Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/aTSlUtMcAzuvKxkizce3porMqho.roa
File: aTSlUtMcAzuvKxkizce3porMqho.roa (raw, json)
Hash identifier: P5b93W6i423/wQPv0/ME7cnf850nT+3fy4mSiiqzfBs=
Subject key identifier: 69:34:A5:52:D3:1C:03:3B:AF:2B:19:22:CD:C7:B7:A6:8A:CC:AA:1A
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 018CC4937F4285489DE0123374B252EE5FF7
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/aTSlUtMcAzuvKxkizce3porMqho.roa
Signing time: Mon 01 Jan 2024 10:30:49 +0000
ROA not before: Mon 01 Jan 2024 10:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197695
IP address blocks: 91.204.75.0/24 maxlen: 24
91.204.74.0/24 maxlen: 24
91.204.73.0/24 maxlen: 24
91.204.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7f:42:85:48:9d:e0:12:33:74:b2:52:ee:5f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6934a552d31c033baf2b1922cdc7b7a68accaa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:7e:eb:70:8e:b0:8a:36:91:88:13:fd:bb:
89:01:97:49:3e:ad:87:a8:e5:16:9f:dc:78:81:79:
b0:74:3d:e1:13:c3:f7:58:eb:c2:0d:57:bb:17:50:
fb:57:38:b7:2c:f7:7c:de:78:7d:10:18:8a:69:41:
b1:63:cb:34:e4:fb:fe:51:e0:ee:0e:e9:80:e9:e2:
3c:84:98:e5:7a:7b:54:8d:5b:58:63:35:f9:44:dc:
9b:cc:32:c7:8a:1c:77:5e:75:bc:6c:36:40:71:18:
4e:e0:35:03:54:a0:3a:a7:d7:38:e3:c3:7e:cb:ce:
22:e9:c0:ae:a6:71:90:79:70:a9:af:4e:c7:50:a1:
4e:b9:a9:65:e4:ef:f8:f0:0c:4b:b7:9e:36:4b:70:
46:eb:16:61:57:a1:28:e8:54:64:f3:ea:bf:1c:9e:
c7:6a:19:28:91:c7:08:b5:f9:d0:2e:89:b5:d2:73:
3b:91:80:a5:8d:03:54:75:f8:ed:ba:83:dc:07:96:
79:f8:14:58:d9:29:8b:ed:65:37:1b:df:7a:8f:1e:
de:2b:7e:7d:de:24:dd:ab:a4:d5:1d:76:7f:f9:5b:
ec:72:cb:fb:33:6c:c7:2e:92:b2:22:66:b0:f2:8a:
cc:1b:25:5f:0c:7f:1f:29:35:b2:5d:e2:b8:a1:28:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:A5:52:D3:1C:03:3B:AF:2B:19:22:CD:C7:B7:A6:8A:CC:AA:1A
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/aTSlUtMcAzuvKxkizce3porMqho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:d6:bb:e0:a5:0d:d0:9e:d4:f9:db:9d:e1:e6:91:a9:9a:96:
20:7a:54:79:ae:7a:a0:79:5e:98:4d:4f:e3:50:7c:31:ec:ac:
21:e6:4b:82:1d:49:88:8f:0b:d0:42:52:85:13:6c:be:1f:0f:
dc:31:ed:7b:9a:44:7d:78:41:3b:4e:54:a9:e1:fb:00:92:a9:
69:06:8a:a4:b8:37:1e:cb:8e:14:44:72:bc:df:7f:5f:a3:a4:
c6:8f:fb:cd:a5:0e:4f:c4:a2:f8:cb:0a:5c:d1:4f:ab:2c:1b:
00:d9:5f:43:af:71:f9:56:0f:7f:6f:bd:07:90:e8:d9:9a:25:
64:cf:a0:da:f7:36:06:c6:d4:ef:ab:19:be:22:e6:f5:0c:76:
3d:25:66:07:dd:4a:00:64:ca:7d:32:f6:9d:52:3d:56:65:5d:
e9:7b:65:5b:f5:13:23:9a:ea:26:8a:53:8b:f6:c8:13:bb:27:
28:1c:02:43:e1:74:56:0d:06:5a:23:32:81:68:18:5a:d8:c3:
07:db:4e:a5:66:6b:52:6b:9f:89:4d:84:c8:22:b7:c7:e8:a0:
9f:52:99:08:d4:55:33:50:97:61:52:71:64:a5:22:a4:9f:fa:
28:0c:19:39:81:6c:85:5f:a8:24:b8:95:62:0e:e7:b2:b6:4a:
f1:56:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:08:40 2024 by rpki-client on console-fra.rpki-client.org