Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Tma3qaoh-ZxkP07kF0exiQiT2fE.roa
File: Tma3qaoh-ZxkP07kF0exiQiT2fE.roa (raw, json)
Hash identifier: tqA113OP/3PPKo65ArO9skr/Vu16v7mqgyiW4Y4E+Kc=
Subject key identifier: 4E:66:B7:A9:AA:21:F9:9C:64:3F:4E:E4:17:47:B1:89:08:93:D9:F1
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955C18EB95464A762C4D276926763C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Tma3qaoh-ZxkP07kF0exiQiT2fE.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59735
IP address blocks: 89.46.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5c:18:eb:95:46:4a:76:2c:4d:27:69:26:76:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e66b7a9aa21f99c643f4ee41747b1890893d9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:22:43:cf:89:bf:d4:46:d1:af:13:8e:2a:
4f:d2:c2:d4:0f:c5:33:28:e7:ad:7c:b6:81:7a:f1:
7d:b9:96:04:6d:f3:21:54:d2:d3:a8:05:70:f0:54:
e0:2c:e1:42:18:9f:5c:d6:f3:81:40:1d:33:b0:ed:
ac:1b:7e:db:94:a1:af:6e:a2:3a:00:bf:f3:a6:2e:
95:27:aa:6a:40:2c:41:2f:49:fa:e5:67:3c:21:75:
ab:85:f3:30:42:c6:22:3b:03:69:60:eb:df:08:f9:
bf:e9:38:b6:43:d0:bf:b3:69:3e:84:07:21:6a:7e:
5c:f6:7e:02:07:eb:70:02:c3:a8:0e:f5:55:91:c9:
41:b7:22:61:34:d7:20:02:8f:2c:42:82:c4:85:87:
65:e6:19:50:1b:c9:59:86:70:71:c2:0e:9e:75:ea:
d2:c6:50:e5:29:7f:d1:12:4f:a8:7c:34:df:2d:ab:
47:b5:34:bc:40:e1:5d:e8:21:92:6e:35:03:1c:e4:
3f:d4:12:44:37:9e:49:f1:45:20:76:17:e5:1e:b9:
8a:61:ee:0b:0d:77:39:01:3b:fc:fd:fd:27:02:a7:
49:89:68:44:6a:fd:c9:fb:32:11:7f:49:01:c6:f9:
77:e3:55:0f:47:33:db:73:70:94:da:cf:83:8d:6a:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:B7:A9:AA:21:F9:9C:64:3F:4E:E4:17:47:B1:89:08:93:D9:F1
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Tma3qaoh-ZxkP07kF0exiQiT2fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a3:4c:a0:bb:a0:cf:a2:f1:26:8c:2b:33:5a:97:16:38:3e:
c7:65:b0:f1:70:73:2d:da:78:e9:d7:ef:07:3b:94:44:01:56:
3b:99:59:d4:96:28:4a:e5:34:3b:49:e8:a3:d6:66:00:67:73:
ad:95:b7:8c:94:34:a3:74:00:fa:8c:fc:e2:01:86:b5:e2:44:
ce:38:44:7f:53:22:8f:24:1b:4c:24:dd:06:91:56:24:e3:3e:
9e:d7:6c:0d:12:f9:f5:ea:9c:28:71:e4:68:4a:54:de:4b:0f:
60:37:80:28:97:df:87:fb:f1:dd:60:c9:28:28:70:e1:be:51:
40:03:c8:3c:a6:2b:04:f6:af:e8:95:49:b4:53:d2:87:58:75:
a1:2b:4f:39:1a:32:ce:07:12:2d:d6:b9:ff:0b:9d:0d:1a:65:
0d:e7:b4:95:95:ba:f6:7d:30:7b:ae:84:4c:ea:ce:99:14:61:
ec:87:2d:0a:d6:11:28:9b:0b:06:c4:a5:9e:76:b4:4f:6c:de:
e4:58:7b:c8:33:8d:02:af:02:50:b9:ce:b7:19:17:90:1e:fa:
c0:41:43:7c:70:83:75:76:89:5b:dc:29:43:7e:bd:a7:7c:73:
ff:87:34:9e:e4:5c:c7:e9:53:01:ec:70:53:e9:cb:50:b7:3b:
c7:05:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:09:30 2024 by rpki-client on console-fra.rpki-client.org