Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/vT1Kw8jdH4NKWjLio8-TX1bFpmU.roa
File: vT1Kw8jdH4NKWjLio8-TX1bFpmU.roa (raw, json)
Hash identifier: CXTW7guYZuwAOxpavRLacbM1J0IV2cmg9ZDX+nuAajQ=
Subject key identifier: BD:3D:4A:C3:C8:DD:1F:83:4A:5A:32:E2:A3:CF:93:5F:56:C5:A6:65
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 018CC3B717110CEC487617D613BC8740E792
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/vT1Kw8jdH4NKWjLio8-TX1bFpmU.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 193.16.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:17:11:0c:ec:48:76:17:d6:13:bc:87:40:e7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd3d4ac3c8dd1f834a5a32e2a3cf935f56c5a665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:dd:99:83:4c:42:8a:c2:47:0b:1b:66:a0:
a8:06:52:81:32:4b:de:2b:19:41:83:25:33:02:26:
cf:44:6a:04:24:42:23:21:9a:1b:67:4f:9a:9a:1d:
3a:26:b3:ac:99:62:91:04:ce:47:e6:78:a5:47:75:
c8:3b:b4:05:9f:88:95:c7:d1:3f:6c:94:6b:e7:00:
6f:a3:d8:5a:2d:64:90:bc:16:c7:d5:9a:9a:6e:8f:
80:8a:56:0c:c3:f9:8f:e4:b4:bb:06:49:19:d4:57:
75:a5:44:34:96:d9:f1:1c:06:17:bd:1e:af:e7:ab:
d6:62:99:0f:97:4d:05:6a:fb:8c:50:cf:dc:da:11:
e2:d3:8f:4f:51:4c:25:da:9f:f8:4a:5b:2a:d1:70:
c4:fd:f0:c5:1e:a1:5f:e4:eb:6c:da:c4:e7:c6:07:
d8:73:c7:e9:14:ef:ca:01:8e:0c:de:11:13:b4:4e:
b8:e3:df:13:29:b8:d2:3c:7b:3b:aa:79:02:8d:c3:
b0:86:fe:28:85:5e:35:d6:a1:9f:5f:14:17:31:52:
9c:1d:4e:d5:2f:e5:62:50:9d:97:ed:83:bc:51:4b:
61:32:2f:13:b2:c8:02:13:98:93:ba:3b:ed:be:ca:
df:85:7b:fc:fa:86:3f:f7:cb:9b:f4:4b:57:0e:14:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:4A:C3:C8:DD:1F:83:4A:5A:32:E2:A3:CF:93:5F:56:C5:A6:65
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/vT1Kw8jdH4NKWjLio8-TX1bFpmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:49:f7:d4:d2:8c:31:c4:ef:47:46:97:28:cf:0d:e0:d8:c8:
27:91:39:5d:f4:d3:ad:29:7d:21:74:77:46:47:e0:c6:2c:95:
ac:fb:28:02:d5:11:6d:19:d8:24:56:53:3e:62:1a:91:4b:37:
97:dd:b8:7a:f1:19:d2:b4:9c:e8:dd:bc:fd:78:9e:ea:20:b6:
ff:93:0d:e4:09:9a:b4:22:6e:0f:25:e6:6b:4c:aa:68:f1:50:
ee:3e:02:4c:82:94:c3:28:c1:bd:a3:23:f9:a2:f4:84:4f:41:
22:d6:82:5d:92:73:21:e7:ba:2e:5c:82:75:eb:c7:84:9c:45:
c2:f3:b9:dd:32:de:8f:2b:0f:9a:d0:9e:5d:ee:c7:c4:e9:ed:
d4:2c:c9:d9:d5:67:d8:87:a2:b2:31:a5:33:43:d1:fc:fa:29:
97:d0:a7:6e:06:74:e5:7f:d5:77:4c:84:00:d1:64:6b:1e:98:
f9:bc:6a:dc:4f:d4:6f:5a:36:cc:2d:36:13:87:0a:81:7f:3e:
33:2b:b2:87:fb:33:f0:48:f3:ab:ff:c4:54:78:f3:a6:2e:22:
bc:45:e1:55:56:d3:fd:dd:19:06:55:28:6e:00:8b:fa:30:ae:
18:69:13:a8:0e:ef:17:12:30:e2:03:8a:b1:10:fc:0c:01:97:
b4:4c:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:56:48 2024 by rpki-client on console-ams.rpki-client.org