Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/TF_cfHDtSrX1ZYMKzl0nyQ4BkoA.roa
File: TF_cfHDtSrX1ZYMKzl0nyQ4BkoA.roa (raw, json)
Hash identifier: 6dDIM+tSI8QK5e0nzvdCzB7FRO2DYS67qDgkfQMI8xM=
Subject key identifier: 4C:5F:DC:7C:70:ED:4A:B5:F5:65:83:0A:CE:5D:27:C9:0E:01:92:80
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 018CC8DED973DD54F0914C8704C629946E53
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/TF_cfHDtSrX1ZYMKzl0nyQ4BkoA.roa
Signing time: Tue 02 Jan 2024 06:31:36 +0000
ROA not before: Tue 02 Jan 2024 06:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56947
IP address blocks: 185.7.116.0/23 maxlen: 24
91.229.108.0/22 maxlen: 24
188.68.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d9:73:dd:54:f0:91:4c:87:04:c6:29:94:6e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 2 06:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c5fdc7c70ed4ab5f565830ace5d27c90e019280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:b0:74:6a:0f:c6:dc:b0:fa:62:49:4c:64:
df:43:e2:a8:dd:53:94:5a:49:6b:03:eb:1e:1f:03:
89:83:68:81:63:22:fa:ed:b1:70:04:70:76:c0:bc:
10:13:85:fb:0e:b6:75:92:a4:8d:1e:58:4d:81:6b:
1a:e3:75:f6:70:9b:6a:7a:f7:91:55:30:5b:e8:76:
14:cf:38:da:0f:a4:b0:27:d2:dc:5f:67:f7:e1:a9:
b9:36:16:10:1f:f7:91:30:21:7a:27:af:55:0d:b1:
d1:a8:b7:4c:d4:47:1f:0c:40:61:62:47:fc:66:5b:
53:27:c4:99:1b:dc:4c:57:f2:54:df:35:6a:c6:3f:
cf:66:f4:3b:28:50:ea:06:de:00:97:26:39:54:61:
f6:98:31:e5:de:65:a2:b4:8f:77:3a:c8:fb:bc:88:
3a:3b:8c:51:1a:90:04:3f:2a:2d:42:4f:ee:67:f6:
25:a7:07:65:da:89:e3:e1:79:23:ad:eb:6d:97:fe:
9a:0e:27:f7:74:ce:15:46:77:55:24:10:7f:08:dc:
64:d5:27:94:18:1d:c9:57:48:12:be:a8:51:9e:31:
b3:61:10:29:67:05:c9:7a:19:90:94:74:bb:c3:64:
4d:36:19:85:01:de:41:3b:dd:09:1d:4e:e6:3f:8d:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5F:DC:7C:70:ED:4A:B5:F5:65:83:0A:CE:5D:27:C9:0E:01:92:80
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/TF_cfHDtSrX1ZYMKzl0nyQ4BkoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.108.0/22
185.7.116.0/23
188.68.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:da:09:64:e3:5b:13:37:0b:30:4c:23:62:0a:8e:c7:69:8c:
62:c4:4d:a2:83:c7:cb:90:74:49:ae:af:77:ed:38:71:2f:e1:
38:77:2a:97:09:3b:3b:ca:55:05:34:9a:5d:1e:99:a8:33:5b:
e4:a2:87:45:e4:97:7d:f1:ea:21:4d:d2:bb:66:1c:6c:9a:80:
75:fd:28:5f:a3:32:8b:94:19:90:a5:2d:c3:51:42:e4:65:83:
e8:9b:af:d9:6d:b1:69:fd:85:c0:08:00:53:4d:af:05:05:bb:
b3:2b:75:d2:03:c3:9d:f1:39:00:dc:b6:8d:63:f4:4e:bd:b0:
18:48:30:35:52:4c:d4:f1:05:3d:dd:76:16:83:32:0d:37:76:
74:b9:24:b5:6e:5f:cf:d3:ff:08:3e:fd:6c:55:14:a5:95:6e:
d6:81:2e:9a:8c:3a:22:ed:62:d0:4c:ad:9f:57:8b:64:d0:08:
a3:9b:5f:b0:6a:d8:c1:d4:a6:44:70:b3:65:93:23:30:f3:c2:
f5:d3:f2:53:3e:2e:85:35:8d:bb:dc:28:d7:11:71:a4:8c:db:
67:7a:5a:ea:3c:3f:70:cc:b9:0c:29:a2:1d:97:96:62:9b:8b:
7c:6e:3a:7d:05:70:b0:7d:d6:68:62:8f:bc:d1:33:49:6e:63:
6b:11:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:03:22 2024 by rpki-client on console-fra.rpki-client.org