Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/ta6DvlgWVpJ5f5HkzjJIoxe0ts8.roa
File: ta6DvlgWVpJ5f5HkzjJIoxe0ts8.roa (raw, json)
Hash identifier: 2OnQ/FOT4VR46AoR+5TmYChEu2dKbDXCfvMuAjRieZg=
Subject key identifier: B5:AE:83:BE:58:16:56:92:79:7F:91:E4:CE:32:48:A3:17:B4:B6:CF
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 019362AAEFF5E09FF07D218997F312CD150D
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/ta6DvlgWVpJ5f5HkzjJIoxe0ts8.roa
Signing time: Mon 25 Nov 2024 09:33:09 +0000
ROA not before: Mon 25 Nov 2024 09:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47461
IP address blocks: 195.242.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:aa:ef:f5:e0:9f:f0:7d:21:89:97:f3:12:cd:15:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Nov 25 09:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5ae83be58165692797f91e4ce3248a317b4b6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:8f:ce:e3:88:dc:61:47:ca:3a:d7:c8:80:
f2:65:11:99:8b:a4:07:d6:d5:ca:fb:6d:fd:27:a6:
a1:f1:3d:d9:ce:4c:b5:90:4e:d5:7d:39:bc:71:34:
d4:41:86:f7:36:4f:36:b0:78:03:74:bc:52:5d:05:
0f:a2:1d:30:e7:ae:38:4e:15:85:32:94:04:c8:74:
81:a7:ae:eb:73:fa:88:7f:c3:46:59:39:f7:20:d0:
96:22:19:69:a4:67:e7:24:78:c1:e2:62:28:2a:5c:
4c:2f:e6:cf:03:f4:df:e5:e4:ba:11:bc:0a:fd:87:
ae:5f:8b:04:81:b7:c9:6a:7e:a3:2c:7c:e9:d5:da:
d4:41:5d:0d:fb:cb:b0:48:29:8d:cc:f9:a0:c4:a2:
27:94:64:4a:00:80:22:14:b2:68:13:60:e5:22:ea:
b3:2d:58:f2:4d:15:86:81:28:f5:20:c0:35:6e:64:
0b:dd:33:b7:22:1e:94:8b:1b:0c:c5:79:5a:85:5f:
1e:63:46:03:a2:f0:75:3a:5d:b9:77:84:62:a4:1b:
83:80:89:81:a8:14:10:de:f0:cb:a3:42:a8:72:03:
1d:cf:b2:4a:ce:f5:68:b7:b5:10:ef:42:36:5a:8a:
2f:ca:c5:28:1a:0d:29:3a:b9:1c:b4:ad:92:ab:ed:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AE:83:BE:58:16:56:92:79:7F:91:E4:CE:32:48:A3:17:B4:B6:CF
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/ta6DvlgWVpJ5f5HkzjJIoxe0ts8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.174.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1e:6a:d2:fa:4c:64:13:b9:cf:e4:54:28:b8:3a:8a:df:23:
88:a3:b3:8f:b6:f9:c7:a2:b1:d3:2e:ec:62:7f:ea:26:d6:dc:
85:48:66:d2:be:4e:a4:61:42:17:bc:aa:75:57:34:70:7a:a4:
07:2a:57:6a:37:7b:f6:e5:e4:4f:fc:2d:42:09:a5:71:06:9d:
62:a4:21:44:36:ce:f4:b4:80:01:d1:c6:44:16:78:08:d2:07:
00:07:e8:e5:8a:35:a5:9b:cb:39:98:58:25:b3:58:1e:5d:cf:
46:75:bd:8d:65:14:63:ef:9b:4a:78:d3:50:2d:89:29:a1:44:
41:0f:5e:29:02:2e:92:8c:ad:7a:f0:28:24:cc:e7:d3:bd:a4:
81:31:fb:70:4c:c9:6c:a9:7b:02:e7:7a:49:5f:e8:4f:cb:cf:
4e:86:1c:12:bf:f1:aa:25:74:8f:a9:e4:bb:23:71:ad:19:b5:
3c:ca:42:1f:dd:2c:28:20:6f:b9:a5:9d:5e:0e:2f:85:55:c4:
77:c3:9f:8a:e5:07:86:be:c2:a5:57:51:3a:f8:a4:2b:bf:a6:
78:fc:c7:ff:b0:7b:cb:7d:1e:d5:e1:0e:4a:2b:b7:58:c7:85:
5f:17:80:b7:6f:3f:b5:86:88:fd:48:ca:b5:b7:c4:65:02:4c:
0a:8d:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:07 2024 by rpki-client on console-fra.rpki-client.org