Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/TLQPe9nDu--y9fTRnbjIpHeIHc4.roa
File: TLQPe9nDu--y9fTRnbjIpHeIHc4.roa (raw, json)
Hash identifier: NcP54iR/sRbHngPxhjsh27XJ36idctMJtS4AAiLlpRg=
Subject key identifier: 4C:B4:0F:7B:D9:C3:BB:EF:B2:F5:F4:D1:9D:B8:C8:A4:77:88:1D:CE
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 018CC2DB364DBA1BA739FC56085F57997134
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/TLQPe9nDu--y9fTRnbjIpHeIHc4.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43046
IP address blocks: 91.229.0.0/23 maxlen: 23
195.191.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:36:4d:ba:1b:a7:39:fc:56:08:5f:57:99:71:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cb40f7bd9c3bbefb2f5f4d19db8c8a477881dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:d5:d9:c8:23:c7:e0:bf:6e:60:f6:fd:90:
1e:10:83:77:d7:ae:17:34:cb:45:df:ff:e0:7e:6e:
a8:32:71:68:38:d5:b8:b8:3e:d4:e5:c5:18:89:01:
3a:bf:ef:21:93:40:72:79:be:bb:1c:42:14:23:7c:
34:26:e4:fd:72:94:41:9b:de:1e:cc:99:54:30:6b:
19:a5:9c:ae:88:9e:a3:17:8a:7b:c8:84:a6:47:17:
3b:a2:0b:dd:dc:46:f0:26:b4:9d:6c:15:92:8c:37:
9a:d6:a0:37:23:d2:a2:d6:3c:30:d4:04:30:f2:6a:
ce:6b:0d:ab:1a:fa:50:85:87:64:95:e7:6a:d9:d8:
99:a2:4b:d9:ff:4a:69:71:a5:22:57:0d:2c:f2:ad:
36:ba:41:57:6a:2a:19:1e:91:ae:bb:0b:8a:a6:bc:
f9:55:b5:37:89:90:2b:5e:14:64:5a:27:07:02:58:
fb:c5:d7:cb:2d:f3:59:cd:76:6f:06:e8:a1:de:92:
05:4b:49:f0:d9:39:01:e1:2c:3b:55:a0:d6:f9:2c:
60:12:84:a1:07:d6:4f:96:34:62:bd:3c:8a:cf:56:
48:5f:ca:fd:6b:47:7a:5d:29:34:de:a9:7f:75:f2:
c1:ed:84:38:97:db:a1:e8:d1:03:9f:07:25:df:e7:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:0F:7B:D9:C3:BB:EF:B2:F5:F4:D1:9D:B8:C8:A4:77:88:1D:CE
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/TLQPe9nDu--y9fTRnbjIpHeIHc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.0.0/23
195.191.160.0/23
Signature Algorithm: sha256WithRSAEncryption
51:5c:3a:52:d5:2b:c0:15:4c:d1:0b:4f:f5:6d:15:87:60:63:
9b:6d:88:57:58:c4:28:16:c9:e8:ac:4e:2e:75:da:41:80:ac:
e4:76:a9:0d:ff:f2:54:24:0b:b1:27:47:2e:8a:1d:bc:5d:fa:
97:46:6a:d6:76:bc:5a:f4:2d:c8:6f:40:10:d0:7b:df:5b:79:
fa:d0:cd:f4:4e:32:f3:2b:bd:4e:1a:e5:b6:ed:31:82:0e:19:
5d:e8:f9:32:43:15:4b:f7:a1:a1:4b:b7:93:04:af:ea:de:f8:
a1:35:b1:cd:fa:e4:fb:12:66:17:94:13:ec:22:57:a0:47:d7:
de:18:df:47:36:41:b0:af:ea:4a:60:a1:94:f2:b7:75:a1:df:
bc:27:d0:72:6c:1d:61:8c:c6:15:20:98:98:9c:f9:1a:ec:5a:
bd:56:8e:58:e8:c8:4d:c5:77:bb:e0:d3:b9:98:e9:22:aa:99:
12:ca:94:c3:b7:51:1c:5a:e3:f8:4c:c0:e2:56:44:02:c1:96:
78:6d:c8:9c:54:c7:c8:7b:6b:ce:19:5e:ee:61:68:be:06:6d:
b3:30:e6:9e:3a:3c:d6:21:59:3b:e2:e0:6b:86:fd:bd:c6:17:
24:53:94:54:fb:82:fd:fd:06:df:9c:92:4d:5c:19:48:6f:2e:
cd:d1:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:35:13 2024 by rpki-client on console-ams.rpki-client.org