Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/Ta4_LCDdK8p_Ntm4P5Frsh18UWc.roa
File: Ta4_LCDdK8p_Ntm4P5Frsh18UWc.roa (raw, json)
Hash identifier: qhYXNRlFr+AmPAm/8z/5zwnK1BPK3L/McBQxIef2Elo=
Subject key identifier: 4D:AE:3F:2C:20:DD:2B:CA:7F:36:D9:B8:3F:91:6B:B2:1D:7C:51:67
Certificate issuer: /CN=4de43a56cbf6afe4356896e0dff529c1796944b4
Certificate serial: 018CC9BC11B8424CA3223546F856C2BB78D3
Authority key identifier: 4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/Ta4_LCDdK8p_Ntm4P5Frsh18UWc.roa
Signing time: Tue 02 Jan 2024 10:33:14 +0000
ROA not before: Tue 02 Jan 2024 10:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213241
IP address blocks: 193.109.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:11:b8:42:4c:a3:22:35:46:f8:56:c2:bb:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de43a56cbf6afe4356896e0dff529c1796944b4
Validity
Not Before: Jan 2 10:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dae3f2c20dd2bca7f36d9b83f916bb21d7c5167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:92:46:15:d9:d1:87:be:b0:fe:a4:07:f7:2b:
2e:c3:b9:67:bc:50:45:69:0f:64:67:df:a4:5f:cd:
41:62:d9:17:b0:9e:97:8c:72:80:d7:9f:a9:51:ee:
72:b8:9e:60:1e:d5:27:51:e9:ce:04:df:1e:7f:c5:
b3:35:53:4a:2c:61:48:9a:76:fb:e5:34:b0:9d:b9:
c1:c4:40:da:ab:f4:d3:40:01:00:ba:62:c6:24:9c:
c7:d5:9b:b6:c5:8d:a7:9a:ef:fe:f6:87:24:37:2c:
2b:71:89:2d:4e:28:3a:7d:8d:c8:86:ce:b0:5a:c1:
d9:8d:b5:82:fd:a0:4b:1a:f8:41:11:3f:4d:c1:c9:
ce:24:8c:0d:11:cf:03:79:a0:65:22:9d:b8:95:22:
d6:57:ea:a8:c5:b3:7b:9b:ec:52:af:b1:2f:e6:33:
31:fc:d8:98:e4:af:99:f4:8a:8a:ed:88:44:1a:b2:
37:17:34:53:90:08:91:0b:79:91:bc:a0:2b:09:17:
a8:b6:9c:13:87:75:df:a5:9f:b6:e9:73:b0:97:c4:
38:d4:06:06:83:d7:0b:7e:e6:c5:57:f3:1e:73:3a:
89:4b:3b:46:77:f0:69:25:31:8d:1c:b0:b5:c9:66:
d8:c8:58:fa:88:c0:2d:38:6a:16:9d:c3:db:b7:fb:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:3F:2C:20:DD:2B:CA:7F:36:D9:B8:3F:91:6B:B2:1D:7C:51:67
X509v3 Authority Key Identifier:
keyid:4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/Ta4_LCDdK8p_Ntm4P5Frsh18UWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.62.0/24
Signature Algorithm: sha256WithRSAEncryption
30:65:4f:39:34:5e:5a:b5:4f:d6:2d:b2:c0:fd:19:0b:e2:30:
24:00:a4:9a:ce:30:94:64:03:ec:d5:cc:db:05:35:06:02:87:
fe:78:48:73:90:78:b7:05:3c:98:d0:b5:ee:3f:3c:83:12:26:
e2:15:6d:b8:b4:44:15:06:68:10:d9:f7:08:17:c7:a9:65:1e:
df:69:80:a5:fa:32:ae:02:da:30:5b:8f:c1:ce:3a:77:4c:3b:
dd:fb:01:8d:6c:f4:77:82:d8:54:f7:5f:18:5e:33:24:01:09:
54:98:19:88:81:df:d0:46:87:c4:22:a9:b6:26:12:ce:05:54:
b4:a4:d5:b9:28:a4:d7:70:4e:54:8b:6e:a4:c8:c9:c0:e6:99:
f4:d7:67:23:78:d6:4f:af:fe:4f:40:9a:a0:15:41:cc:d7:a5:
6b:1e:b1:10:e3:8b:4e:74:3f:9b:3d:d0:95:64:87:2d:e2:70:
66:b8:a4:b0:22:8c:e9:1f:a6:d5:6d:6a:27:8a:a9:3c:e0:8a:
98:09:a4:61:db:a6:12:2b:75:73:18:70:10:ae:72:44:23:f3:
da:6b:3e:8e:b2:a2:04:b0:f6:a1:9a:ac:82:a9:2c:27:4f:d2:
ef:23:82:49:01:b7:72:bf:36:96:a3:59:6a:ac:6c:9b:ba:58:
34:b8:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:03:03 2024 by rpki-client on console-ams.rpki-client.org