Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/tJvA6gkc1fZkIKfqZNTbOO4XdJo.roa
File: tJvA6gkc1fZkIKfqZNTbOO4XdJo.roa (raw, json)
Hash identifier: e482Y4pN/I/tCq1pBrPiXfChisbOxHe4mbP+JPplktM=
Subject key identifier: B4:9B:C0:EA:09:1C:D5:F6:64:20:A7:EA:64:D4:DB:38:EE:17:74:9A
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0191E13D7FE0AADEF9060EF73AB7E0BC5439
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/tJvA6gkc1fZkIKfqZNTbOO4XdJo.roa
Signing time: Wed 11 Sep 2024 13:19:49 +0000
ROA not before: Wed 11 Sep 2024 13:19:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199440
IP address blocks: 80.92.228.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:3d:7f:e0:aa:de:f9:06:0e:f7:3a:b7:e0:bc:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Sep 11 13:19:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b49bc0ea091cd5f66420a7ea64d4db38ee17749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:64:d7:5b:f6:c3:e2:e6:94:ec:c9:dd:4b:
53:13:11:31:54:5d:0b:51:de:46:b3:3b:18:90:2c:
4a:dd:5a:34:cf:4c:9d:14:fe:47:05:20:d1:b2:81:
cb:1c:db:8e:b8:85:f4:c8:ac:44:fc:b0:b9:86:1b:
65:de:ba:e5:0c:67:2e:17:0a:6a:87:ee:2f:83:91:
30:e9:26:30:f1:13:bf:4b:c6:79:e8:13:63:a7:dd:
c9:35:15:fa:12:b0:09:51:80:94:c1:1f:2e:65:59:
ed:d6:d4:74:7e:af:99:df:ac:b7:93:4a:a3:67:0a:
fc:46:8a:e6:a8:a6:f4:ea:28:29:0c:55:95:5a:fc:
87:6e:f2:2e:d6:fa:d3:47:ce:9d:40:1d:80:8d:a7:
79:7b:66:3b:9b:57:09:23:3e:1f:81:8e:c2:7a:ce:
34:1d:7c:10:a2:07:24:62:42:ca:a5:e6:ad:f9:df:
c2:50:91:3b:84:a2:48:0d:a6:0a:e7:a7:1b:00:6b:
92:60:f9:3e:e1:03:e9:7d:8a:d5:14:ee:39:4f:2b:
b2:63:34:aa:ef:02:5d:ac:ae:cd:63:d3:84:b5:15:
70:ef:82:3c:93:49:2b:8b:c6:5e:33:92:ba:37:92:
10:c3:a0:a0:cb:be:c1:64:9b:b8:81:a4:b8:bf:f1:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:C0:EA:09:1C:D5:F6:64:20:A7:EA:64:D4:DB:38:EE:17:74:9A
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/tJvA6gkc1fZkIKfqZNTbOO4XdJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:de:04:b9:ae:9c:49:75:00:2c:51:3e:1b:a3:c7:c3:5a:4d:
2c:d5:b5:4c:e7:71:a7:72:b0:28:01:a8:78:3e:bd:e7:07:d0:
27:e0:2c:6e:5a:29:c5:22:45:b3:62:75:40:03:f7:67:bc:fe:
14:17:2c:5f:ff:cc:22:ce:cd:5e:f4:62:6b:4a:c1:03:83:a5:
12:35:ab:7c:6c:34:fe:e5:cd:e2:0d:96:58:e3:73:8c:91:b0:
2e:8c:53:12:94:af:65:2e:01:0c:fc:99:25:e0:33:85:21:b8:
04:cc:1d:68:89:c4:30:78:9e:46:60:b3:2b:6c:c7:4a:59:5e:
c3:44:5f:aa:7f:c6:6a:dc:32:c2:97:cf:b0:1f:2a:1d:01:32:
0d:7e:5f:85:ae:99:ae:86:3e:5d:0d:9a:a4:e4:5c:16:14:50:
02:8b:5d:12:88:5a:92:3f:09:96:df:6a:df:96:4d:c3:43:81:
dd:04:4b:11:eb:49:aa:1c:08:3f:41:84:30:02:ba:60:26:0f:
69:45:0e:81:0d:c3:28:17:b4:d2:33:6b:d3:a5:bd:20:fa:f2:
b2:18:db:10:35:91:24:b2:05:2a:b6:46:ea:8c:25:50:a9:f9:
db:5a:da:e0:10:e4:a9:46:b7:85:9a:6e:f0:bb:1d:66:f7:53:
ec:10:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:15 2024 by rpki-client on console-fra.rpki-client.org