Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T-kM0AQ1nJsDu5L3sp1AbpvKixY.roa
File: T-kM0AQ1nJsDu5L3sp1AbpvKixY.roa (raw, json)
Hash identifier: IlI1PBG4BME2uazV6pm6ZIw2WNO3DqFHtH2oasXJPwE=
Subject key identifier: 4F:E9:0C:D0:04:35:9C:9B:03:BB:92:F7:B2:9D:40:6E:9B:CA:8B:16
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E3BDFC88C5FF71495DC21A5E31DE44E4F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T-kM0AQ1nJsDu5L3sp1AbpvKixY.roa
Signing time: Thu 14 Mar 2024 07:31:45 +0000
ROA not before: Thu 14 Mar 2024 07:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47516
IP address blocks: 91.132.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:df:c8:8c:5f:f7:14:95:dc:21:a5:e3:1d:e4:4e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 14 07:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fe90cd004359c9b03bb92f7b29d406e9bca8b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:5e:30:ec:28:4d:ef:01:87:e7:e4:1a:43:
6a:ca:eb:1f:94:b0:29:a2:bb:e2:25:5d:b0:6b:9a:
c3:33:05:d1:61:85:4b:e6:82:99:eb:9c:db:8a:30:
d7:91:4b:06:22:12:b4:56:d7:14:33:b1:fd:ba:2b:
8a:52:84:2c:d9:c3:5b:dc:cf:d4:3b:ef:6c:a1:64:
99:be:cd:84:35:21:12:dc:ae:da:f7:05:4b:1a:fb:
7f:8e:c3:0f:74:e3:11:5f:63:01:36:b0:ce:47:af:
a5:f5:82:88:67:48:df:74:a4:c5:31:32:50:d1:4d:
0d:71:7e:8b:5b:1a:d7:0d:bd:7b:ed:84:90:11:f7:
ff:ea:a8:36:86:6f:5c:89:60:c2:7e:4b:42:fe:e1:
15:9a:fc:de:6b:e4:e4:f7:8f:06:1e:42:ff:73:d6:
68:06:9d:24:8e:c3:97:bb:53:27:a7:58:03:1a:99:
3d:cb:9b:11:ca:91:8d:05:47:57:c2:a8:bd:04:b3:
cd:40:07:09:2c:4b:e0:93:60:c9:03:71:9a:4f:83:
dd:d2:7d:ac:30:14:fc:8d:6e:46:65:6c:05:94:dd:
14:ca:ff:e6:93:33:e6:31:fb:4f:2e:32:fd:fa:3d:
8d:be:ca:82:83:ba:52:19:9e:b8:c1:e7:e7:c7:69:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:0C:D0:04:35:9C:9B:03:BB:92:F7:B2:9D:40:6E:9B:CA:8B:16
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T-kM0AQ1nJsDu5L3sp1AbpvKixY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f8:91:28:f2:11:2d:40:fb:9b:fe:fe:c7:e3:7a:f3:36:bd:
41:ac:b4:0e:d3:a7:a9:eb:3a:f0:f3:d9:bf:65:b8:86:96:c0:
51:0a:da:a5:f6:a5:e6:d3:dd:8b:39:58:6f:b5:83:bb:c6:4d:
74:81:7c:8f:8f:b0:79:6f:36:84:1c:24:a2:b9:68:46:c0:ee:
a8:63:bc:8d:21:f9:b9:98:2c:a0:e4:bb:21:40:b5:e7:a5:8f:
30:87:64:07:46:78:78:1f:ad:e4:33:2b:cd:95:ca:c9:f3:1b:
7c:b6:e2:db:af:40:e1:df:be:ea:a0:1a:db:b4:45:bf:5d:07:
1a:55:63:29:5d:3a:42:c5:17:ba:01:8a:e9:eb:ad:4a:14:07:
b5:2f:b8:a3:97:55:ed:30:b8:8d:fa:4e:4d:2e:1c:34:1a:08:
4b:ed:c4:d9:1e:a0:b2:72:1e:7b:b6:df:2e:3f:90:ca:84:e3:
1f:fb:99:8d:dc:e7:ff:b8:e6:d7:8a:d9:c9:8a:3a:7d:83:c7:
6b:8e:8c:fa:6c:79:08:9c:43:59:00:55:2a:18:3a:3b:8a:6a:
81:dc:56:ad:12:c3:74:14:3c:a7:b3:a9:f0:4d:04:f0:8e:dc:
9c:b9:a5:0d:59:3d:93:8a:43:48:98:81:12:96:65:27:e0:a2:
cc:c4:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:09:02 2024 by rpki-client on console-fra.rpki-client.org