Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tfmT8Y6ipl0AfGfPBfunayYaC80.roa
File: tfmT8Y6ipl0AfGfPBfunayYaC80.roa (raw, json)
Hash identifier: ElXH4tfnqfsR9aNeYOS5jlZVvrrXNoc/3xjb8P0E/fE=
Subject key identifier: B5:F9:93:F1:8E:A2:A6:5D:00:7C:67:CF:05:FB:A7:6B:26:1A:0B:CD
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AED4F64DF1D8B23E3A09465DE64C4
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tfmT8Y6ipl0AfGfPBfunayYaC80.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212228
IP address blocks: 80.77.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ed:4f:64:df:1d:8b:23:e3:a0:94:65:de:64:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5f993f18ea2a65d007c67cf05fba76b261a0bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:b5:db:c8:76:2c:a0:41:b0:4b:93:63:97:
8b:1e:b2:17:9c:e7:2d:e3:a7:d7:d1:dc:42:d2:96:
14:16:98:72:0e:7c:c8:18:7d:01:75:3e:26:76:60:
98:95:ba:fd:d8:03:bd:77:95:9c:17:40:4a:5b:78:
5c:8c:a2:c5:49:2c:e6:62:0f:a6:99:c1:c9:ec:25:
21:fa:63:6c:b0:43:e0:dc:d9:62:ac:e2:ad:a1:1f:
d5:40:18:39:58:62:60:4a:72:23:d9:c3:8b:d3:cb:
16:91:3e:0a:30:cb:1c:19:b1:6c:a6:72:27:fc:47:
33:51:91:78:59:6a:8d:94:80:1a:c0:2a:2c:fd:3d:
8b:08:4b:88:53:76:c2:54:c4:1d:62:cd:19:7d:bf:
88:44:2d:1d:c3:ab:da:0f:9e:3b:37:30:54:b5:05:
4b:df:cc:f2:c5:f4:d5:31:31:07:f6:c0:87:89:2e:
18:5a:4c:41:93:b0:3d:2b:4c:66:bc:cd:ce:4a:9d:
a2:36:08:a5:13:7d:a0:bc:8e:9f:17:0d:f2:22:dc:
3d:62:fc:7c:af:d2:3c:71:b4:66:87:ee:e9:d8:19:
d1:4a:b5:1b:cd:0b:4a:4c:de:de:5f:0d:5e:d1:65:
39:bb:2a:00:fc:8f:74:19:a1:09:95:e1:8f:28:83:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F9:93:F1:8E:A2:A6:5D:00:7C:67:CF:05:FB:A7:6B:26:1A:0B:CD
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tfmT8Y6ipl0AfGfPBfunayYaC80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:29:8d:2f:72:7c:3b:51:f0:1b:75:ef:06:5c:b2:43:12:37:
ea:b7:c0:2e:5e:4f:36:a7:ba:71:90:ab:88:fd:82:db:28:27:
40:e5:d3:7a:b3:30:ba:cd:7f:5f:58:a2:d3:66:18:cc:66:26:
f1:f3:02:67:69:35:df:a9:4e:86:ff:84:35:7d:51:d5:5a:d0:
19:7f:09:9c:cd:04:8d:71:8f:9a:93:91:b0:9f:76:81:3c:0d:
33:81:b2:29:ee:5b:ff:a4:c0:73:1f:97:c0:8a:b3:af:a7:25:
51:42:58:4b:67:84:ba:03:cf:31:f0:8b:e3:e3:65:83:e3:cb:
eb:48:d1:83:61:04:a9:80:ed:15:80:92:a9:7a:81:24:36:4c:
5b:7e:88:33:68:56:c9:34:03:4d:53:c2:a2:cc:08:00:ee:02:
f3:45:95:55:42:b0:dd:00:18:bd:7b:00:d3:7a:d1:d9:2b:16:
e7:2f:f9:13:fc:9d:33:13:b0:e0:93:bf:e9:e0:a6:dd:5f:9f:
27:37:5d:7b:71:cb:40:e8:98:1d:30:77:7a:86:2b:97:c2:e0:
10:ae:3e:21:5d:6b:69:d9:d6:d5:f2:83:57:89:9b:c8:73:e5:
55:8d:04:e1:ae:a2:87:64:f9:aa:84:79:cc:e4:19:9c:2e:a3:
15:a9:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:44:51 2024 by rpki-client on console-fra.rpki-client.org