Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/TRXJl1FHjHUFLAbPXioeeQS0GU8.roa
File: TRXJl1FHjHUFLAbPXioeeQS0GU8.roa (raw, json)
Hash identifier: v3IBf+nGF2X8TNJR1+CHrX1MQgZ+C2257d1namFw/P4=
Subject key identifier: 4D:15:C9:97:51:47:8C:75:05:2C:06:CF:5E:2A:1E:79:04:B4:19:4F
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 018CCA96F72FC22B5E68B11BD943F3C5AB73
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/TRXJl1FHjHUFLAbPXioeeQS0GU8.roa
Signing time: Tue 02 Jan 2024 14:32:20 +0000
ROA not before: Tue 02 Jan 2024 14:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202796
IP address blocks: 185.194.250.0/24 maxlen: 24
185.194.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:f7:2f:c2:2b:5e:68:b1:1b:d9:43:f3:c5:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jan 2 14:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d15c99751478c75052c06cf5e2a1e7904b4194f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:54:d0:00:7e:f3:b8:a7:47:c0:39:23:43:
11:97:6b:1f:8c:7c:e5:2e:56:5a:8d:d6:34:3c:98:
64:6f:b7:16:f9:bc:bd:61:e1:e1:ff:15:a0:dd:cf:
c3:58:9d:1f:ef:17:17:c6:4d:ed:0b:be:db:1d:40:
cc:23:b6:c4:83:a4:f5:16:73:4d:33:bc:8f:70:cf:
fc:da:eb:88:33:52:4e:3c:06:c8:b1:f9:7b:95:c1:
22:8e:55:11:7b:81:83:b9:48:fd:2d:ae:d5:7f:2e:
2a:33:0b:ea:3b:0c:9c:b5:d9:6f:7f:aa:01:2f:82:
0d:7f:59:ee:c3:59:13:5a:9e:54:e2:c9:08:11:d3:
68:a8:80:43:c8:94:94:5b:4f:c7:93:6c:e5:39:22:
33:fe:18:47:9d:d6:0b:72:b3:da:4a:23:e4:31:88:
61:0b:9c:7e:73:91:50:e0:a6:24:61:d2:54:99:0b:
bb:5b:54:b5:cb:31:8f:07:4a:18:89:fb:d4:a5:7e:
af:cc:a4:41:c1:91:ed:89:a4:3f:34:52:b8:f6:af:
56:1d:65:b2:f0:bc:81:8a:92:fd:c7:fd:80:79:ad:
57:b9:f2:d4:d9:9e:1c:d4:46:8f:1b:e7:b2:6e:fc:
3c:21:b3:22:f7:06:fd:68:a8:26:dc:ce:5d:90:31:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:C9:97:51:47:8C:75:05:2C:06:CF:5E:2A:1E:79:04:B4:19:4F
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/TRXJl1FHjHUFLAbPXioeeQS0GU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.250.0/23
Signature Algorithm: sha256WithRSAEncryption
62:7a:a6:64:58:87:57:0a:d6:8c:8e:a2:3c:32:0c:9c:ff:ad:
c6:ac:d7:1b:ce:df:92:0b:e3:2e:64:3f:b9:bb:48:7f:37:53:
bc:91:ca:91:53:03:1c:99:28:7a:be:20:04:8c:a8:c6:5d:11:
cd:14:51:44:f3:e1:6e:39:6d:b4:db:ae:9a:8e:bb:03:a2:56:
f2:ea:98:34:c7:0c:e8:ad:33:6c:a7:3b:3a:38:3e:21:d2:b9:
ea:6a:33:38:37:d9:bb:b0:b6:bf:7c:c1:75:d6:44:ae:1d:2b:
6e:f1:ad:ec:64:3d:4d:c2:8d:83:7f:e3:a1:a9:40:74:5d:bf:
91:26:57:0b:78:12:e7:b6:e9:aa:d8:a9:98:e2:84:a1:72:b4:
e4:82:78:0c:46:a0:f5:99:71:52:76:db:22:94:22:09:a0:a8:
40:cf:d0:aa:1e:3e:3d:87:82:0b:69:cc:46:f2:65:a5:e0:9c:
66:40:0c:8a:f5:53:c7:d8:6f:f4:ae:12:1a:07:f9:cf:b7:ee:
0f:af:b3:a8:36:5b:e8:d7:b3:66:88:bb:70:b5:1b:a4:a0:54:
52:4d:1a:96:0b:f5:c3:b4:fd:8c:2c:1f:e7:02:14:a4:63:08:
f1:e2:f1:d4:0e:bc:b4:00:12:2b:93:a2:25:85:de:da:96:42:
e6:f9:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:28:39 2024 by rpki-client on console-ams.rpki-client.org