Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/TW7S9IRV8_28fg5OOworKY23vmA.roa
File: TW7S9IRV8_28fg5OOworKY23vmA.roa (raw, json)
Hash identifier: miVkZdD5ebGGOb8GCnIXiQRIIoAhEupVThMzp8XV+pc=
Subject key identifier: 4D:6E:D2:F4:84:55:F3:FD:BC:7E:0E:4E:3B:0A:2B:29:8D:B7:BE:60
Certificate issuer: /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial: 018CC9BCB3AF4AE5297E49E7B312DB4285B7
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/TW7S9IRV8_28fg5OOworKY23vmA.roa
Signing time: Tue 02 Jan 2024 10:33:56 +0000
ROA not before: Tue 02 Jan 2024 10:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 91.235.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b3:af:4a:e5:29:7e:49:e7:b3:12:db:42:85:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Validity
Not Before: Jan 2 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d6ed2f48455f3fdbc7e0e4e3b0a2b298db7be60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:34:77:0d:1e:a5:65:64:c1:fd:07:f4:e1:
c5:23:00:25:f5:4e:2f:9b:be:7d:7e:fe:b2:c3:a9:
86:35:73:1d:6d:7a:c6:8e:8d:a8:4f:55:00:74:20:
24:ce:b2:17:03:a7:89:a6:9e:c2:e0:2a:d8:3f:bd:
4b:90:42:c9:fc:25:b0:34:0b:69:5b:34:3d:d2:f1:
68:57:6d:b4:8c:c6:70:c2:5d:fc:8f:f8:c0:fb:6f:
b9:c3:21:ad:7f:06:5e:9d:2f:ef:8a:e6:ea:74:22:
08:24:fb:a8:57:c3:db:35:01:21:f0:ba:37:13:04:
d9:9f:80:c9:ab:bf:7c:09:2e:3e:e8:83:c1:0a:99:
6d:42:9f:43:4e:46:a4:c3:a5:9a:d0:f7:02:c4:67:
46:07:56:45:6c:c2:8d:b3:e9:ad:43:a8:49:59:5f:
48:5f:d8:25:1d:20:ee:be:ef:a1:43:2f:a9:2b:93:
ab:50:4a:6f:6f:7a:cb:d0:f8:44:16:24:91:41:18:
33:66:e3:fa:24:96:41:ce:8d:74:fe:c4:25:b6:98:
fe:9a:48:e4:c8:66:bb:ed:6b:d7:cd:22:b8:4e:85:
87:cc:53:4f:b5:66:0f:2a:4c:36:bc:2b:96:ea:6b:
b8:fe:c1:7d:5d:0e:de:37:ac:bd:e9:5f:90:d3:b0:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6E:D2:F4:84:55:F3:FD:BC:7E:0E:4E:3B:0A:2B:29:8D:B7:BE:60
X509v3 Authority Key Identifier:
keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/TW7S9IRV8_28fg5OOworKY23vmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:72:34:fc:ef:e1:f5:2f:46:8d:79:8e:56:96:37:fa:dc:4d:
f7:ff:43:3c:18:49:be:8f:41:b3:67:5f:18:52:eb:a9:4e:56:
32:51:07:8f:4a:7f:f5:5c:bb:61:5a:b5:5a:2f:2e:0e:98:d6:
89:d1:fb:03:b5:62:bc:7d:d5:24:89:b1:1d:e6:15:b1:7d:b3:
ad:ca:9f:03:d0:ae:5c:67:1e:48:11:fe:d9:78:60:83:66:91:
6a:7f:ca:a4:f2:19:dd:6e:22:c5:48:6c:9d:4c:f0:14:0d:a8:
85:2d:21:de:25:6d:6d:7c:71:4e:38:39:24:29:20:a5:72:dd:
bd:89:3e:4b:4e:37:35:35:e7:fd:40:2b:30:ca:5d:89:34:a0:
65:cd:3f:f2:5a:90:37:97:81:22:b2:28:7d:8a:6a:f9:99:e2:
ef:e6:03:ba:e5:72:49:00:a0:2e:19:e7:92:da:74:3c:95:46:
c6:0a:a7:31:1b:78:cb:f2:bb:b3:9d:39:f7:16:9c:25:34:6e:
cf:f3:f7:b5:c9:50:4d:f8:53:98:17:88:c6:e0:1d:85:df:69:
12:ce:ce:98:6a:23:1c:7b:1b:51:04:a8:84:64:95:c4:2d:9c:
d5:2b:52:d2:95:ed:38:b1:67:eb:49:3d:61:dc:8e:4f:43:55:
4c:c7:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:57:08 2024 by rpki-client on console-fra.rpki-client.org