Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TtrSImwzr53ibiUR1wURgsY7bds.roa
File: TtrSImwzr53ibiUR1wURgsY7bds.roa (raw, json)
Hash identifier: Ui1r+9RbxjuSO/HFKMBYKD8XKV8PfGwRytwXFgFOzVI=
Subject key identifier: 4E:DA:D2:22:6C:33:AF:9D:E2:6E:25:11:D7:05:11:82:C6:3B:6D:DB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50132D0D8EC0D9C9C4579EAB8CB84AF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TtrSImwzr53ibiUR1wURgsY7bds.roa
Signing time: Mon 01 Jan 2024 12:30:39 +0000
ROA not before: Mon 01 Jan 2024 12:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400377
IP address blocks: 93.114.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:32:d0:d8:ec:0d:9c:9c:45:79:ea:b8:cb:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4edad2226c33af9de26e2511d7051182c63b6ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:ba:5b:75:00:36:de:97:2c:85:99:91:c7:
85:b5:7e:78:ed:cb:bf:84:4c:6c:91:7f:3f:65:be:
5b:b7:63:71:9c:c7:90:aa:a1:df:71:71:f0:e1:29:
da:4f:99:5e:e1:5a:40:36:65:77:d0:a7:bf:9d:10:
8a:71:7b:71:88:08:a4:40:dc:16:c4:c0:f2:2c:49:
3f:e3:6b:f7:c2:9c:f6:4f:78:86:56:a5:05:3b:f4:
a6:89:a6:c5:54:a7:f2:3a:32:2a:7f:16:0a:c4:23:
6c:c7:b5:22:a1:94:8f:f6:7f:0d:cb:61:ac:16:c7:
04:a9:c9:14:5c:0c:dc:91:a9:72:1e:63:e7:8f:1f:
87:59:d1:50:6a:8f:93:2f:0e:46:b8:5e:0c:80:ab:
86:14:23:65:87:8c:53:99:bd:0d:e4:a2:65:f6:3c:
d2:24:5f:d4:d6:e6:f5:59:07:46:bf:fc:e4:eb:d8:
00:8e:13:08:a7:92:04:4f:d0:4d:79:2f:6c:80:d1:
91:01:d4:25:a9:7d:33:2f:39:12:09:00:2b:4a:33:
35:66:7b:f7:1d:84:a7:d6:22:c4:d1:0c:e3:93:a3:
8f:91:5b:04:3a:c4:49:d4:e5:11:97:bf:e2:25:c7:
bc:81:57:28:36:97:96:02:3b:69:5b:72:be:59:e5:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DA:D2:22:6C:33:AF:9D:E2:6E:25:11:D7:05:11:82:C6:3B:6D:DB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TtrSImwzr53ibiUR1wURgsY7bds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
Signature Algorithm: sha256WithRSAEncryption
69:55:4c:a1:e2:ce:18:e6:45:0c:ec:03:77:dc:8b:c0:ea:51:
ae:db:b4:28:5b:58:ca:1d:26:c0:55:8c:0b:11:89:00:bf:b2:
98:b4:15:4e:f1:d5:03:f9:25:85:aa:7e:79:d1:29:7b:6e:40:
85:29:5b:25:0f:20:e0:b1:31:dd:95:6b:ad:07:56:40:39:82:
6b:fc:7a:a4:c2:bc:4c:e4:87:6c:39:5a:ae:fe:04:eb:82:5c:
e7:df:f3:4a:1c:ba:08:32:97:15:ed:82:f0:86:21:59:5b:c4:
15:f6:c3:11:4f:d3:ca:d9:2b:ee:be:8a:ab:e7:43:42:07:04:
0e:41:37:1f:82:c0:a5:ea:62:8b:75:a9:30:ab:11:01:b8:0a:
e1:8a:df:98:39:46:e4:f7:c9:6e:20:3b:a7:5e:9e:27:2e:b7:
41:43:d0:c6:2c:52:51:04:d9:bc:ed:b2:5e:8a:a9:2c:dd:8d:
bc:e1:0a:3c:35:8f:75:17:e3:f2:44:12:d3:ad:94:ee:c5:eb:
e9:55:a7:45:68:db:0d:14:01:53:85:c1:ea:65:b5:09:a1:98:
e3:6e:0e:48:06:02:55:95:d1:2d:3c:e8:c6:2d:a4:63:c5:1e:
37:7b:8d:75:42:0a:70:96:86:d1:8d:62:1c:e8:99:dc:cb:48:
b7:48:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:53:50 2024 by rpki-client on console-fra.rpki-client.org