Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/t4lIRas0VyGQjw4weHBJ_zRMF20.roa
File: t4lIRas0VyGQjw4weHBJ_zRMF20.roa (raw, json)
Hash identifier: PwP55EuwyYEY9PLSTWKTjwEr98cpSx5P1PhYU1bU8MM=
Subject key identifier: B7:89:48:45:AB:34:57:21:90:8F:0E:30:78:70:49:FF:34:4C:17:6D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0190A62D23968BAF929C1CE8441B086E9022
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/t4lIRas0VyGQjw4weHBJ_zRMF20.roa
Signing time: Fri 12 Jul 2024 09:01:34 +0000
ROA not before: Fri 12 Jul 2024 09:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 84.55.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:2d:23:96:8b:af:92:9c:1c:e8:44:1b:08:6e:90:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 12 09:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7894845ab345721908f0e30787049ff344c176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:76:88:54:53:b3:f3:03:0c:4a:1e:78:d5:
00:9d:2f:9f:8f:3b:58:e9:e1:c5:d9:ce:b1:d7:3e:
91:a7:b8:1f:37:ec:07:e7:5f:16:71:4a:81:72:50:
44:3e:4b:b4:89:75:51:0b:3f:fe:45:2d:7c:03:e0:
64:f6:a2:69:5c:61:a4:52:9e:52:b5:e0:09:99:1a:
8b:77:bb:e5:47:11:b2:f3:58:3b:13:91:32:42:fe:
b5:40:70:4f:97:17:4d:90:90:30:43:4e:49:4e:76:
69:d5:1d:65:84:be:36:88:1c:87:16:e9:af:3d:d9:
a4:f5:62:b7:56:fc:8f:ef:cc:1d:c2:84:b4:b2:b9:
c0:bd:26:78:c9:e2:a9:3d:64:29:1f:ef:81:c8:dd:
93:11:9a:ea:b6:98:f9:55:b3:dd:dc:c7:d2:f0:fa:
8e:c1:f3:44:85:38:b6:79:ee:ec:42:8e:0e:f5:c6:
b8:d7:ca:6a:d9:66:5a:ab:ab:38:32:26:ca:00:43:
81:e6:a5:7e:78:ff:85:f4:22:6c:35:3a:f2:70:54:
89:5e:3f:78:12:cf:71:f7:55:a0:77:8f:52:d0:17:
4f:05:6e:8d:43:72:0a:a5:c6:a9:ff:cf:31:11:74:
5c:99:51:02:23:ee:47:6d:73:22:56:57:df:05:28:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:48:45:AB:34:57:21:90:8F:0E:30:78:70:49:FF:34:4C:17:6D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/t4lIRas0VyGQjw4weHBJ_zRMF20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
Signature Algorithm: sha256WithRSAEncryption
89:c4:11:00:93:63:a4:d6:f9:a6:77:f9:f9:ab:6d:0b:75:10:
eb:f5:d0:bf:00:05:44:7c:b9:ae:df:00:5a:c6:c5:cf:42:ec:
43:f7:5b:d5:4d:36:e0:f9:ff:b8:44:e7:2a:48:5e:4d:d2:9a:
93:a4:1e:c8:b7:fc:10:ea:1f:c7:05:7f:df:cb:ef:93:05:a2:
b7:25:46:0e:4e:7a:df:66:85:4b:cb:fb:d9:a9:16:89:b4:f3:
65:e8:d9:1f:73:82:fc:86:30:51:47:2d:c4:5c:1a:fd:3a:c6:
64:44:2a:70:31:9b:e7:b3:1e:51:40:73:34:ff:04:93:ca:fb:
62:1b:12:6f:5a:e6:dc:5d:cf:d8:a6:fa:6f:38:94:ff:3a:97:
b4:b3:85:eb:68:8a:d1:bf:62:13:49:f5:98:0a:4b:89:bf:5d:
f2:e1:43:73:1b:ce:83:d6:ef:45:71:f6:17:c8:50:01:ab:67:
97:ae:4e:70:a3:73:9c:af:91:08:d1:33:e4:bf:f4:76:83:69:
6a:9f:c8:1b:4f:f9:a4:a8:85:2b:ff:ed:da:c3:3c:a5:9d:d1:
09:61:4f:c5:11:fd:41:c3:62:e1:7b:81:ac:da:5c:32:75:e1:
ac:de:10:48:27:0d:05:55:b2:b6:f0:ba:6a:c2:d0:ff:53:f3:
74:50:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:17 2024 by rpki-client on console-ams.rpki-client.org