Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/TwTox001PaLbRpuAluslkdNgx7M.roa
File: TwTox001PaLbRpuAluslkdNgx7M.roa (raw, json)
Hash identifier: aR9/Wce6ZSeXmnMmrpVex311OcxIlWOe1mi/K1tV914=
Subject key identifier: 4F:04:E8:C7:4D:35:3D:A2:DB:46:9B:80:96:EB:25:91:D3:60:C7:B3
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018DCF54A8B54EDCDFA65B71F30E28A54325
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/TwTox001PaLbRpuAluslkdNgx7M.roa
Signing time: Thu 22 Feb 2024 05:40:48 +0000
ROA not before: Thu 22 Feb 2024 05:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25288
IP address blocks: 185.163.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:54:a8:b5:4e:dc:df:a6:5b:71:f3:0e:28:a5:43:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Feb 22 05:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f04e8c74d353da2db469b8096eb2591d360c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:7b:95:57:8b:fc:ab:17:99:ad:48:30:53:
b0:a4:1a:19:6f:9c:51:71:a6:8f:89:a4:87:8d:95:
cc:93:97:0d:db:b0:e6:43:06:d8:b5:74:6e:01:ab:
af:ba:07:b6:3f:38:64:e7:b8:09:fa:4d:52:18:af:
a7:52:94:d3:52:91:ec:9d:2d:d5:57:0f:a3:56:d7:
ce:4e:86:ab:f6:db:50:bc:dd:a8:a6:5b:98:97:d1:
fe:2d:e4:2e:bc:8c:f9:8d:fb:f6:83:9d:80:42:16:
d9:25:73:91:0c:1b:8c:47:72:a1:ca:a3:69:7e:6f:
e3:24:bd:5e:7e:10:f2:51:05:37:9d:56:58:88:75:
ec:95:ee:3e:c4:e8:de:98:4f:85:cb:9b:d9:c9:d2:
d0:45:82:36:32:87:bc:20:4d:10:be:b2:7f:d7:38:
9b:b3:42:b3:83:0f:dc:b3:1f:05:c0:f5:c5:13:3a:
1e:0e:f8:e8:38:77:95:17:18:04:16:a5:ef:f3:da:
d3:da:69:e1:6e:bf:64:66:11:95:09:e4:35:b4:ca:
c1:64:d0:19:8d:b8:6a:aa:ab:ec:ec:62:55:d2:4f:
ea:fa:be:da:9c:bd:0c:7a:3a:41:00:98:75:c0:79:
12:61:41:2f:35:62:47:df:1f:68:47:a1:47:2b:31:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:E8:C7:4D:35:3D:A2:DB:46:9B:80:96:EB:25:91:D3:60:C7:B3
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/TwTox001PaLbRpuAluslkdNgx7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:67:28:e9:4d:b2:e0:e3:8e:fa:67:98:74:43:e7:74:57:14:
5a:ed:e6:f7:c9:84:27:a5:59:fe:3f:84:32:e7:32:b2:9f:45:
dc:a6:b4:4f:66:b5:4b:49:fb:30:f4:2f:4a:7b:bb:68:26:14:
60:a7:c6:9c:11:ba:87:be:89:65:a7:fe:cc:6d:85:fe:e2:de:
90:f4:e1:52:1d:b3:64:88:ec:e5:97:d7:9d:c0:74:60:88:6a:
da:d6:e8:75:20:da:1d:bd:e5:44:c2:ff:68:47:57:14:6b:e8:
71:7b:e7:89:31:ed:7c:d2:d4:27:ca:71:d4:46:67:78:c8:1a:
a9:0c:97:aa:3a:c6:9c:e4:3e:08:e1:6c:cf:5e:41:93:ce:7e:
5d:e2:03:4c:62:dc:75:ad:ed:2e:b0:ea:a7:19:dd:1c:30:9f:
a1:e5:0c:77:a9:67:f0:8e:db:51:f1:d7:ee:0c:bf:1f:d2:ba:
5f:06:02:af:98:8d:31:d0:46:c4:5b:4c:e9:35:08:7c:48:33:
0c:84:3d:f1:50:d2:c3:d0:8e:ef:4f:e5:a7:a5:5e:35:9a:21:
f3:5a:a9:e8:f6:7f:94:02:64:3e:0f:c8:4f:26:10:7d:da:66:
2d:bb:ea:cf:a1:0e:de:0c:43:b8:1d:58:ea:94:7d:45:e7:1f:
75:c7:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 08:56:00 2024 by rpki-client on console-ams.rpki-client.org