Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/tsepD9MKTsp_KSuvlPU5srPLMmM.roa
File: tsepD9MKTsp_KSuvlPU5srPLMmM.roa (raw, json)
Hash identifier: mZ6iOt+XS5Qo/ariUbz5YwzZU82lzg1VifymDQeVq6A=
Subject key identifier: B6:C7:A9:0F:D3:0A:4E:CA:7F:29:2B:AF:94:F5:39:B2:B3:CB:32:63
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 018CC9BCF5C3575D501B369535191DF82080
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/tsepD9MKTsp_KSuvlPU5srPLMmM.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2872
IP address blocks: 185.152.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f5:c3:57:5d:50:1b:36:95:35:19:1d:f8:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c7a90fd30a4eca7f292baf94f539b2b3cb3263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:37:0b:1f:88:76:54:dc:23:07:60:b1:1c:
9a:85:b8:66:84:09:b4:2e:0a:4e:1b:0f:64:98:bb:
44:1d:32:ae:13:81:38:4e:e4:ae:21:c3:3f:dc:82:
92:03:c0:d7:dc:d9:b8:e8:77:00:ee:dd:59:ef:ea:
b3:ec:84:be:6d:88:51:8a:ee:39:1d:8f:bd:36:ac:
79:78:53:8b:82:f8:e7:7f:76:09:a2:b7:d6:0b:33:
c0:97:df:f4:25:15:1f:35:9b:e8:ab:86:fb:a7:31:
a1:04:75:9d:cb:25:74:d0:66:39:d6:c0:08:d5:64:
0b:f0:cf:38:6d:e0:a1:b0:cd:42:8b:5d:0c:6e:92:
a6:fb:19:1a:72:36:c4:8b:4c:cd:fb:1b:b4:8e:61:
09:e0:e2:da:c2:16:69:0f:7b:42:62:69:7f:32:fc:
3e:65:db:2b:8e:22:55:ae:5c:a7:fe:cd:78:7f:3c:
c6:d9:25:b4:37:df:af:0f:08:e9:44:37:39:ba:60:
6a:d8:5d:95:dc:73:f6:07:8a:a9:79:7a:0a:a7:41:
02:51:37:c5:0b:ac:80:53:eb:37:bb:61:dd:6c:cb:
cd:0e:9d:9f:a5:cd:36:22:98:99:86:c6:8d:7e:2c:
5c:b4:df:52:86:f9:71:4d:0d:14:8d:94:0a:ae:6b:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C7:A9:0F:D3:0A:4E:CA:7F:29:2B:AF:94:F5:39:B2:B3:CB:32:63
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/tsepD9MKTsp_KSuvlPU5srPLMmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.90.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d8:f1:ad:b9:9c:5d:c0:68:0c:15:31:6e:0e:48:55:91:b2:
f6:fd:61:f4:27:fd:35:4d:4c:8e:95:b5:c0:9a:b5:8c:d9:04:
a8:d7:ed:a6:16:8a:e2:5d:2e:14:31:f0:23:49:9b:a8:85:1f:
12:7f:97:26:b8:ff:80:82:8d:de:18:59:51:4a:5d:de:a9:7e:
3c:05:a2:b0:60:eb:41:1e:c1:44:30:44:ca:6b:01:65:c0:5f:
97:a0:dc:c1:9a:65:d8:86:a2:97:d2:20:19:f6:73:f5:de:99:
7c:ab:45:eb:39:99:a4:54:3b:b7:36:94:fb:d7:b0:cc:ef:49:
12:ff:d0:06:f6:25:0f:b0:d7:26:6d:84:98:a2:52:1b:54:c3:
43:f9:07:8b:ef:f9:c8:0d:9e:25:f4:d7:ae:ca:88:34:95:c5:
ee:50:ef:78:76:9a:c4:42:57:af:b4:da:63:1e:31:79:09:6e:
99:2b:c4:1d:85:eb:b8:66:cd:6a:9a:61:57:fd:42:7f:4d:50:
84:8e:7b:03:7f:4c:fd:d1:55:bb:1b:25:43:16:ed:61:ef:0e:
d7:45:de:a1:57:8a:17:d2:a0:9c:49:76:79:97:34:95:84:91:
33:39:6b:bf:0b:de:46:2d:7e:51:6d:69:04:31:4e:0c:1f:55:
08:3a:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:37 2024 by rpki-client on console-ams.rpki-client.org