Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/tkPZk0rceAUBuZp_nYEqemUyJVU.roa
File: tkPZk0rceAUBuZp_nYEqemUyJVU.roa (raw, json)
Hash identifier: mR0B52rtSG4GBVFXRlPhStPXwXZpf/GvxIN46OZi+1Q=
Subject key identifier: B6:43:D9:93:4A:DC:78:05:01:B9:9A:7F:9D:81:2A:7A:65:32:25:55
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F8EAF0484E93AA74E0CED72752C19
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/tkPZk0rceAUBuZp_nYEqemUyJVU.roa
Signing time: Tue 02 Jan 2024 04:30:03 +0000
ROA not before: Tue 02 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35108
IP address blocks: 80.233.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8e:af:04:84:e9:3a:a7:4e:0c:ed:72:75:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b643d9934adc780501b99a7f9d812a7a65322555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:fd:78:70:12:e7:76:9a:0a:fe:47:7c:40:
52:a5:da:3a:1f:59:a0:25:6d:fb:94:27:dd:eb:43:
be:a6:7d:27:7c:21:90:2d:78:9e:16:9d:e2:52:5b:
cd:fa:d3:a0:6c:7c:5b:49:0e:de:5e:ac:35:26:7f:
a9:fb:ef:a2:d0:07:57:22:47:6c:30:19:89:81:15:
55:93:84:9c:e8:73:e0:61:7e:05:6e:3f:bd:fb:c3:
64:eb:38:c9:0d:92:a2:85:c3:6f:ba:f3:a3:8c:7f:
1e:6a:01:05:d1:df:1d:55:af:a8:af:bb:1e:46:c9:
39:09:6d:08:c2:21:84:45:62:df:6a:0b:d8:6c:80:
ba:ee:04:ce:12:13:0b:4f:39:6c:2d:17:fc:fc:e3:
bd:f5:28:57:18:c2:96:67:bf:0d:2e:22:5a:c5:34:
98:b3:9c:54:0e:2b:d4:79:dc:73:30:82:1d:ee:fc:
e0:55:27:20:b7:ca:fa:0f:b0:1c:8d:8a:77:22:c6:
83:24:69:01:ce:1e:e4:ed:9e:35:40:b7:2d:6e:d9:
df:d6:f6:26:81:b1:1b:8e:2e:02:bc:e2:e6:a0:ce:
f7:8d:5d:e7:79:8c:eb:ad:a6:0f:4a:94:6d:0f:50:
5b:d2:a6:62:bd:b0:65:2d:4b:69:85:34:bf:85:b3:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:43:D9:93:4A:DC:78:05:01:B9:9A:7F:9D:81:2A:7A:65:32:25:55
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/tkPZk0rceAUBuZp_nYEqemUyJVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.156.0/22
Signature Algorithm: sha256WithRSAEncryption
53:25:82:05:47:dc:90:39:01:bb:e0:e3:21:15:8e:e8:58:2a:
dd:82:18:2b:65:4c:33:53:d5:08:9f:ce:c2:81:6b:10:93:29:
ba:d1:f3:86:32:84:dd:d0:3a:19:1c:58:6c:d7:3a:76:2d:86:
26:d6:5c:19:ca:35:9a:d3:84:af:3e:e3:3c:c0:ac:8c:d2:fa:
00:c6:5d:6b:38:e6:84:fe:f5:56:ae:67:19:73:76:86:f0:ae:
1d:2b:ea:73:3d:bf:fb:9b:88:5a:af:96:38:6a:70:af:a3:68:
2f:4b:76:48:89:ae:ac:7d:32:d0:63:93:51:2b:ec:a1:e7:31:
45:a1:42:a1:4a:68:06:b0:18:85:e3:65:0d:05:99:52:87:93:
4f:4a:ab:57:23:e3:5c:d1:bd:6f:82:67:89:6c:47:b8:8f:a6:
71:08:75:e9:62:bb:68:ba:1a:22:db:9c:ed:80:34:cd:b2:b2:
a7:95:0b:50:e0:7b:4a:99:ce:0b:df:a7:38:c4:f0:5b:29:3d:
a3:68:08:b1:29:a5:1a:08:22:3a:1f:65:4f:07:21:98:14:b2:
76:38:ee:09:a1:be:53:4b:4c:e6:20:37:77:78:07:6e:8e:cb:
63:cf:53:98:71:19:63:22:6e:6e:9c:00:2d:66:b9:46:6a:50:
4a:d8:7e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:50 2024 by rpki-client on console-ams.rpki-client.org