Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TqLMXfTjuOSHQGIaFhsXsMCJ3nE.roa
File: TqLMXfTjuOSHQGIaFhsXsMCJ3nE.roa (raw, json)
Hash identifier: mjJdcDjwmVBYXe14uPG8csm2rGOs8dm9HZK4oDuNHWE=
Subject key identifier: 4E:A2:CC:5D:F4:E3:B8:E4:87:40:62:1A:16:1B:17:B0:C0:89:DE:71
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EF156AA0ADEE00E8EC7A4BB4BA750
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TqLMXfTjuOSHQGIaFhsXsMCJ3nE.roa
Signing time: Mon 01 Jan 2024 14:30:31 +0000
ROA not before: Mon 01 Jan 2024 14:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216272
IP address blocks: 93.92.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f1:56:aa:0a:de:e0:0e:8e:c7:a4:bb:4b:a7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ea2cc5df4e3b8e48740621a161b17b0c089de71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:66:d7:5d:23:b3:ca:c9:1e:23:9a:75:10:
73:d0:be:ff:63:39:28:00:3f:13:db:b6:7e:92:ae:
89:b0:a0:d8:e8:35:c4:4d:eb:e9:39:1c:8e:38:63:
f5:04:d6:2b:d3:5d:c8:a9:bf:ac:53:b6:93:9f:85:
7a:b8:f2:b4:52:df:1b:aa:be:d2:11:f8:82:10:45:
ce:1d:b4:57:ab:35:10:e9:d8:48:8b:51:eb:3d:a1:
43:7b:55:54:7f:d9:9a:88:08:1e:03:87:a1:ec:09:
ac:54:45:68:d1:91:c7:6d:c4:f2:dc:8e:39:d4:de:
d2:12:80:d7:c5:d7:86:e5:bb:c7:b4:21:fb:76:9a:
57:8d:68:b3:70:95:6b:a3:a5:4f:da:85:75:51:13:
c3:61:09:b9:9d:86:55:c2:d9:04:ac:6d:c2:93:73:
45:a2:51:6b:46:e3:f3:e2:19:be:5d:04:6a:0e:a6:
f5:da:b4:8b:71:4f:b3:ae:3d:4a:b4:d4:1d:fd:ca:
11:59:2a:9c:26:15:79:d2:d0:4b:b6:e1:9a:c0:28:
53:1f:e7:77:b2:b7:75:62:ee:60:d5:d5:24:d1:27:
85:b3:f9:ae:94:88:f8:49:6c:f2:ca:7b:2d:28:d0:
e3:c0:af:9f:b2:1a:af:72:f3:8d:89:0f:15:1a:b0:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:CC:5D:F4:E3:B8:E4:87:40:62:1A:16:1B:17:B0:C0:89:DE:71
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TqLMXfTjuOSHQGIaFhsXsMCJ3nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8e:80:c2:c8:bb:34:2d:ca:3a:f2:11:e7:ad:99:84:d5:c9:
8b:e9:ff:39:23:a7:7f:27:61:26:e9:2b:5c:b4:d3:54:e6:73:
89:74:8f:23:f0:15:84:e9:d3:2b:8d:c5:b5:99:61:c8:43:85:
b5:b9:3d:aa:ce:e4:ac:ea:11:a4:84:b7:fd:67:ae:5c:c0:a6:
82:d2:02:19:73:53:fd:09:53:cb:a6:3b:02:73:f8:a8:a7:aa:
1a:b1:44:37:50:46:28:b9:83:a8:b0:fa:ee:0d:33:2e:b7:c0:
4e:de:e9:a6:32:6b:c4:f5:9b:8d:07:27:9d:08:2d:6c:a5:b6:
8d:d9:20:e6:83:09:2a:e6:f8:ab:a4:81:89:98:c0:d9:9d:7e:
48:3c:6e:fb:b6:dd:29:4b:3c:48:92:98:5d:c3:a4:e8:32:a3:
74:d6:3b:9c:fa:d8:55:a7:4f:7f:eb:3d:ca:e7:72:f2:79:a1:
20:d5:db:dc:ea:e3:ca:24:a1:92:6b:28:9b:62:b8:57:88:5d:
9b:ce:fb:5c:4c:64:48:6f:a1:f3:74:73:37:85:f6:57:ed:92:
84:34:91:98:c8:cc:bc:a8:9c:72:08:22:75:d3:6c:9d:49:47:
4b:d8:9f:32:21:56:4c:e5:cc:bd:fb:25:a7:c1:29:40:a6:d9:
3a:3e:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:54:13 2024 by rpki-client on console-fra.rpki-client.org