Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/TgFChv2sWo4Xlka5RDIMjlGS1pg.roa
File: TgFChv2sWo4Xlka5RDIMjlGS1pg.roa (raw, json)
Hash identifier: 2Xe2CAaF11M0lD51HahSW/4+UL1/lpijT0frM1HGm1k=
Subject key identifier: 4E:01:42:86:FD:AC:5A:8E:17:96:46:B9:44:32:0C:8E:51:92:D6:98
Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial: 0190A132BA35FCF36CE91D4D2DCB1B70FF54
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/TgFChv2sWo4Xlka5RDIMjlGS1pg.roa
Signing time: Thu 11 Jul 2024 09:49:34 +0000
ROA not before: Thu 11 Jul 2024 09:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199969
IP address blocks: 195.88.122.0/24 maxlen: 24
195.88.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:32:ba:35:fc:f3:6c:e9:1d:4d:2d:cb:1b:70:ff:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Validity
Not Before: Jul 11 09:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e014286fdac5a8e179646b944320c8e5192d698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:77:af:d9:f4:f6:b1:ba:71:aa:3e:2a:c9:
0e:c3:1d:d6:c4:94:06:c5:b5:e0:e5:8e:6c:6c:bd:
b6:3a:c6:44:04:39:0f:76:12:d4:1e:58:7c:2d:83:
48:cc:dd:25:e8:3b:c5:bd:20:bc:be:61:5b:95:30:
b8:52:91:a2:b2:c4:b8:b1:89:41:a6:d3:ff:72:67:
be:41:80:47:fc:34:a1:2f:00:fd:05:d5:20:cb:ac:
11:dc:2c:3d:fa:14:18:29:7d:11:10:ee:94:18:54:
4b:e8:63:14:59:f8:a3:2a:d3:5c:aa:30:10:06:55:
d8:5f:a8:0a:75:59:fb:1a:38:74:ea:6b:e7:71:11:
f6:d3:64:e4:20:c4:88:29:cc:f5:18:e4:c4:6e:64:
dd:8b:4a:b1:03:fb:7b:37:cb:ec:e7:83:3e:e8:96:
90:44:22:02:ba:44:96:5a:e6:2a:3b:42:af:8a:16:
73:ed:44:27:17:2c:51:fc:58:89:c5:7a:3a:19:3e:
b1:3b:3d:66:a3:fc:fa:ae:3e:7f:a3:34:08:ef:aa:
d7:99:a2:72:15:ca:b9:f5:cf:6b:c3:58:7f:27:21:
6a:d9:51:b2:8f:71:03:94:da:e6:f2:67:35:f2:98:
fe:7e:3d:69:89:5b:5e:fd:d3:bf:e0:41:1f:4f:7b:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:42:86:FD:AC:5A:8E:17:96:46:B9:44:32:0C:8E:51:92:D6:98
X509v3 Authority Key Identifier:
keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/TgFChv2sWo4Xlka5RDIMjlGS1pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.122.0/23
Signature Algorithm: sha256WithRSAEncryption
96:31:a4:99:03:3f:01:e4:60:d6:63:4d:54:92:ee:84:79:d1:
f8:ae:02:29:68:41:48:fa:4b:ae:93:e5:e7:d7:93:c3:4b:8e:
5c:c3:c7:7c:21:ec:c7:81:d9:c1:84:95:ae:53:6d:9d:f7:95:
33:03:7e:81:b7:b4:98:46:4d:8b:27:4e:e5:79:d4:67:70:ea:
64:e9:ba:01:a2:4d:f1:6b:73:50:44:75:1f:37:e2:0b:ca:4b:
80:a3:59:3e:1e:38:17:55:cd:ce:20:76:92:bb:43:10:68:0c:
3f:1f:11:06:a8:00:39:8b:1c:4c:f9:13:7b:18:0b:4b:a5:35:
61:da:c0:0f:f7:96:19:7b:17:d8:1a:20:87:5f:83:eb:37:61:
a2:41:e1:8b:23:32:0b:e1:02:4c:05:de:0f:bb:f1:19:99:f3:
85:fa:7e:af:c6:e5:11:e1:24:5d:cf:e8:e0:56:ee:a5:ba:f5:
6b:20:5b:3a:f3:a0:52:38:3b:9b:bc:7f:f3:18:00:9a:9c:b7:
6d:fd:b6:c2:cb:fb:20:3a:7d:d8:25:c7:f1:24:8c:74:15:69:
ee:44:b6:a2:53:a7:4d:ba:20:04:48:c8:72:34:84:76:d3:cf:
e1:e7:5f:56:14:16:08:cd:7c:76:6e:d2:34:fe:0f:81:0a:fd:
a3:fb:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:57:11 2024 by rpki-client on console-fra.rpki-client.org