Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/TBtzvhfd3p11BS7dSDMZTKPheeY.roa
File: TBtzvhfd3p11BS7dSDMZTKPheeY.roa (raw, json)
Hash identifier: Wy5iNFT5Bi32uWLISJQUTolxEY5r75g4v96aiRE8C6s=
Subject key identifier: 4C:1B:73:BE:17:DD:DE:9D:75:05:2E:DD:48:33:19:4C:A3:E1:79:E6
Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial: 018DF9E867D93DFD5E89F5D73E3A782ED097
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/TBtzvhfd3p11BS7dSDMZTKPheeY.roa
Signing time: Fri 01 Mar 2024 12:06:14 +0000
ROA not before: Fri 01 Mar 2024 12:06:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43073
IP address blocks: 91.240.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:e8:67:d9:3d:fd:5e:89:f5:d7:3e:3a:78:2e:d0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
Validity
Not Before: Mar 1 12:06:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c1b73be17ddde9d75052edd4833194ca3e179e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:5a:00:a8:5c:f7:b3:75:a1:2d:3f:45:52:
c6:04:ce:9c:c1:4a:57:d7:e9:a5:7d:21:6d:83:b4:
c4:d3:a1:49:d5:44:6e:40:e5:22:ad:76:88:5e:39:
0f:84:8e:46:d9:a7:c2:61:b2:61:dc:29:00:14:fa:
8a:eb:f9:60:46:88:63:3e:57:27:3b:df:15:ca:43:
ac:a2:b6:aa:03:bc:3a:88:05:23:22:b5:b9:15:5c:
5b:b6:b5:31:9f:fc:81:45:fe:a5:e1:0c:93:7c:bc:
12:4e:e0:31:6e:4b:12:57:c1:f6:f4:fc:e6:1b:59:
77:9f:2b:66:b2:6e:9a:b0:32:c7:59:ad:e9:d8:47:
28:95:f5:9e:62:c7:ff:37:71:4a:76:aa:f9:9b:b6:
cb:4e:fb:21:f5:10:43:59:18:17:29:2d:92:f6:45:
a1:d6:c2:26:4b:6a:93:5a:24:a7:25:f7:a0:9f:4b:
d2:4c:26:8a:8f:2e:5b:c5:81:9e:da:43:08:a0:e0:
6a:48:eb:a7:16:d0:86:83:03:2d:52:8c:ba:f0:06:
53:7a:5f:c5:78:ee:23:50:a4:03:f6:6b:d7:e8:94:
90:75:48:e7:4e:73:de:51:20:ee:0e:50:3c:d8:31:
e4:f8:02:66:1d:39:b1:13:57:a1:2d:85:e7:81:e0:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:73:BE:17:DD:DE:9D:75:05:2E:DD:48:33:19:4C:A3:E1:79:E6
X509v3 Authority Key Identifier:
keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/TBtzvhfd3p11BS7dSDMZTKPheeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.106.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:0b:6a:6a:d6:49:84:fe:eb:a0:b9:54:45:3e:43:b7:01:36:
b2:eb:b8:26:90:05:56:c3:da:33:2f:00:7f:66:c0:9e:b8:50:
cb:5a:67:7e:49:28:eb:dd:23:aa:46:7a:fc:28:e8:ba:16:f7:
71:d0:6f:7b:12:8d:33:62:07:fb:7f:77:fa:1c:d2:35:34:c8:
9d:7e:4a:99:7a:97:32:d0:e1:b8:31:2a:8e:ad:4e:4a:15:a7:
dc:e3:c4:84:cb:45:f5:18:e4:3e:70:bb:67:2e:ee:16:cd:e3:
d1:27:32:5f:66:f4:c6:5f:47:d2:f7:af:b8:6a:1f:e1:ce:73:
6f:34:eb:4a:00:84:62:ad:25:31:3a:1a:10:f6:44:e0:30:42:
fa:29:3c:4e:a2:cc:84:36:87:0f:0f:12:44:51:0e:55:c4:15:
d0:6d:86:46:0f:c0:cc:6a:3a:54:fa:50:60:96:fb:13:16:8a:
d3:9a:5d:53:dd:27:fe:bf:79:c8:f2:39:50:40:a7:f7:51:d4:
23:a7:77:10:71:ce:c4:3c:7f:e8:50:a3:dd:83:15:a8:61:1d:
90:15:b6:74:b9:4a:ac:e6:53:8e:0a:96:fe:6a:f5:97:59:07:
e5:0b:39:e4:3d:d0:e2:b6:de:10:0e:09:7e:40:85:af:55:88:
a5:40:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:00:59 2024 by rpki-client on console-fra.rpki-client.org