Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/TwbjpSZt3_66g1CYe6v2GGkVkVE.roa
File: TwbjpSZt3_66g1CYe6v2GGkVkVE.roa (raw, json)
Hash identifier: 7uBttXnEHqjzFj8Z3MpRgqvqSrVsqoz1J1Sv3wPS5Gw=
Subject key identifier: 4F:06:E3:A5:26:6D:DF:FE:BA:83:50:98:7B:AB:F6:18:69:15:91:51
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018CC7945DDA2075511B43491FC239B77261
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/TwbjpSZt3_66g1CYe6v2GGkVkVE.roa
Signing time: Tue 02 Jan 2024 00:30:38 +0000
ROA not before: Tue 02 Jan 2024 00:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204666
IP address blocks: 5.59.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5d:da:20:75:51:1b:43:49:1f:c2:39:b7:72:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 2 00:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f06e3a5266ddffeba8350987babf61869159151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:41:6d:2c:83:5a:c4:3d:4f:99:ad:27:82:
88:55:ce:26:91:8c:8b:df:33:aa:fa:d9:e2:db:0d:
63:9a:98:36:d7:3f:6f:6c:2d:84:cc:29:0f:53:00:
8c:f0:1e:ac:e0:4c:9c:b2:96:34:3e:bb:01:83:61:
53:c6:28:7a:d5:28:27:87:51:c8:c7:3e:d8:6b:40:
1b:20:b0:e3:e7:e1:cf:e9:fd:3c:a1:d3:57:85:75:
6d:8b:38:ff:4d:8c:f0:79:3e:e6:77:29:f0:d1:15:
47:4b:54:b6:6c:c1:57:4a:19:0d:df:b9:e9:a2:93:
eb:a7:a0:c5:36:c5:9d:e9:1a:32:c5:65:48:a1:c1:
50:47:6f:7e:2a:ec:86:8c:93:0a:11:ef:80:ab:cf:
a8:62:0f:c4:4d:0e:d7:5e:f5:b0:9d:ad:d0:52:17:
e5:00:b9:1a:bd:86:41:b7:36:08:f6:f4:7f:78:74:
ce:d2:13:b7:db:8b:89:02:13:bf:9f:63:44:da:6a:
26:0d:46:03:6b:83:46:b1:7e:2c:5b:e1:e7:58:ad:
bc:3c:88:af:46:ec:8d:ba:53:fd:2a:fc:9f:d6:93:
c5:f0:6c:11:aa:ff:53:2f:fb:17:65:0c:b1:43:ab:
84:d2:ee:1b:ca:f4:06:cb:54:51:8a:b4:3c:a7:4c:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:E3:A5:26:6D:DF:FE:BA:83:50:98:7B:AB:F6:18:69:15:91:51
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/TwbjpSZt3_66g1CYe6v2GGkVkVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:5f:e0:b0:9b:1e:a6:f1:6a:5f:7b:ee:7e:0b:2c:6d:20:01:
7e:d6:46:77:98:98:f1:77:b4:05:20:ef:51:8e:af:05:56:e3:
a9:87:c7:be:34:eb:aa:85:89:37:70:5d:9a:53:de:ab:f1:1f:
4f:27:3f:ff:b2:6c:8f:59:92:74:93:7d:41:31:e1:00:c8:17:
cc:c1:95:62:73:85:02:76:6f:11:e9:60:da:b6:bf:ed:cb:64:
e2:b5:1d:e9:4c:54:e1:48:6e:91:ca:33:cc:cb:df:2a:e9:e6:
aa:e8:8e:ef:79:12:b3:dd:50:0e:c3:b3:d8:33:75:ed:56:f4:
4a:a4:30:27:3c:ca:e3:44:a6:a2:32:b9:d6:46:59:e6:2b:1e:
1b:de:6a:4b:4b:24:b9:4c:03:c9:ee:47:b3:9c:c7:3d:a7:ce:
a2:62:f9:c6:4b:22:35:0b:e3:a3:5a:dd:29:77:76:40:71:13:
aa:c9:fb:d1:48:cd:88:20:82:e9:0b:df:8a:44:02:35:a9:12:
c4:eb:d8:cb:a1:a2:3b:7c:29:34:c5:c4:83:d1:52:a4:f7:25:
1b:18:fb:4d:18:8c:31:d6:d7:88:7e:c5:10:42:d2:0f:b8:14:
84:e0:23:89:1a:18:db:95:34:3c:ac:a7:0f:2e:c5:9b:8e:49:
37:a4:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:42:00 2024 by rpki-client on console-ams.rpki-client.org