Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/txB_3VuwneTlxsCsW4mbMKcmCS8.roa
File: txB_3VuwneTlxsCsW4mbMKcmCS8.roa (raw, json)
Hash identifier: Fuy1Cbr1CulAra6nt/b/3mNRL7cZQXdjCID7/OfsaAg=
Subject key identifier: B7:10:7F:DD:5B:B0:9D:E4:E5:C6:C0:AC:5B:89:9B:30:A7:26:09:2F
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019170063C48E38219C1EF3FCA58DA58325E
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/txB_3VuwneTlxsCsW4mbMKcmCS8.roa
Signing time: Tue 20 Aug 2024 13:42:22 +0000
ROA not before: Tue 20 Aug 2024 13:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 193.57.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:06:3c:48:e3:82:19:c1:ef:3f:ca:58:da:58:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Aug 20 13:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7107fdd5bb09de4e5c6c0ac5b899b30a726092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:d6:19:0d:1d:55:24:16:1d:15:12:46:16:
a9:03:fe:4c:19:b3:1b:30:01:b9:51:f0:30:34:36:
10:99:bf:de:ef:01:86:96:e0:24:0b:83:dd:c7:9f:
c6:e6:67:82:23:dc:b4:a7:16:86:7d:3d:39:eb:5b:
d7:97:6b:6a:a5:17:86:82:9f:38:54:76:ba:1a:de:
7a:dc:fb:6e:db:ca:99:9c:25:91:97:68:20:c2:4c:
18:d2:3e:b1:6b:65:8a:be:93:69:cc:6e:4a:cf:15:
cc:b2:38:7c:92:af:85:9f:34:37:35:88:7a:93:0d:
54:97:1e:88:46:ce:83:9d:9d:3e:16:ea:a2:fd:40:
7d:cd:f4:8b:e3:62:09:ad:3f:57:55:91:ab:08:c5:
02:bf:ec:84:78:bc:7a:c8:43:3f:5d:49:9f:11:77:
70:11:5f:15:a2:09:fd:be:bb:fe:e1:4a:fe:88:8f:
c0:5e:9c:cf:81:b5:89:7c:02:5b:22:90:8a:db:c1:
4a:ab:ea:9d:e5:e9:e3:50:f6:4a:2f:f6:ab:95:96:
89:02:c7:74:49:5e:be:e3:03:4f:e4:6e:78:e8:f0:
2d:70:98:ee:60:5a:7f:71:fc:f7:03:8c:e2:04:5f:
df:f6:83:87:c4:84:d0:4d:31:b4:67:96:a1:fb:d9:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:7F:DD:5B:B0:9D:E4:E5:C6:C0:AC:5B:89:9B:30:A7:26:09:2F
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/txB_3VuwneTlxsCsW4mbMKcmCS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:08:20:f4:56:36:1e:d8:20:69:43:ad:50:02:db:19:fc:a1:
12:f0:82:93:e5:68:2b:2b:5f:b6:34:6f:9a:8b:f5:07:20:e2:
ce:87:94:e5:e3:28:45:d8:cf:57:c8:dc:4e:ee:fc:e4:86:2f:
95:04:b8:48:a4:02:0c:13:45:c2:97:35:38:2a:9d:e0:dd:86:
1b:09:92:ce:b7:16:de:09:dc:81:4a:c4:de:09:4f:8b:be:93:
61:a9:e1:ce:29:20:66:8e:60:4e:a3:bf:84:43:1a:95:79:ee:
38:1d:33:86:d1:07:36:b5:e0:ad:6c:b5:8b:5d:86:7d:15:3b:
65:57:36:b6:97:50:bd:4c:c8:0d:17:40:0f:23:13:cc:55:57:
ad:65:24:12:9d:02:ac:ec:49:ac:74:e4:7c:aa:13:f4:aa:98:
d0:cd:c0:7f:3b:cf:be:7e:74:83:c2:63:56:5f:cc:a6:e5:59:
69:cf:c7:b1:25:f4:49:56:37:09:d8:a5:5b:7c:62:4f:fc:03:
5f:4b:3e:64:5e:68:ac:40:02:fe:14:3a:42:a9:c8:8b:55:94:
e6:cb:60:55:90:0d:e4:43:12:16:ed:57:1f:71:0b:f7:a9:69:
c1:45:53:2f:a1:b1:a4:16:98:fb:c8:cf:fd:1a:3b:bc:d2:73:
48:76:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:39:37 2024 by rpki-client on console-fra.rpki-client.org