Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TRIHx_DPDYf6C4onyuUKBqifAT8.roa
File: TRIHx_DPDYf6C4onyuUKBqifAT8.roa (raw, json)
Hash identifier: a2tRU8v2kYnDZYo/ALYEavrPZCfyKNmCoKCuhz/GELk=
Subject key identifier: 4D:12:07:C7:F0:CF:0D:87:FA:0B:8A:27:CA:E5:0A:06:A8:9F:01:3F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7A5573B8AD2581A1F6E55EA7741AB
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TRIHx_DPDYf6C4onyuUKBqifAT8.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 176.57.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a5:57:3b:8a:d2:58:1a:1f:6e:55:ea:77:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d1207c7f0cf0d87fa0b8a27cae50a06a89f013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:fb:37:7e:9a:e1:6a:9e:bf:1b:86:ae:78:
a6:7d:62:91:c9:49:22:82:45:e5:1a:d0:89:08:96:
50:b3:94:4a:10:c2:c6:44:b1:cd:11:ae:7a:83:45:
04:cc:1a:2c:57:87:d6:c7:67:b5:b9:87:20:af:cc:
e9:df:81:92:0b:c3:bc:2a:25:dd:92:d0:2c:10:13:
2e:ad:17:68:87:85:2d:a4:58:af:5a:7a:7f:a8:d9:
e2:97:78:88:94:49:47:a9:4d:26:d4:94:4d:2b:2f:
ec:d0:43:2d:ea:f3:75:59:ea:09:ee:07:4f:f5:9c:
87:b7:ce:b4:dd:9d:6e:2f:22:16:49:85:a0:d3:a9:
57:03:2f:fa:6c:1e:c2:46:53:19:b8:f9:a8:de:e8:
60:e4:0b:8b:16:de:00:6c:7b:ed:15:69:cf:7e:f6:
c8:78:72:b1:5f:0a:ac:d9:3b:2e:2b:e9:7f:33:88:
a3:e5:64:93:63:be:51:a3:0c:35:c3:c6:cb:89:22:
45:bc:e7:92:87:36:d6:93:2f:de:cd:05:20:3c:cc:
26:ef:c4:fa:42:32:34:f7:45:b0:e7:80:70:32:60:
f3:dd:2c:68:65:35:56:9b:9e:b8:14:8f:42:90:07:
09:62:08:43:14:32:83:8a:a4:17:60:b3:31:70:ca:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:07:C7:F0:CF:0D:87:FA:0B:8A:27:CA:E5:0A:06:A8:9F:01:3F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TRIHx_DPDYf6C4onyuUKBqifAT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
09:83:55:35:46:80:d9:9c:22:cd:27:e7:ca:88:1c:09:e1:dd:
90:47:ca:92:28:fe:8e:35:8e:e9:2b:0c:f1:63:ae:71:98:e8:
1c:a5:a8:05:bd:32:44:b2:82:85:2b:7e:96:aa:87:26:2d:9c:
18:db:55:27:5e:3c:be:fa:38:af:e2:c5:14:86:f0:27:f9:08:
02:b5:f5:34:1c:27:ab:e2:85:32:e4:f6:ab:f0:55:bd:7a:18:
61:42:95:06:26:7c:59:df:ea:3d:fd:59:27:3a:c5:96:e1:51:
64:bb:82:a8:89:fc:5f:b1:63:2d:b8:70:54:99:4a:42:33:8e:
9c:79:93:98:b2:1c:9a:4e:28:ed:4a:41:81:67:5c:71:d8:e6:
8f:48:d8:e6:cd:73:72:f4:63:5d:11:3f:57:0f:7d:76:02:37:
95:46:d1:de:91:be:f5:1e:25:bf:9d:72:ca:49:66:11:6c:9e:
dd:1a:a1:24:12:68:6a:96:0b:ec:6b:7b:ff:2c:4a:00:c6:8b:
a4:6a:c1:9d:46:01:98:51:b9:cd:0c:65:bc:17:24:6e:87:57:
dd:1e:5f:fa:d3:b3:2e:8e:78:b2:00:a7:5d:55:9e:39:cc:d1:
bc:7a:69:05:0e:95:b6:21:30:83:e1:e3:a6:e8:8d:e3:50:45:
a0:41:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:30:30 2024 by rpki-client on console-ams.rpki-client.org