9c:55:cf:b8:91:10:76:16:3d:86:14:b7:19:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: May 20 06:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b41b64dec87ecf510c2134755a618446e163100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:94:06:7f:9f:3a:84:bd:aa:59:1a:b8:f8:
ce:e6:80:5a:35:fc:ad:8e:c9:ce:61:21:60:9c:51:
b8:96:3b:e0:6f:24:43:4f:66:88:ac:6c:f6:59:c1:
34:61:db:2d:ed:a2:90:72:8b:0c:ef:f6:98:91:12:
63:46:f6:ac:e6:b9:fb:96:15:c5:d0:9c:eb:ad:04:
1b:91:a1:52:5e:0b:ab:2c:c7:1d:55:e0:99:09:53:
03:96:76:e9:10:75:d2:99:1c:a3:9e:3a:be:49:41:
7e:e6:77:8b:94:1b:90:e3:4a:a0:64:21:3f:21:df:
42:c7:b4:4f:33:1f:28:a9:f2:34:83:30:73:ac:f4:
c1:28:1b:bd:26:c8:1b:b4:a5:b8:e9:70:6e:17:64:
9b:82:a0:b9:ce:c8:b7:b9:3b:84:cb:fc:0e:bc:02:
54:d8:62:99:bb:ec:59:53:6d:e4:d2:e2:9a:5b:2e:
cd:5c:9b:e8:00:27:91:a7:51:ee:51:86:bd:06:0d:
ae:b3:b6:d9:9e:30:0e:f7:6e:e0:8a:4e:f1:8c:41:
15:cf:53:8c:62:64:b9:95:da:30:8b:82:b3:7e:e7:
46:9b:a6:26:c1:59:f8:21:d7:94:7d:ec:84:14:e7:
f3:8c:84:d6:25:27:76:4d:f1:ae:de:64:ac:b8:d8:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:64:DE:C8:7E:CF:51:0C:21:34:75:5A:61:84:46:E1:63:10:0F
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/tBtk3sh-z1EMITR1WmGERuFjEA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.112.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:5c:c1:81:da:d1:e1:4a:53:59:60:88:80:3a:25:49:5c:1c:
1e:3b:3f:84:fd:a7:a4:35:12:ad:0e:24:b0:a0:c6:7d:bc:ad:
a9:c4:36:a4:04:15:3a:00:31:c2:33:17:0e:ee:58:6d:76:e5:
ba:b6:44:f6:1c:6e:94:22:65:7f:ce:07:56:38:93:22:21:5d:
84:fd:ef:70:11:fb:46:cd:2a:32:e3:4a:45:e3:ca:4c:f4:6c:
f6:2b:b0:7f:78:da:bf:d7:3c:5c:46:ca:a5:af:21:38:98:cb:
d6:54:7d:1f:92:1a:86:63:01:25:12:4e:fc:dd:2f:c7:5b:ae:
73:8b:60:bd:f4:87:cc:95:8e:11:2d:46:30:95:66:3c:c3:b0:
27:ed:b9:7f:6f:da:7e:93:aa:04:34:fd:1e:ae:24:fe:32:67:
d6:72:b6:05:a3:18:12:7e:d3:65:85:f4:10:78:ad:1a:c7:2b:
0e:15:7f:52:fb:5e:9d:04:db:50:87:ea:44:68:1f:f9:bb:0a:
d4:85:dc:42:58:77:cf:7c:fc:ab:bf:40:d5:17:fe:6b:e5:9f:
8e:b8:41:99:46:08:f7:3e:52:bd:0a:c2:08:12:61:4b:bf:b9:
44:cf:30:49:e3:10:02:a0:07:dd:3b:7c:02:99:98:d0:04:c7:
84:44:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:34:09 2024 by rpki-client on console-fra.rpki-client.org