Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/TT0tkWKBMWbwogJcYgAMyXnTV8w.roa
File: TT0tkWKBMWbwogJcYgAMyXnTV8w.roa (raw, json)
Hash identifier: dU+FS5q73P3Zdnpt8yWCMHCexHtEc5LdOips+kcGIPQ=
Subject key identifier: 4D:3D:2D:91:62:81:31:66:F0:A2:02:5C:62:00:0C:C9:79:D3:57:CC
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0192A0153346ADF74793DA099B9152B2226B
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/TT0tkWKBMWbwogJcYgAMyXnTV8w.roa
Signing time: Fri 18 Oct 2024 14:43:16 +0000
ROA not before: Fri 18 Oct 2024 14:43:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202939
IP address blocks: 2a0d:2682::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a0:15:33:46:ad:f7:47:93:da:09:9b:91:52:b2:22:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Oct 18 14:43:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3d2d9162813166f0a2025c62000cc979d357cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:79:cf:be:97:25:79:c3:68:41:ad:c9:f2:
bf:8d:82:f3:3b:d5:27:aa:9b:c9:19:9b:9d:ba:0e:
f8:63:9f:e5:15:47:13:bd:66:88:07:a7:9a:fb:f6:
e1:3e:a3:56:2e:8a:df:83:f6:b8:36:c6:14:ed:e8:
c6:fc:10:22:60:fc:4d:05:a3:fc:4c:ed:22:dd:3c:
01:3c:e1:64:e9:37:67:bf:7b:d3:e6:2e:f2:3d:7b:
91:9e:14:61:1b:0e:24:62:4c:88:48:bf:35:0a:4d:
2a:1f:2b:2d:e2:c4:52:87:9b:d2:ac:31:7e:67:93:
ce:06:a1:87:65:d5:7d:94:79:a2:fe:9c:9f:c1:62:
f8:ce:f2:53:a3:a8:17:00:92:13:ef:de:cf:1e:06:
ac:58:7e:b0:bf:75:00:3c:4c:ea:9c:5d:50:98:21:
13:4a:2d:66:fa:35:8a:6e:67:00:8f:af:cc:96:1e:
40:16:fb:10:a6:2f:9e:03:5c:5c:7d:cc:95:c5:a2:
19:fa:d2:c2:2e:49:72:60:8e:49:fd:dd:77:5a:89:
35:58:0d:33:bd:be:a1:34:b1:55:7e:9a:b8:c0:6e:
02:af:46:59:50:f5:e7:09:82:d6:ce:f5:dc:a3:91:
8f:f8:c2:e0:0f:76:7c:75:7f:07:7c:c4:d4:53:30:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:2D:91:62:81:31:66:F0:A2:02:5C:62:00:0C:C9:79:D3:57:CC
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/TT0tkWKBMWbwogJcYgAMyXnTV8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2682::/32
Signature Algorithm: sha256WithRSAEncryption
07:c1:bd:b8:a7:9e:80:bc:fa:e7:b1:09:05:b2:35:4f:89:1e:
39:dd:0e:f4:36:6e:12:3d:c2:7c:61:47:af:08:21:58:ba:29:
a4:21:03:49:38:60:7e:98:05:fc:38:e0:b6:c0:60:64:48:ad:
cb:cd:28:bf:0e:b8:17:2c:6c:50:12:b2:03:17:ad:e8:e1:53:
be:80:7d:fe:0c:a4:a6:21:70:e3:ee:04:bf:c0:66:34:67:c3:
fa:7f:6b:8f:4e:63:61:1a:c8:16:ed:05:ce:5e:48:38:2b:25:
dc:92:2a:6c:3d:05:15:8b:6d:d1:e1:bf:3c:7a:a6:fb:bb:18:
0a:68:63:13:a0:02:1a:fc:cf:f7:99:6b:39:62:8d:f8:08:04:
0e:a0:fd:a2:70:87:81:cf:b8:24:6e:38:55:0a:99:26:40:fb:
d4:fa:f5:74:61:01:dd:e0:36:c2:b2:20:9d:b7:ae:04:80:00:
fb:8c:55:f2:22:36:3b:d1:b9:23:d9:7d:f4:e2:f9:0c:67:78:
21:52:2a:0e:a3:77:be:86:72:c3:10:2c:f8:2e:fa:4e:96:0d:
0e:2b:e9:c9:fe:8a:df:85:f1:c6:34:de:d6:57:72:38:66:50:
af:39:dc:7e:77:6e:0e:a3:c5:52:c3:a3:15:70:e3:15:de:04:
b5:06:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:04 2024 by rpki-client on console-fra.rpki-client.org