Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/Tp8KW5gh2iEHc9ZgMony88P7fHw.roa
File: Tp8KW5gh2iEHc9ZgMony88P7fHw.roa (raw, json)
Hash identifier: vMyTC4HC8fdQ8QbxEAsoXp97zEjegsvvZmnOj9hHUOw=
Subject key identifier: 4E:9F:0A:5B:98:21:DA:21:07:73:D6:60:32:89:F2:F3:C3:FB:7C:7C
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 018CC94BDCF39FAF1B117DFF4BE36614D9FF
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/Tp8KW5gh2iEHc9ZgMony88P7fHw.roa
Signing time: Tue 02 Jan 2024 08:30:41 +0000
ROA not before: Tue 02 Jan 2024 08:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49058
IP address blocks: 95.131.176.0/21 maxlen: 32
185.25.9.0/24 maxlen: 32
185.25.10.0/23 maxlen: 32
2a00:7b60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:dc:f3:9f:af:1b:11:7d:ff:4b:e3:66:14:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Jan 2 08:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e9f0a5b9821da210773d6603289f2f3c3fb7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:45:30:39:9a:3e:08:9d:49:d6:f8:51:d6:
20:ca:41:2b:03:bb:5a:e0:60:14:99:ff:95:a8:57:
59:79:cd:01:ed:d1:8d:65:cc:f5:86:d4:1f:9e:78:
b9:4a:d2:00:42:13:32:49:a8:e6:22:c0:a0:d5:86:
b7:6c:3c:1c:a9:ef:64:8c:0a:81:48:bd:2c:72:43:
3c:4c:be:c8:d9:cf:73:3e:b0:fb:07:df:9c:c4:f6:
54:c2:dd:e1:51:ad:36:c1:4a:ab:f0:e8:e6:77:f2:
31:f9:5a:77:12:5d:7d:82:0d:96:ac:68:83:52:e7:
d3:67:38:60:70:03:cc:99:1e:2b:e2:dd:c7:0b:5a:
81:55:0a:0a:65:c4:2d:10:80:e0:61:ec:34:3d:99:
5d:bd:01:25:b6:5e:48:8a:9c:09:61:25:8b:da:ba:
c8:a4:aa:20:0e:83:f1:f9:6b:a1:cc:2e:39:e8:73:
17:c1:1f:e7:08:c6:34:90:7c:19:e7:e3:ce:39:4c:
05:83:f3:07:ed:b6:99:a4:58:f3:17:65:82:74:5b:
f8:d4:d0:11:be:a2:52:12:85:0f:dd:a0:e9:bb:bd:
89:c6:72:70:f9:7c:0e:1e:13:36:ac:ae:21:82:7f:
56:fd:b0:6f:93:35:20:a5:97:43:59:8b:4c:be:a4:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:0A:5B:98:21:DA:21:07:73:D6:60:32:89:F2:F3:C3:FB:7C:7C
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/Tp8KW5gh2iEHc9ZgMony88P7fHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.176.0/21
185.25.9.0-185.25.11.255
IPv6:
2a00:7b60::/32
Signature Algorithm: sha256WithRSAEncryption
9e:98:80:5c:13:6b:8b:78:47:d5:c5:9f:4a:37:f8:ce:a9:26:
92:80:0a:c1:b7:86:35:ec:fa:17:bf:8c:ce:f4:e1:fb:d2:0c:
d5:2d:80:91:96:7d:84:7e:b4:2a:22:e6:8a:54:3d:75:7e:e6:
fb:5a:92:b4:b5:97:42:ab:02:b3:29:11:b8:c5:ca:57:2d:8d:
f5:69:69:55:e3:25:32:2e:75:32:35:89:dc:21:93:ec:e5:c5:
b6:18:28:c6:ad:9a:12:40:cb:e8:af:3c:0a:bd:36:3a:14:eb:
6a:b5:b4:c0:76:1a:9c:47:8a:52:6c:b4:76:20:d7:e1:a5:87:
8d:20:4d:37:37:dd:fb:60:77:34:97:6d:b5:11:74:fe:54:89:
b1:0e:2b:f7:c4:59:b7:ef:40:b6:07:2c:e3:d9:e7:7c:d3:3d:
ad:50:85:fb:46:6a:81:b2:7a:41:03:48:57:f1:40:2c:46:a8:
a6:17:bc:e9:b3:e8:7e:2d:c2:f9:2e:92:60:38:66:79:a5:a9:
8c:86:9e:b4:3d:d2:76:19:a3:5c:59:5d:5c:ec:e7:ec:72:f8:
4b:05:1a:a4:3b:da:62:b8:9b:ca:25:53:57:b4:55:7f:8b:73:
06:16:0e:2a:1c:f7:14:1d:24:51:25:e0:d2:0b:45:9e:7f:04:
1c:7d:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:00:24 2024 by rpki-client on console-ams.rpki-client.org