Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa
File: TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa (raw, json)
Hash identifier: lV0rpOjzXD91TeojuhNDcm3uIQLz+e/v7/x10pJU480=
Subject key identifier: 4C:9E:43:5A:72:E2:43:07:8C:FF:28:FE:6D:13:4A:A0:4C:FF:05:E3
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018CC6499AA2BD669AF7D874F00D1DC2793A
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa
Signing time: Mon 01 Jan 2024 18:29:21 +0000
ROA not before: Mon 01 Jan 2024 18:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208900
IP address blocks: 95.160.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9a:a2:bd:66:9a:f7:d8:74:f0:0d:1d:c2:79:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 18:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c9e435a72e243078cff28fe6d134aa04cff05e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:47:ba:55:1d:3c:41:fd:0f:8f:6d:dd:93:
d7:89:f0:52:a7:f8:f3:db:d9:ca:37:26:d9:48:7d:
5a:d7:24:dc:8f:1f:40:06:87:16:36:be:e4:69:64:
aa:26:0a:ef:2b:f1:32:49:be:e5:05:87:c0:33:4c:
c1:f3:74:a1:a5:e4:71:65:ac:b0:0b:a2:24:f4:b5:
72:60:02:c2:4c:9b:eb:07:2d:b9:f0:00:4d:71:4a:
2b:b5:08:e1:75:d1:6d:f3:f1:fc:32:e2:7e:dd:43:
d7:16:8f:3a:75:e7:10:82:fb:e8:dc:dd:33:dd:8f:
9a:e5:c4:cb:a8:f9:ff:f8:47:60:ee:a4:4b:cb:1b:
4e:86:d8:51:35:fd:cc:cb:f3:5b:8a:12:f5:ff:9d:
79:72:f5:ab:9a:b5:6d:e3:c0:d1:5c:c6:19:78:c0:
24:d7:9b:8e:cb:3c:9a:4b:ef:8e:e5:ac:fc:53:ed:
db:7b:69:83:7e:71:64:b0:ce:b7:ae:33:d7:96:4b:
05:c1:37:1e:78:b8:b8:96:c0:89:0b:06:90:6a:2f:
f4:ff:e3:b2:f9:f6:b8:fb:25:73:dc:0c:7b:06:d5:
bf:6a:27:38:cf:3b:ce:b0:36:13:ee:64:fd:f3:52:
36:9f:47:88:6b:09:81:fb:95:b7:36:b8:fc:e4:8f:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:43:5A:72:E2:43:07:8C:FF:28:FE:6D:13:4A:A0:4C:FF:05:E3
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/TJ5DWnLiQweM_yj-bRNKoEz_BeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.160.57.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4b:83:32:1e:95:e8:3f:bb:96:4c:79:54:d4:a5:4c:28:76:
ce:8e:a2:dc:dc:b0:82:47:e2:49:a5:65:d9:36:38:79:ae:ee:
2b:f7:c0:9e:59:54:cb:f1:4f:ab:25:27:75:93:7d:2a:4c:c3:
a3:d8:25:97:70:82:df:52:af:3d:a0:c2:fa:18:3c:62:aa:48:
bb:de:b9:80:43:80:a8:ef:be:41:5b:24:59:73:55:86:34:51:
39:8d:07:a7:96:83:9d:6c:55:83:f1:53:28:d5:99:44:fc:51:
a8:b8:20:e4:06:64:d2:4d:25:c0:3d:77:b3:f0:47:46:64:64:
ac:e8:a3:ce:e6:c8:89:34:8d:2a:1f:91:3d:8d:0e:50:d9:43:
70:c1:5f:1a:56:6d:77:00:e9:64:d4:e5:35:f0:86:33:20:c4:
fb:5c:d2:90:13:85:69:74:8d:12:64:9f:3f:2f:31:d2:0a:69:
88:e4:26:99:28:2c:a3:32:97:c4:99:3d:3f:20:21:64:ad:39:
60:27:0a:4e:09:4e:7a:5e:c7:20:4f:82:62:08:27:67:50:f1:
4f:e7:06:f0:ad:7d:7f:9e:28:34:05:e7:88:80:01:db:2d:d3:
f6:99:e4:51:c7:ae:ac:a1:a3:02:ed:e8:bc:5a:31:dd:a0:95:
74:48:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:38 2024 by rpki-client on console-ams.rpki-client.org