Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/TRW7bSXs53AVVibi6XEAeN73ZBU.roa
File: TRW7bSXs53AVVibi6XEAeN73ZBU.roa (raw, json)
Hash identifier: Qmo+TAp5hmMqUVoGuh4c+3yoUnrWqpeSDSZx0vrPz3A=
Subject key identifier: 4D:15:BB:6D:25:EC:E7:70:15:56:26:E2:E9:71:00:78:DE:F7:64:15
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 018CC801D411E6D0FEBF49C6237730D1E746
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/TRW7bSXs53AVVibi6XEAeN73ZBU.roa
Signing time: Tue 02 Jan 2024 02:30:12 +0000
ROA not before: Tue 02 Jan 2024 02:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 194.11.135.0/24 maxlen: 24
194.11.134.0/24 maxlen: 24
194.11.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d4:11:e6:d0:fe:bf:49:c6:23:77:30:d1:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d15bb6d25ece770155626e2e9710078def76415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:1f:88:2b:93:18:e4:52:1f:68:f5:77:db:
8a:c6:aa:b8:c6:b5:6d:f1:72:66:8a:c0:0a:c8:3e:
ec:90:92:b6:28:cf:b5:17:27:26:8a:b4:be:5f:4f:
a8:9f:6c:0f:2c:61:33:e6:26:a3:3d:6d:f1:42:78:
08:5f:5f:71:e8:80:aa:68:95:90:08:7d:d6:e5:8b:
9f:ad:ad:a4:85:88:6b:fc:5e:8e:92:3b:10:05:43:
06:6c:f3:9a:ce:f7:bc:40:70:ad:c9:2a:4b:0a:b6:
94:53:52:44:c4:00:0c:fa:7a:39:79:c7:83:f8:33:
d6:fa:7c:30:ad:2d:4d:ae:68:74:c3:59:9c:15:bd:
cc:d2:a1:6c:f2:a1:72:96:8c:e1:bd:f7:ff:3b:f4:
35:87:df:96:81:03:e9:68:25:88:9f:93:51:b8:ed:
fc:43:2b:04:be:ec:10:cb:e1:a2:bd:14:04:b0:f0:
c9:71:22:33:9d:a6:9a:20:05:4f:36:f0:c1:65:6f:
a6:63:09:48:fa:eb:dc:12:bb:bc:cb:65:64:0c:11:
d3:28:89:2a:2a:66:e9:d6:36:ab:15:bc:64:e8:4e:
de:22:93:46:57:28:68:a4:c5:5b:1c:cb:cd:58:50:
ae:09:09:24:6f:20:25:07:16:5c:6f:65:46:69:cf:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:BB:6D:25:EC:E7:70:15:56:26:E2:E9:71:00:78:DE:F7:64:15
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/TRW7bSXs53AVVibi6XEAeN73ZBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.133.0-194.11.135.255
Signature Algorithm: sha256WithRSAEncryption
09:c3:15:ba:96:5f:91:90:c8:e6:7f:18:02:d4:13:ac:2b:69:
5f:f8:63:ce:32:2c:15:2d:a3:1e:03:9b:a5:41:cb:94:22:43:
93:fa:de:a7:c4:97:ad:d0:22:46:c1:dc:99:6c:67:d8:1e:be:
6f:64:76:f4:36:6b:f8:d1:a6:37:3a:ec:23:eb:8c:86:54:1f:
24:11:93:7b:f0:6b:c9:6c:d3:5f:da:1b:51:2c:78:30:d7:68:
b7:ce:af:e3:cc:eb:c2:63:68:75:cc:84:88:7d:df:8a:a2:67:
d6:c4:93:10:75:64:71:97:ba:92:41:87:e3:d5:00:12:92:65:
81:60:7e:07:b1:26:df:c7:26:06:4f:33:db:e5:78:6f:ce:e0:
2a:ee:dd:1e:fb:f0:2f:ba:c4:33:c6:5a:ac:a9:60:6d:6d:6c:
2b:47:e4:ff:86:68:27:e2:cf:d4:80:f1:39:57:84:de:b8:41:
82:10:51:31:a4:48:ba:ed:72:c3:24:07:30:60:25:80:af:b0:
80:5e:75:39:e1:95:41:f9:67:02:34:71:32:2f:34:6c:c3:25:
0e:7a:51:35:65:f6:3d:28:3f:3a:1d:9b:07:d8:8b:3d:f1:58:
73:65:41:41:00:27:20:f8:51:70:1b:f5:45:62:58:f3:92:d3:
7a:f9:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 13:08:42 2024 by rpki-client on console-ams.rpki-client.org