Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/TZ9HHR7bGQRjDsbDdsLsls6wyfQ.roa
File: TZ9HHR7bGQRjDsbDdsLsls6wyfQ.roa (raw, json)
Hash identifier: nmiNDw0mlTS2GRoWIUmEprwYMFwKPaGYKoguqpTNKuo=
Subject key identifier: 4D:9F:47:1D:1E:DB:19:04:63:0E:C6:C3:76:C2:EC:96:CE:B0:C9:F4
Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial: 018F53EA5342B397588EF2D60D467CFAD621
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/TZ9HHR7bGQRjDsbDdsLsls6wyfQ.roa
Signing time: Tue 07 May 2024 16:36:56 +0000
ROA not before: Tue 07 May 2024 16:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.50.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:ea:53:42:b3:97:58:8e:f2:d6:0d:46:7c:fa:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Validity
Not Before: May 7 16:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d9f471d1edb1904630ec6c376c2ec96ceb0c9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:08:fc:07:73:de:6a:e9:8e:f4:a8:f2:50:67:
46:c7:4e:68:34:53:da:e7:ef:6b:c6:07:76:22:5b:
25:11:8e:d2:47:62:d3:77:59:51:57:5c:aa:30:9c:
1e:f2:94:1c:4c:9e:04:a3:5d:be:81:7e:32:71:b3:
dd:ea:1c:16:04:34:e6:fd:f9:a7:4f:9f:3c:06:8c:
df:dd:26:02:92:61:1a:2d:58:55:2e:17:ca:84:fa:
c4:22:97:9a:e5:37:e6:72:c5:53:e9:e1:3e:1f:19:
d6:4c:76:33:f2:db:93:78:d8:57:70:e1:04:19:0b:
2d:a8:a5:df:c1:00:17:4e:ae:f5:a3:da:39:20:12:
d2:9e:eb:8a:ca:74:08:0a:b1:05:5b:61:f1:fd:ba:
eb:30:31:5e:ee:97:4a:22:06:ff:8c:d9:67:50:64:
53:01:1c:ae:5b:84:4f:29:5a:da:c5:91:f7:48:fa:
95:9c:81:23:71:79:22:fe:3f:57:7b:22:ea:38:94:
4c:0a:bd:b7:c2:ee:67:bb:5c:88:2a:2e:10:6a:e6:
08:7f:31:fb:b1:c9:45:b9:05:96:02:3f:3b:0c:1d:
3a:df:57:e0:79:4a:29:bb:bf:4b:7a:ba:7b:8d:83:
a6:36:55:e9:9b:51:6d:fb:a4:0b:c6:13:92:79:2f:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:47:1D:1E:DB:19:04:63:0E:C6:C3:76:C2:EC:96:CE:B0:C9:F4
X509v3 Authority Key Identifier:
keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/TZ9HHR7bGQRjDsbDdsLsls6wyfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.140.0/24
Signature Algorithm: sha256WithRSAEncryption
13:cc:51:4d:ad:9a:35:aa:49:da:dc:1f:27:d9:cc:76:5c:cf:
2b:9c:3c:8d:c8:75:22:cd:44:8c:5d:0c:17:7b:7b:ef:86:79:
95:80:1a:f2:b0:f1:2e:b8:48:f4:13:06:c9:c1:8e:6c:65:5e:
77:9b:56:88:2f:5e:db:d6:0f:97:3c:e2:1b:14:c5:75:b4:54:
36:a2:6c:74:7c:52:75:82:29:5f:e6:bc:ff:6f:57:83:88:00:
b7:27:05:b8:f6:54:fe:81:95:8c:9b:c4:93:e5:d1:bd:6c:75:
68:1c:9c:bd:64:6e:43:e3:aa:0f:a1:8f:cd:aa:c6:a7:d4:1e:
d5:43:69:ae:b9:06:80:83:77:c8:35:c0:fc:2e:e0:77:0a:f9:
94:6b:e3:14:c0:a0:46:5a:d6:4d:70:2e:c0:b3:e2:97:36:d9:
9b:b4:cb:c9:94:fa:2b:0e:f8:f9:92:a1:90:45:25:92:2b:a5:
83:00:e4:0b:48:15:12:de:95:f3:01:0a:01:65:31:68:d2:aa:
9c:c2:84:c2:64:02:e1:d2:85:58:12:60:8b:e8:53:26:8c:79:
40:80:57:7f:f5:6f:86:bd:6b:4a:75:81:6a:9b:46:b1:1b:6f:
c7:12:5a:5c:d1:c6:44:15:4b:ce:24:30:be:93:d9:e0:dc:46:
9e:62:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:47:26 2024 by rpki-client on console-fra.rpki-client.org