Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa
File: T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa (raw, json)
Hash identifier: /oHOsdpnzW+6yl6Iyhw0FrtqLePinPfRTOxyM6cnHlE=
Subject key identifier: 4F:86:02:08:C2:92:94:D1:1A:09:DA:FA:03:24:AA:AD:1A:D7:D7:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192D723BF0A325F6BB477601D79B7615FEF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa
Signing time: Tue 29 Oct 2024 07:18:17 +0000
ROA not before: Tue 29 Oct 2024 07:18:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
103.114.42.0/24 maxlen: 24
2a13:1480::/29 maxlen: 29
2a13:18c2::/32 maxlen: 32
2a13:8c87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:23:bf:0a:32:5f:6b:b4:77:60:1d:79:b7:61:5f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 29 07:18:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f860208c29294d11a09dafa0324aaad1ad7d7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:3d:c4:5d:e1:90:68:1c:1a:5a:c9:4c:12:
b2:d7:f4:ce:c1:66:e2:cb:09:d4:5f:7e:c0:6b:d8:
78:cb:5a:6f:dc:88:6a:c4:c7:10:67:5d:34:d0:5d:
dd:ec:d7:d9:9f:1a:1b:aa:4e:70:99:ee:fa:09:70:
e4:e4:67:bc:5f:32:a4:4c:4f:b0:93:15:82:4a:58:
87:0f:3a:b0:a6:9b:77:ae:73:0d:72:2f:2f:92:8b:
da:ba:1f:c7:b6:74:0b:ba:85:04:cd:fe:4d:09:ce:
1d:aa:2c:d4:48:09:15:bc:2f:02:5b:c4:cd:4e:18:
f7:3c:b5:39:09:6c:7c:fb:48:d6:4a:e4:23:eb:25:
f8:92:24:40:f7:42:29:0a:76:2f:2c:89:2c:63:2f:
ab:a2:9f:c9:f2:2c:52:21:7f:95:d7:85:43:42:3f:
18:61:ba:2c:51:af:8a:a6:62:a9:ca:d1:a1:13:32:
ef:78:f1:2b:de:15:43:73:bf:fa:58:aa:9e:8b:58:
29:60:52:d1:c3:70:f4:62:06:52:3e:12:ae:79:52:
ad:45:e3:fb:f7:ab:21:7b:d3:93:6e:45:70:14:e4:
e6:7a:b5:5e:f8:3c:ec:ca:2d:cb:21:be:62:6d:8e:
2f:ff:9b:32:d0:40:2a:cd:48:36:b3:d0:55:f9:8e:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:02:08:C2:92:94:D1:1A:09:DA:FA:03:24:AA:AD:1A:D7:D7:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0-103.114.42.255
IPv6:
2a13:1480::/29
2a13:18c2::/32
2a13:8c87::/32
Signature Algorithm: sha256WithRSAEncryption
63:b2:1b:29:bd:96:7d:e8:4f:c1:05:a2:f0:3e:4d:6d:89:20:
34:a1:d0:c5:db:ce:4d:0a:c4:45:f2:45:da:7a:6c:47:b6:08:
a9:37:62:f9:39:1b:fd:13:14:a1:fa:25:6f:10:00:b2:b7:db:
e6:11:4f:82:64:96:98:13:6f:dc:30:0a:18:de:3f:80:d1:64:
9a:b7:01:3b:d3:29:a3:d2:b4:fa:eb:47:c7:5e:50:fb:9e:ce:
94:7c:e6:a1:88:36:8b:ea:4c:a3:d4:28:bd:fa:52:08:10:4b:
c7:54:c0:5e:32:69:35:c6:85:da:13:07:c7:9a:1a:57:54:2e:
36:43:e1:9a:b0:9c:30:d3:26:fd:97:5b:4f:e7:97:50:1b:75:
2c:b2:02:65:68:a0:36:d0:37:d9:09:b6:30:7c:e4:4c:37:79:
b4:94:4a:f6:03:1c:05:21:28:72:54:7a:6c:87:91:29:ff:e3:
5c:47:5b:8a:02:69:1a:c0:0d:7d:eb:c6:57:23:2e:f0:4d:f8:
45:2d:e0:a0:c7:54:a5:17:c0:c4:22:cc:f6:be:82:5c:a4:28:
62:2d:50:90:c1:b3:ee:25:96:1c:34:a0:90:09:78:78:da:5d:
49:ae:5e:01:8a:2c:54:d0:0c:39:71:cd:f2:30:d1:8e:51:98:
19:b3:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:09 2024 by rpki-client on console-ams.rpki-client.org