Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/TikvAFOOgLetjSwJMsWMnNDfYys.roa
File: TikvAFOOgLetjSwJMsWMnNDfYys.roa (raw, json)
Hash identifier: Cdf7awBbH5HR+xAUl6nO+niYwZ6byWKMb2l5VeqOWHo=
Subject key identifier: 4E:29:2F:00:53:8E:80:B7:AD:8D:2C:09:32:C5:8C:9C:D0:DF:63:2B
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0191EB7D8371777C66216094044408AD7639
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/TikvAFOOgLetjSwJMsWMnNDfYys.roa
Signing time: Fri 13 Sep 2024 13:05:57 +0000
ROA not before: Fri 13 Sep 2024 13:05:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:7d:83:71:77:7c:66:21:60:94:04:44:08:ad:76:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Sep 13 13:05:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e292f00538e80b7ad8d2c0932c58c9cd0df632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:7f:95:f5:a5:fb:7c:fb:3d:68:74:17:4c:
3d:bc:4a:5b:98:38:a2:08:ea:64:a9:9d:dd:8b:6d:
15:a6:44:8f:cf:dd:f5:24:2f:58:37:98:ca:66:e1:
50:c4:11:d2:f3:dd:be:d9:f8:90:47:58:f6:0d:55:
68:84:b8:c6:3a:da:d6:30:cb:2e:6a:f8:0a:8b:c6:
e4:52:67:87:87:ad:0d:79:e9:1e:39:de:81:f1:62:
d7:e7:13:27:f2:65:fa:cb:3e:1b:09:63:92:bd:a0:
af:12:77:23:81:bc:23:b3:be:5b:90:92:96:1e:47:
6b:64:e3:c6:f7:52:b5:30:0a:ee:37:43:4b:00:5c:
ae:f2:70:8b:33:5d:c5:f3:4f:84:9d:ea:40:a5:0d:
45:5b:4b:44:fe:47:bc:29:42:73:e5:cc:1c:1f:aa:
15:ad:60:fa:ad:55:d0:b7:74:c6:53:48:c3:ec:b9:
29:e9:60:5e:ee:68:61:7f:d0:0b:4a:1f:fc:08:3a:
35:4d:30:b4:85:8a:d9:27:d9:21:e6:a6:85:2d:14:
5c:85:ae:58:a9:7d:2f:20:91:fc:64:2d:07:a4:66:
de:95:c1:5a:34:a8:2b:6f:93:12:8e:ea:07:3d:4e:
e9:b4:c3:4b:a3:e7:93:28:8c:4a:14:5f:d9:7c:81:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:2F:00:53:8E:80:B7:AD:8D:2C:09:32:C5:8C:9C:D0:DF:63:2B
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/TikvAFOOgLetjSwJMsWMnNDfYys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
38:67:8d:fe:b2:dc:af:a0:67:e8:b1:1f:ac:f0:50:0b:4a:c7:
2b:9e:81:29:e4:4f:32:1b:5c:d7:a6:fa:46:e1:d5:3c:78:d3:
7f:05:3e:d2:cb:c6:d9:0f:4b:29:38:b6:b9:2a:47:94:ab:4d:
66:49:84:d6:87:aa:e9:d7:a9:c0:4d:40:1d:71:a1:eb:09:19:
90:ac:a0:d7:0e:6e:e8:42:af:4f:2c:11:91:18:b2:21:b5:ab:
9a:d9:da:35:ac:30:5e:43:7a:f9:f1:b8:88:43:4a:00:8f:8d:
a3:d7:d7:5a:df:d2:27:64:06:87:78:14:d9:06:88:0b:28:bb:
cb:64:48:d4:d2:ef:db:f5:34:8d:46:87:f9:65:0a:45:2c:be:
7d:4e:7d:be:f6:1b:81:7a:42:13:c2:d6:c3:4a:99:be:be:f7:
46:06:96:e6:37:f6:9f:c7:af:e0:2a:aa:c5:5e:f4:ac:59:9a:
a9:cb:e5:55:63:56:21:34:9d:44:46:c9:4b:37:f0:a9:ee:92:
d9:bb:dd:f5:b7:31:c3:e7:4e:c6:98:f7:14:6f:6f:fa:e2:b2:
a6:27:b7:0c:08:09:34:fb:fb:9a:af:7e:82:4c:01:e8:fa:35:
4b:2e:91:79:33:1b:f5:af:2d:13:b1:e7:05:96:80:ff:fb:85:
9d:c7:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:55 2024 by rpki-client on console-ams.rpki-client.org