Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/tyC3aQiPwIi_V4NtCZX7ZivaPFg.roa
File: tyC3aQiPwIi_V4NtCZX7ZivaPFg.roa (raw, json)
Hash identifier: Od7Eq3EfpcE84cJD05ZSKoxYzpjlzUxpesvDuyXAbAk=
Subject key identifier: B7:20:B7:69:08:8F:C0:88:BF:57:83:6D:09:95:FB:66:2B:DA:3C:58
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 018CC9BC46EB84D710ABECD2342E5D8D2BBC
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/tyC3aQiPwIi_V4NtCZX7ZivaPFg.roa
Signing time: Tue 02 Jan 2024 10:33:28 +0000
ROA not before: Tue 02 Jan 2024 10:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49882
IP address blocks: 193.105.47.0/24 maxlen: 24
91.208.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:46:eb:84:d7:10:ab:ec:d2:34:2e:5d:8d:2b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b720b769088fc088bf57836d0995fb662bda3c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:21:d0:17:f3:c3:47:1c:62:ad:2a:b1:5c:
29:b0:bc:25:71:d0:e8:ec:3d:51:53:07:df:ef:b7:
d1:52:16:14:0f:d6:b1:a9:42:8c:0f:dc:ae:da:3b:
9e:d5:d5:84:b5:d4:02:f9:77:dc:fd:7c:94:80:1b:
ec:5c:16:cf:da:05:4e:7f:8c:d4:af:64:58:8a:3a:
47:ea:d5:0d:6f:f0:dd:ef:5b:dc:9e:26:3f:bb:2e:
67:96:d8:2e:aa:63:07:b7:db:62:4e:d7:07:32:7a:
ed:28:c4:c9:fb:bb:fb:4b:19:0f:64:65:7e:a2:47:
ea:d4:e0:df:c0:42:b2:13:25:01:c7:49:a0:e8:61:
a1:9f:3c:0a:c4:8b:86:e3:96:84:57:21:df:d7:9e:
33:c0:d2:a6:4c:2d:d4:05:6d:96:17:2c:01:b6:ba:
4c:c2:16:e7:c6:41:19:1c:6a:28:b5:80:c6:e8:63:
79:b7:bf:22:3d:89:a6:41:37:45:5c:a2:b0:45:e5:
6d:42:37:4c:0e:c4:85:7d:fb:98:9f:5b:72:88:a8:
13:94:c1:79:2e:79:ab:56:a9:18:18:c5:6b:b3:4a:
dc:dd:bf:46:e1:6f:30:6a:c2:65:b0:a4:27:33:de:
f8:68:e8:5a:d7:6e:a4:0f:62:8f:bb:cb:7a:6a:67:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:B7:69:08:8F:C0:88:BF:57:83:6D:09:95:FB:66:2B:DA:3C:58
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/tyC3aQiPwIi_V4NtCZX7ZivaPFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.28.0/24
193.105.47.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fc:e3:1c:1a:36:eb:ba:42:4d:d5:db:9f:90:12:a2:7c:fc:
59:a6:07:40:a6:eb:23:e0:3a:d1:db:89:30:c3:91:65:08:c8:
72:73:89:45:32:ee:02:e9:e0:9d:66:8f:3d:57:41:2b:85:cd:
9d:46:e2:65:16:0d:ef:52:99:14:d0:ee:d9:e4:ee:ed:5b:25:
14:cd:a2:02:95:70:a5:12:21:4d:ab:81:68:bd:b2:21:1b:8f:
30:95:38:99:d2:74:c8:5a:48:f0:1d:07:8b:86:36:e8:e3:fa:
c7:b4:61:c4:41:33:99:82:91:26:bd:1b:4b:4c:98:06:ee:a7:
96:39:89:9e:06:82:3b:c5:7d:66:8c:47:fd:89:8f:06:1b:4b:
d3:aa:1d:29:62:99:59:cc:16:71:c7:8b:cb:fb:0f:ee:71:bc:
30:83:27:ac:04:74:69:27:8a:33:14:91:55:e8:c1:c8:cf:dc:
52:68:aa:24:52:ef:01:2e:7b:42:eb:78:91:fb:f1:be:1b:29:
c5:fe:6d:a5:9b:87:51:1e:ab:12:26:17:d2:54:b5:86:78:b1:
04:8b:e2:23:58:3e:4b:47:d5:d1:82:e8:23:1f:8a:c8:ab:7c:
2d:fd:ed:2a:50:aa:ff:88:3a:df:92:9e:23:ff:2c:5b:94:ad:
a3:80:a4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:14:14 2024 by rpki-client on console-fra.rpki-client.org