Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/TFl3O7fx5qaWspDmY4NB-a0cxmI.roa
File: TFl3O7fx5qaWspDmY4NB-a0cxmI.roa (raw, json)
Hash identifier: tJZhG0jtCAeq5dITwYbWmwvOR8e9FcvddroH9yBEYpI=
Subject key identifier: 4C:59:77:3B:B7:F1:E6:A6:96:B2:90:E6:63:83:41:F9:AD:1C:C6:62
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 018CC9BCCE439361B6C502A71E3AC953DF61
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/TFl3O7fx5qaWspDmY4NB-a0cxmI.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ce:43:93:61:b6:c5:02:a7:1e:3a:c9:53:df:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c59773bb7f1e6a696b290e6638341f9ad1cc662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:0a:3f:a6:0b:aa:5e:6f:9b:49:f6:d9:67:
fa:ec:d6:39:6f:96:55:71:cf:00:41:0a:15:f4:69:
4b:4b:0d:48:03:83:b9:dd:aa:0e:57:bf:b5:85:21:
bd:6a:ed:80:4f:89:16:de:30:68:8c:52:b0:cd:8c:
c8:8f:a7:08:36:84:65:2c:cf:b6:d9:1a:79:3d:0e:
d2:d3:21:04:d4:24:71:b8:d2:88:6e:a7:d1:50:b9:
84:0e:74:e4:84:74:23:1c:93:f2:cd:e6:fa:2c:67:
0e:f6:9c:82:f1:e8:2f:c1:41:c2:7f:71:d2:73:e3:
65:32:aa:cf:b1:4f:eb:d7:f4:24:76:dc:5c:4a:7c:
b5:aa:93:43:85:06:aa:c3:dc:ff:18:ee:3c:3b:75:
9b:a1:5d:3c:e5:05:96:4f:51:6b:f7:04:30:b7:5f:
64:75:ff:d3:7b:f6:11:e5:fe:36:68:69:c7:14:6f:
f3:70:ca:c4:59:9f:e3:3f:b1:3c:99:f6:b2:81:a7:
cb:4d:70:e3:13:d9:63:cf:e3:4e:0c:e5:fe:ac:c7:
3f:4a:df:cd:6c:44:b6:ac:22:8d:58:38:aa:e7:1c:
20:d2:c4:88:3a:b2:0c:1a:39:6a:86:a4:ac:5e:66:
29:11:70:42:1a:f2:a2:71:4f:b8:99:ae:3f:b9:f1:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:77:3B:B7:F1:E6:A6:96:B2:90:E6:63:83:41:F9:AD:1C:C6:62
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/TFl3O7fx5qaWspDmY4NB-a0cxmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.102.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c6:a5:d3:c9:3c:6e:6f:4f:62:de:e8:60:d1:ed:bd:00:5d:
67:99:32:84:a0:43:79:d3:45:03:a9:8e:1b:d8:09:79:89:5e:
35:82:49:f0:db:40:f8:59:4f:9a:b1:a0:c7:59:9a:47:a6:a3:
73:f3:b5:3f:01:1e:53:6a:17:c9:56:b4:36:f3:f4:67:55:96:
ea:ee:36:c9:1b:4b:8b:02:20:b3:fa:11:e2:a0:71:05:79:9c:
9e:43:89:3a:0f:0d:b2:67:39:b5:c5:7b:83:74:66:a3:f1:26:
39:38:91:ec:6b:6a:cc:b5:d8:9c:22:93:8c:43:ec:31:e2:8e:
68:5f:e1:ad:fc:32:d3:49:35:20:ff:a7:8f:4e:d8:b5:1c:09:
70:b6:17:09:cf:9e:d6:f1:f6:37:4a:79:c3:5d:2a:0e:55:58:
3e:0d:23:92:59:ad:41:a3:c7:a2:be:a2:c3:72:82:b7:b6:cc:
76:8b:df:b9:f4:96:6f:1a:c1:2f:8a:1a:c3:34:d7:36:54:c8:
47:09:ed:3d:ba:9d:60:d3:07:0e:90:fa:b1:72:cf:fe:d6:c4:
71:f4:f5:dd:90:b7:ac:8a:fe:e5:57:de:28:92:e5:07:16:cd:
d5:96:6d:46:0d:8b:35:9f:16:54:3f:2e:09:36:7d:4a:8b:3e:
f0:3a:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:56:29 2024 by rpki-client on console-fra.rpki-client.org