Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/TZP1yZtVqdIMqofCfojzEK4dAVc.roa
File: TZP1yZtVqdIMqofCfojzEK4dAVc.roa (raw, json)
Hash identifier: +otq2ibCXSqYtyMREu/dMTJHdUAtUTHEMaaaP49/drk=
Subject key identifier: 4D:93:F5:C9:9B:55:A9:D2:0C:AA:87:C2:7E:88:F3:10:AE:1D:01:57
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 018CC5DC7B14EAD20131451BCE2606125D48
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/TZP1yZtVqdIMqofCfojzEK4dAVc.roa
Signing time: Mon 01 Jan 2024 16:30:10 +0000
ROA not before: Mon 01 Jan 2024 16:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212777
IP address blocks: 91.194.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7b:14:ea:d2:01:31:45:1b:ce:26:06:12:5d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d93f5c99b55a9d20caa87c27e88f310ae1d0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:8c:94:02:44:29:7b:cd:1b:4b:a6:b0:64:
81:07:7a:8d:e9:4e:aa:14:70:63:2b:dc:c9:f0:bc:
09:ed:46:50:18:a0:d5:8e:44:be:e5:00:8b:36:71:
e8:74:27:d3:07:54:eb:31:90:8d:64:2f:c7:d2:84:
6b:2f:26:c0:ab:6a:af:ea:a2:df:09:0d:1f:6c:5a:
4b:7a:88:be:88:f3:e5:0a:90:33:4b:70:52:37:6a:
ed:56:37:46:6c:c4:19:cd:84:53:62:0d:49:6e:ca:
00:11:58:97:fc:f8:32:6b:4f:64:02:00:87:08:95:
5f:9e:e3:91:08:ef:16:7d:d7:e3:af:67:db:12:0d:
b0:e6:e1:3d:4c:b8:4e:97:0e:48:ff:04:f1:0d:62:
4d:6b:c2:45:fe:67:3d:d6:c8:cb:69:9b:35:ce:d1:
07:c6:e8:a0:28:3f:d1:25:16:87:9a:6e:d0:27:61:
1e:2d:e5:90:fa:1a:71:bb:05:c1:04:ea:80:54:b6:
72:ad:84:b9:7b:88:1d:e3:72:4d:f3:ca:fa:b1:15:
fc:8c:e6:ef:fe:c4:c7:10:57:df:1f:ec:cc:5b:fc:
a2:f4:43:99:c1:d2:73:91:7d:d9:32:a1:87:55:3b:
28:ea:7b:34:7f:e7:f6:9f:f8:a6:31:01:85:49:9e:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:F5:C9:9B:55:A9:D2:0C:AA:87:C2:7E:88:F3:10:AE:1D:01:57
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/TZP1yZtVqdIMqofCfojzEK4dAVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.111.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8c:25:81:1b:01:a5:b5:3c:93:92:9a:f3:f7:f2:2b:db:43:
84:d7:15:c0:2a:04:c0:95:c0:c3:29:73:74:45:8b:eb:d9:be:
3e:d1:0c:45:4e:bf:80:7c:be:d4:21:42:8c:32:7f:2e:b3:11:
53:c4:cf:e9:e7:27:f0:b1:58:b0:17:86:c7:0c:51:e2:11:01:
bf:a1:cb:94:cd:16:08:a6:bb:71:26:b2:30:5d:77:be:04:6c:
54:04:7f:58:6b:e4:1d:75:51:ae:01:cb:8e:a2:8b:9f:c7:b7:
ab:e8:2b:40:6b:79:3f:f9:47:7b:df:c1:62:9c:77:5f:4f:7e:
32:b1:59:35:ac:dd:16:c1:9d:6d:b6:d3:a9:e8:e5:60:e3:f6:
08:5d:94:26:c2:be:1e:e8:79:e5:18:61:ff:1e:e8:b9:2d:e4:
37:55:a9:ae:04:c3:0a:a4:e9:45:ca:25:82:6f:36:42:b7:49:
59:2c:a2:cc:15:d2:ec:95:a1:5f:30:22:5e:47:86:b4:b8:8e:
d2:7c:f8:bd:f0:bc:93:94:5d:72:46:3e:78:1c:46:67:43:ff:
57:c9:00:2a:d8:d0:17:ba:33:df:71:53:38:2c:0b:57:a2:76:
6b:f3:b0:f2:9a:ea:60:b7:d0:a8:9a:16:8f:be:0a:d1:f1:ea:
2a:e9:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:39 2024 by rpki-client on console-ams.rpki-client.org