Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/TFSsAGxmNiOuOvPPhSD0Vosp9_g.roa
File: TFSsAGxmNiOuOvPPhSD0Vosp9_g.roa (raw, json)
Hash identifier: yyuJB+BdYG1EeUxZBUlKsFbSnXpbANNRhlOR/xSzhi4=
Subject key identifier: 4C:54:AC:00:6C:66:36:23:AE:3A:F3:CF:85:20:F4:56:8B:29:F7:F8
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 018F816C87A3C90693F23546F88AFF1FA3E0
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/TFSsAGxmNiOuOvPPhSD0Vosp9_g.roa
Signing time: Thu 16 May 2024 12:42:04 +0000
ROA not before: Thu 16 May 2024 12:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56339
IP address blocks: 45.149.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:6c:87:a3:c9:06:93:f2:35:46:f8:8a:ff:1f:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: May 16 12:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c54ac006c663623ae3af3cf8520f4568b29f7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:43:f2:79:59:d4:4b:53:c1:82:42:c9:a0:
5b:e3:a1:7f:39:b5:8f:37:f4:37:cb:c2:fb:57:bc:
bd:60:94:59:85:89:77:fc:cb:db:37:d6:06:c6:07:
74:e7:29:c1:fa:7d:2d:55:28:8d:a9:0e:eb:d5:82:
c2:98:e4:b4:fe:d4:94:48:76:d3:1a:61:c7:f1:df:
02:63:33:f6:10:aa:aa:d0:75:9b:b4:33:0a:a9:64:
27:e9:5c:47:a4:57:86:44:2e:f8:a3:b0:ba:da:72:
38:d3:2c:5a:0e:5f:75:83:a1:3a:c4:94:9d:49:ff:
74:e9:ad:bf:c4:f5:c6:2e:68:56:70:db:f8:b1:0a:
26:89:cc:06:a0:a2:37:29:af:d7:2f:d5:f5:48:c6:
23:14:54:28:99:be:9f:ad:86:56:fa:91:9f:b7:21:
e1:2a:7e:cd:1f:48:ec:85:23:8c:78:a5:3f:b8:2d:
26:d2:fd:5f:4a:d8:db:27:17:00:92:0a:c8:61:13:
a3:57:a7:27:f4:ab:68:46:00:67:e2:4c:69:85:33:
58:03:93:77:da:1d:76:27:72:19:e4:f3:b6:03:5c:
20:43:82:45:87:52:c6:35:28:96:d0:ae:37:4d:00:
4e:cb:d7:3e:5c:d2:bc:7a:d7:28:5d:50:26:1f:31:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:AC:00:6C:66:36:23:AE:3A:F3:CF:85:20:F4:56:8B:29:F7:F8
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/TFSsAGxmNiOuOvPPhSD0Vosp9_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0/22
Signature Algorithm: sha256WithRSAEncryption
57:3d:86:4e:e9:c9:02:e3:44:69:e5:75:57:11:d1:22:72:52:
b2:21:42:7e:f1:58:1e:b4:65:ee:68:db:74:80:96:2e:a1:62:
ad:d3:0d:cc:ec:4c:32:f1:0f:83:a7:1e:56:96:23:40:7c:13:
8a:19:1a:93:b6:e7:55:e6:bf:06:79:ad:8f:fa:8d:a7:f1:f2:
89:8c:62:cf:80:4e:e5:c9:0e:93:94:42:49:c2:ec:fd:c0:71:
5e:ef:80:20:f3:fd:9f:09:28:14:74:3c:92:91:fc:2f:aa:18:
15:69:9f:16:ef:d7:39:fa:e0:21:55:d7:45:a7:4e:b2:79:aa:
54:ee:ba:d9:90:44:56:8a:17:1f:dc:b3:88:37:16:de:d3:01:
46:86:cf:5c:c4:fa:cf:43:74:13:75:07:d9:29:40:c9:22:6f:
a4:59:d3:94:2f:eb:11:83:b2:01:02:c1:35:46:8f:11:71:8d:
8e:e4:61:3a:11:5d:4a:0f:45:af:96:73:66:87:4d:91:68:26:
08:b7:e7:1b:00:63:f9:00:7e:44:25:fe:38:30:31:22:4c:c9:
85:b2:55:ed:05:0f:04:1b:0c:7e:9f:75:a8:c7:89:31:f0:a1:
ea:e3:a2:42:db:19:d5:7a:19:b5:05:28:64:5c:29:35:d4:0f:
07:9a:ec:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:36:14 2024 by rpki-client on console-fra.rpki-client.org