Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TcZRejTaynKkTk7l72WMDLhqRrU.roa
File: TcZRejTaynKkTk7l72WMDLhqRrU.roa (raw, json)
Hash identifier: e7mhCKrvr65kEBXOas5ZY9sP2gL6IkH7z5EDTq0Qf3s=
Subject key identifier: 4D:C6:51:7A:34:DA:CA:72:A4:4E:4E:E5:EF:65:8C:0C:B8:6A:46:B5
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E7008D1F91613C0275B3994BEA002
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TcZRejTaynKkTk7l72WMDLhqRrU.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209218
IP address blocks: 46.232.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:70:08:d1:f9:16:13:c0:27:5b:39:94:be:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dc6517a34daca72a44e4ee5ef658c0cb86a46b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:0e:c2:8b:bb:0c:5d:7b:c3:3f:cf:54:5f:
4f:4b:e5:25:f0:93:92:87:b0:48:99:e8:e1:c6:5b:
c1:7d:16:03:5b:3d:c9:28:39:81:a6:2a:55:a3:1b:
a6:19:22:65:d4:47:7b:ab:8b:38:b4:4a:22:65:9b:
d0:a1:9e:d2:9f:f6:98:f2:c9:cf:6f:f3:0a:16:44:
62:f1:66:49:a8:61:2a:d3:95:73:e1:32:1d:b1:94:
5f:55:a8:5b:b8:f7:fd:e7:e5:56:08:4f:52:3e:9e:
61:3d:e2:45:91:5c:ca:94:d5:dd:e4:8a:0e:de:a3:
c3:ed:e9:44:c4:78:2a:c1:f6:70:41:a9:48:d6:0e:
51:56:e5:d3:d3:9d:63:d6:ca:1b:6f:9a:83:0a:38:
6b:2f:a8:72:a8:45:67:ed:13:7f:62:b4:66:a6:24:
66:ee:ce:0f:b8:31:e7:6d:f1:2f:f6:11:af:50:2b:
fb:66:57:58:e5:16:e4:0c:c4:ce:67:ba:f3:57:f5:
75:a5:5f:b5:da:df:18:16:f2:28:ad:9e:52:8f:e7:
88:7d:31:62:d5:85:be:fd:d4:01:51:37:e5:02:5c:
90:dc:55:4d:a3:ae:71:35:f4:e4:d3:72:c5:0d:7e:
ea:fc:33:88:f8:a0:b3:4f:1c:b3:c2:1c:ad:9b:92:
da:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C6:51:7A:34:DA:CA:72:A4:4E:4E:E5:EF:65:8C:0C:B8:6A:46:B5
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TcZRejTaynKkTk7l72WMDLhqRrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.20.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c5:9f:cb:3e:27:60:cb:eb:e5:57:7e:a9:58:47:45:4d:64:
2f:81:e1:6f:50:9d:ab:73:9f:38:29:4c:32:e4:b8:e7:f0:c9:
d4:7b:07:7b:1a:14:88:78:b7:7f:21:21:ab:82:19:02:20:57:
56:1e:52:e0:47:94:fb:f1:70:eb:74:39:a5:bf:33:b4:db:23:
6d:3e:0b:f6:6a:34:11:99:ec:d0:83:21:da:76:99:61:c7:24:
b9:0e:2e:a4:40:e8:3c:1c:a3:fc:57:5b:bd:6f:50:fb:58:02:
4c:09:5c:2f:58:3f:a1:39:fe:64:ec:71:d4:82:b4:51:a7:a9:
71:73:af:f9:75:ac:e6:82:41:4f:b3:7c:92:af:e4:c0:a7:d3:
3e:fe:d7:35:fb:10:c5:71:26:0e:44:2a:11:5d:78:9f:0c:cd:
76:07:4b:48:e0:e9:ac:ea:8f:9a:3d:0c:c7:73:43:12:e7:2d:
cf:59:0d:8d:48:f2:46:7d:79:66:a9:86:52:e9:62:01:65:f0:
78:29:d3:45:b0:f8:3b:2f:28:a0:41:e9:8c:f1:c8:33:01:4c:
17:0a:e2:65:a6:d0:c2:0d:8f:fb:3a:00:78:9a:fc:5d:6a:be:
cc:1c:e2:9c:63:8b:f0:63:a2:a6:f6:6d:8e:45:75:d9:51:f2:
9f:53:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:17:26 2024 by rpki-client on console-ams.rpki-client.org