Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/T2TQBP2M-ozSXCU3Y4Mu9q7krII.roa
File: T2TQBP2M-ozSXCU3Y4Mu9q7krII.roa (raw, json)
Hash identifier: +MSVwQxtZ0x6fNylMegp4t5xiJj060RfaKoiRIb8lXE=
Subject key identifier: 4F:64:D0:04:FD:8C:FA:8C:D2:5C:25:37:63:83:2E:F6:AE:E4:AC:82
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 018CC64B55C95CC9E53A30F9A32BBAD117DF
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/T2TQBP2M-ozSXCU3Y4Mu9q7krII.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206176
IP address blocks: 45.135.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:55:c9:5c:c9:e5:3a:30:f9:a3:2b:ba:d1:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f64d004fd8cfa8cd25c253763832ef6aee4ac82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:9f:f6:fa:17:f9:e5:4b:e2:0a:95:d5:b2:
e2:d2:d8:9b:ef:4f:17:6a:18:4e:5f:aa:71:ba:24:
92:b5:a3:67:6f:93:a6:09:a1:34:b7:6e:09:bb:85:
99:59:ae:02:78:9f:1c:c8:7b:e8:2b:68:93:1c:e0:
55:48:2f:5c:b7:8e:a3:30:7d:26:a1:25:68:a0:c9:
3d:93:3f:27:51:b0:44:ec:c5:d9:44:a4:42:52:7d:
29:96:98:be:aa:85:3c:34:7f:2f:b2:e4:53:b2:45:
9e:b5:e5:c6:40:41:71:2a:47:79:8e:c6:ae:b2:bd:
87:45:dc:77:42:a1:5d:a9:49:5e:c1:4b:19:d2:d7:
92:16:ff:a2:16:1a:cc:f3:2c:91:c4:f4:64:4a:80:
ba:a2:d5:9a:a3:8b:be:ef:ae:f5:65:f1:68:7a:ab:
60:12:14:17:7f:7c:64:84:96:5e:f2:d6:c6:d4:68:
a5:c2:76:ef:9a:d1:9e:04:ec:d4:3f:f0:c0:18:a2:
25:f5:87:bc:82:ae:8d:62:ed:b3:15:49:20:a3:06:
82:b4:b7:dc:fc:ad:ee:7f:1c:8e:98:3d:dd:bc:e6:
29:cd:16:44:73:f6:3d:dc:0e:91:33:ed:91:b4:3f:
03:32:ff:00:54:6b:0f:6d:33:fa:d2:85:ed:bd:48:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:D0:04:FD:8C:FA:8C:D2:5C:25:37:63:83:2E:F6:AE:E4:AC:82
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/T2TQBP2M-ozSXCU3Y4Mu9q7krII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:a8:ed:42:28:5e:4d:28:0d:7c:b7:0b:ef:6d:65:2a:36:ba:
bf:ea:65:48:e6:37:19:e5:bf:2e:ce:a3:77:58:67:8e:3c:53:
d5:3e:f3:7e:fc:3b:76:9a:b4:65:9c:95:ea:87:4d:6c:3c:8e:
55:1b:bf:36:46:a6:c2:03:d1:41:33:42:ae:dd:24:42:7d:3b:
12:e5:2f:9e:ed:d1:3f:c9:23:62:bb:b5:a6:21:44:10:b3:51:
2b:67:05:25:76:8d:04:b9:70:79:7d:54:bb:7b:fa:8f:40:23:
1d:68:09:1c:26:d5:ac:92:b3:43:f4:90:65:de:d3:e8:ba:2a:
fe:5f:cd:74:8f:db:ba:db:d1:11:12:62:84:db:c9:4b:1f:82:
84:9f:3f:31:0e:bc:1d:e3:05:9a:0e:a9:6a:63:88:77:5b:61:
63:6c:4c:2d:e2:66:d4:66:48:b7:9c:aa:d3:c6:44:1d:a8:3e:
83:8f:56:c9:59:7e:00:71:80:f0:20:35:f4:23:60:42:d5:31:
d9:21:39:90:8c:5c:13:5f:31:fa:7d:09:b9:15:98:dd:86:5b:
a6:8c:89:05:6d:bc:11:92:96:c3:ee:15:f1:66:9d:3a:63:7b:
a1:db:ad:10:ed:4d:ee:64:14:bc:fb:62:16:81:98:fb:23:cb:
64:63:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 08:52:46 2024 by rpki-client on console-ams.rpki-client.org