Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TbXVgn3dh-ipubWqnwfVidy1xYc.roa
File: TbXVgn3dh-ipubWqnwfVidy1xYc.roa (raw, json)
Hash identifier: 1tHzUDqUONghdBnqy5/yjI+4VqfAzy0WTkjAKrzPByE=
Subject key identifier: 4D:B5:D5:82:7D:DD:87:E8:A9:B9:B5:AA:9F:07:D5:89:DC:B5:C5:87
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018EEDB32BC841C68134E996CFE0ACBD5031
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TbXVgn3dh-ipubWqnwfVidy1xYc.roa
Signing time: Wed 17 Apr 2024 20:15:26 +0000
ROA not before: Wed 17 Apr 2024 20:15:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 83.147.223.0/24 maxlen: 24
91.186.200.0/22 maxlen: 24
94.241.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ed:b3:2b:c8:41:c6:81:34:e9:96:cf:e0:ac:bd:50:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 17 20:15:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4db5d5827ddd87e8a9b9b5aa9f07d589dcb5c587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:1b:8d:73:10:cf:ae:9c:b9:1f:60:7a:44:
44:f8:64:e3:af:19:2c:92:c1:80:c3:95:70:f7:0b:
4d:50:76:00:39:cb:15:d7:9d:5d:68:29:eb:ea:3f:
8d:83:78:78:8b:c0:24:04:52:04:25:47:3f:99:f5:
cd:16:7b:a3:b9:e5:71:36:06:db:32:8e:d9:4f:7c:
a5:95:b4:68:8e:65:b9:3f:a3:99:1c:cf:a7:a6:a8:
61:0a:34:27:90:c7:af:b9:71:1c:51:9d:3d:16:91:
d1:9c:dd:1a:fe:ad:c4:00:32:c6:1b:ad:87:ae:a6:
19:21:36:2c:e3:d2:0f:a3:73:a0:83:a8:80:02:92:
c9:0f:99:75:76:a0:4f:07:87:20:09:40:fe:3e:d9:
57:2f:b5:22:af:b6:50:9b:aa:22:bd:1f:52:70:6f:
ae:d4:7f:68:7c:69:a7:fa:2e:68:0e:0c:b4:45:da:
e2:63:87:7b:16:55:9b:a4:72:5f:f2:65:c0:1a:2d:
c0:f5:11:d3:3f:2b:8c:6f:9a:13:00:2f:ef:e8:82:
62:31:0d:56:8f:d7:62:42:31:ab:0a:7f:21:93:70:
c8:d2:0a:a8:4b:25:a1:04:2e:a9:d4:b0:f4:49:14:
91:bf:f1:ff:65:4d:ec:a2:05:2e:1a:e9:c2:4a:44:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B5:D5:82:7D:DD:87:E8:A9:B9:B5:AA:9F:07:D5:89:DC:B5:C5:87
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TbXVgn3dh-ipubWqnwfVidy1xYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
91.186.200.0/22
94.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:9b:be:e8:af:23:35:8c:81:91:ee:b3:f3:b4:22:81:25:7f:
16:d6:ef:c2:b2:7d:7b:4e:e2:37:57:c8:d9:91:b9:8c:fb:04:
bf:aa:94:4b:42:c2:eb:63:09:f1:f8:ef:9f:7c:24:21:f5:cb:
a1:ba:9b:6b:c4:4f:be:dc:40:f8:20:5e:e5:c3:21:0b:06:59:
78:dc:c5:fa:32:8b:68:57:0a:1a:3f:29:3f:88:0d:67:d7:38:
61:e2:10:60:14:08:01:0b:91:84:40:0e:50:e4:83:db:8b:cd:
7d:80:62:46:d3:de:77:3f:e4:98:e3:ff:56:2d:b4:5a:89:39:
89:76:0e:af:80:f7:0d:f8:ba:da:15:40:e5:c8:d0:7f:95:f4:
39:ea:65:85:6f:bf:80:84:da:6a:11:3f:dd:60:db:6e:67:22:
e6:61:4a:82:82:37:b4:e8:ef:97:60:51:5b:1a:79:f2:91:1f:
a4:3a:9d:9f:55:d7:ef:ba:3c:69:bc:9e:5d:1d:51:98:8b:0c:
82:9e:d1:53:43:9d:d3:2a:49:c0:74:85:db:03:fa:ca:4f:aa:
1c:21:77:16:2b:dd:56:d9:ba:f8:8f:b9:03:17:40:06:3a:b7:
dd:26:c6:83:2b:99:b0:b5:47:69:18:42:85:7b:22:f4:17:08:
a5:85:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:52:02 2024 by rpki-client on console-ams.rpki-client.org