Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TZcyF6c9Lu-UqaEFksthbdhyG9A.roa
File: TZcyF6c9Lu-UqaEFksthbdhyG9A.roa (raw, json)
Hash identifier: SsQDuUqTgrHAKDhsDNXi9EsqJS0xQQWvC1/ces+5ubw=
Subject key identifier: 4D:97:32:17:A7:3D:2E:EF:94:A9:A1:05:92:CB:61:6D:D8:72:1B:D0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5011C6CD283BCA505FAE80E88A41D62
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TZcyF6c9Lu-UqaEFksthbdhyG9A.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138687
IP address blocks: 185.255.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1c:6c:d2:83:bc:a5:05:fa:e8:0e:88:a4:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d973217a73d2eef94a9a10592cb616dd8721bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:40:50:bc:fb:eb:bc:67:44:a9:2e:5f:71:06:
5b:10:b6:66:31:7f:43:15:30:64:9d:5e:6e:84:d4:
56:53:64:e1:a2:1d:47:a9:5f:11:f8:aa:1c:03:f2:
ea:ab:a8:e0:c7:62:31:e4:7f:99:95:5d:64:2b:2b:
20:d7:77:f8:e7:45:90:07:46:5d:21:3f:76:8d:36:
78:8b:41:5e:89:b9:b9:b6:2f:88:23:23:59:13:2f:
56:01:7a:8b:05:a3:ce:d0:0c:10:c8:a1:6f:fa:f1:
32:f9:7f:72:1b:eb:03:38:81:a9:8a:19:a6:3b:3b:
71:5d:97:9a:56:68:d0:0e:dc:ef:52:bb:5c:f2:a6:
03:93:95:f4:42:ff:7d:44:61:4a:ee:82:76:a6:a3:
ea:fe:ea:dd:bd:54:45:08:9d:e5:41:97:57:ff:a4:
2e:b4:aa:fd:14:d4:62:8a:51:4a:16:da:9f:3b:1c:
ef:91:66:d7:f2:b8:6b:fc:40:c1:b6:20:fa:f4:5c:
c7:85:0e:49:30:a5:b3:2c:18:50:59:4f:be:08:7f:
78:4b:12:38:d7:a5:72:5e:27:0e:c9:4e:48:25:06:
7a:9c:be:3a:d3:67:4d:57:9f:b6:28:bf:51:40:f1:
9f:74:55:d6:39:22:cc:9b:ce:c8:20:12:64:1a:9e:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:32:17:A7:3D:2E:EF:94:A9:A1:05:92:CB:61:6D:D8:72:1B:D0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TZcyF6c9Lu-UqaEFksthbdhyG9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.171.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:4f:a2:a5:63:09:5a:1b:96:a4:25:35:ee:68:39:1b:5c:
6b:3f:b7:7b:f5:73:ff:a3:21:a3:4f:de:0a:02:62:f7:d6:c0:
4c:ee:23:f6:83:ba:f5:04:7f:fa:00:ae:f2:bd:41:cd:dc:73:
9a:8b:f2:6f:41:1a:4c:5b:62:1c:06:39:d6:4d:5f:6e:6d:98:
92:56:8d:89:fd:1c:91:d4:d9:1d:a7:81:34:93:5d:a7:72:38:
37:f3:80:5b:44:3f:5b:db:55:5d:18:a4:c6:99:62:5c:ba:82:
6e:cd:eb:9f:ac:18:d6:80:39:fd:00:77:2f:67:e3:45:15:c0:
e6:ae:04:5b:90:44:90:b1:b7:6d:88:e9:99:f7:cd:38:22:2d:
47:2d:63:12:2a:a7:64:60:1e:81:23:a3:97:a1:a4:5d:84:40:
39:3c:45:ac:73:f0:a5:17:7a:23:6c:04:ee:2b:36:56:84:9b:
45:32:15:02:be:1b:e7:68:7f:2d:b5:47:92:e3:08:59:1a:87:
8b:7c:d4:03:9a:cf:03:0a:6a:c0:39:e2:b3:fe:5b:99:cd:e2:
38:4c:44:84:2c:c7:58:24:0a:a2:2a:bf:cc:64:c6:5c:6b:4b:
a4:4f:e3:4e:04:63:d1:95:94:22:82:87:c4:c4:c7:e4:d3:79:
05:58:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:51:20 2024 by rpki-client on console-ams.rpki-client.org