Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tyuPiqLSOm-tKb1eHmzj0WWr2AU.roa
File: tyuPiqLSOm-tKb1eHmzj0WWr2AU.roa (raw, json)
Hash identifier: Qw7IrLdYWDjbrCPxTYEGQYM8bIy6m43/KDyVOa5weOU=
Subject key identifier: B7:2B:8F:8A:A2:D2:3A:6F:AD:29:BD:5E:1E:6C:E3:D1:65:AB:D8:05
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DACF752D51CA5ECD447F0A47F05932
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tyuPiqLSOm-tKb1eHmzj0WWr2AU.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35463
IP address blocks: 82.177.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cf:75:2d:51:ca:5e:cd:44:7f:0a:47:f0:59:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b72b8f8aa2d23a6fad29bd5e1e6ce3d165abd805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:57:8c:5d:19:54:42:68:51:b4:35:d4:2c:
ed:ce:50:ee:e0:bf:f2:f1:0f:63:aa:c2:81:bf:21:
85:a3:99:73:a0:85:ce:48:96:68:c4:bf:57:71:a2:
8d:fc:68:a1:d0:32:26:1e:93:90:78:e1:d4:7b:eb:
fe:07:37:ef:1a:e8:82:1f:93:6f:2e:fa:77:c0:61:
3b:79:ed:90:f8:a4:87:51:af:92:5f:1c:ed:f4:eb:
04:64:7c:86:bb:ff:36:25:cd:40:72:3f:d7:5c:d5:
f0:f2:1d:f8:63:fb:48:ec:91:c4:8c:9f:01:71:be:
86:99:f7:9c:f4:7b:1e:c4:59:c4:de:14:b3:90:b7:
80:d5:4b:5c:e9:af:65:30:a7:08:b3:4e:59:e9:8a:
a7:e3:22:38:2a:ed:e5:e6:f6:95:0a:1a:a2:58:0a:
26:8c:56:13:60:41:a6:e5:37:4f:17:9e:c7:07:e5:
df:90:ce:ca:63:9b:aa:78:fb:89:fc:78:ca:cf:be:
b2:72:9e:21:88:7e:3f:fb:64:64:a6:56:8c:f8:27:
71:07:d1:d3:b8:fc:bd:c8:6e:fa:56:8b:b8:5d:ff:
19:b7:45:0f:cc:ec:bc:82:2c:a2:d6:13:bf:22:84:
4e:30:21:bd:ae:df:d0:b1:79:36:24:b3:dd:7a:bd:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:8F:8A:A2:D2:3A:6F:AD:29:BD:5E:1E:6C:E3:D1:65:AB:D8:05
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tyuPiqLSOm-tKb1eHmzj0WWr2AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.224.0/20
Signature Algorithm: sha256WithRSAEncryption
58:9b:c9:fa:2e:0c:6f:34:40:86:b0:b2:24:7f:7b:e5:31:10:
de:d6:c8:eb:3c:be:27:d4:75:85:d8:d4:cb:29:78:20:50:ca:
93:66:56:d0:74:34:5a:89:b6:9f:e0:28:09:2d:1b:9f:26:0d:
b3:2c:cc:4f:f7:b6:9b:77:92:ed:be:be:b5:e9:c9:cf:ed:bd:
05:f6:fb:6e:52:bf:63:3f:be:40:73:9e:23:52:ae:8a:e0:23:
7f:f9:ae:16:dc:f3:f3:a0:b1:62:ca:55:c6:ee:ec:28:29:86:
b3:1d:b6:d6:cd:95:c5:f5:de:c4:b6:36:90:44:7d:6d:bf:e6:
d3:58:6c:12:91:2a:cf:95:f1:e1:dd:97:e5:5b:31:1c:a2:a9:
ca:e3:00:c3:f8:27:3a:5f:4a:84:f2:f6:6d:81:46:25:53:1e:
27:37:5e:de:39:75:a2:04:fe:0c:dc:6e:cf:29:1b:32:8f:49:
b5:56:0d:c2:4c:91:81:e6:d4:9c:79:9c:e0:ba:90:87:1e:a8:
11:cf:65:b6:94:40:0d:22:ff:4c:e0:99:99:7f:21:a3:6b:d6:
6f:69:31:0e:dd:53:14:7e:41:0e:3b:3d:51:e8:45:b8:ff:1c:
71:7f:07:44:ef:a0:35:3f:af:62:2f:c6:ba:76:77:45:1e:a2:
d3:f2:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:31:38 2024 by rpki-client on console-fra.rpki-client.org