Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TTXHAGKGrfj6zVg0TR0PekwW1iA.roa
File: TTXHAGKGrfj6zVg0TR0PekwW1iA.roa (raw, json)
Hash identifier: CAhpQ8gPVY3FD//QsxbOQssDP/mg81s0EWauvtJ10OE=
Subject key identifier: 4D:35:C7:00:62:86:AD:F8:FA:CD:58:34:4D:1D:0F:7A:4C:16:D6:20
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0192A558DD98EFF0876F59BAD3385E23C9D0
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TTXHAGKGrfj6zVg0TR0PekwW1iA.roa
Signing time: Sat 19 Oct 2024 15:15:17 +0000
ROA not before: Sat 19 Oct 2024 15:15:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56619
IP address blocks: 94.233.176.0/24 maxlen: 24
94.233.177.0/24 maxlen: 24
176.208.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a5:58:dd:98:ef:f0:87:6f:59:ba:d3:38:5e:23:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Oct 19 15:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d35c7006286adf8facd58344d1d0f7a4c16d620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:d5:98:f2:b6:03:d7:6b:aa:a6:4e:45:3c:
ef:b0:de:d1:b4:9e:fe:24:f4:cc:e0:f8:9e:23:7a:
04:4a:a2:ca:ac:fe:13:b1:3d:40:e6:bd:5a:d4:dd:
2a:d7:c1:6b:d2:bc:3b:4c:58:26:fb:f1:5e:4c:3b:
55:2c:75:3d:2f:84:29:86:b4:5a:e9:6e:51:d2:1c:
c7:e2:6a:1f:22:df:c3:8c:0d:8f:ae:cd:1c:80:d3:
ee:9a:12:ff:e0:c7:04:90:58:9f:cc:15:f1:62:fa:
3d:99:24:69:a9:7a:9d:e7:e0:31:24:0d:f5:63:c2:
a4:ef:b0:a2:75:61:ee:c9:b1:e8:0b:a8:51:16:3f:
97:a3:07:86:00:ee:16:21:ab:69:7e:db:1e:32:e7:
6e:a5:8d:cd:70:03:40:de:5e:e9:23:04:7d:18:ab:
5c:e7:02:c6:7a:fc:06:15:bb:f1:06:b7:fc:41:e6:
cc:72:8d:dc:1c:15:37:e9:0f:0f:a8:cc:80:89:2a:
bc:e6:60:26:fa:0f:4c:62:49:c4:5e:8d:6f:bc:cb:
a8:8a:c3:eb:30:0a:4f:c5:34:42:39:a0:7a:09:4b:
b9:f2:9d:f4:f8:53:65:27:66:b4:37:53:67:c0:54:
1a:b0:3a:4a:1c:93:7a:98:db:26:10:d9:17:26:91:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:C7:00:62:86:AD:F8:FA:CD:58:34:4D:1D:0F:7A:4C:16:D6:20
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TTXHAGKGrfj6zVg0TR0PekwW1iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.233.176.0/23
176.208.94.0/24
Signature Algorithm: sha256WithRSAEncryption
29:52:e8:92:73:71:a6:ee:42:54:54:e9:a1:9b:95:cd:cb:90:
5a:bd:3e:2f:e3:8b:06:0c:5e:f2:eb:ca:7a:0c:8b:77:36:09:
97:8a:34:9e:e2:24:4c:2c:8c:a4:b8:2e:cb:4b:23:ec:f3:24:
1d:0f:4b:31:50:49:3f:a7:5d:d0:25:7b:8d:c4:3e:96:12:8a:
fa:d5:9d:c5:03:8d:f2:4b:b3:a8:bb:30:a6:1e:73:95:09:d2:
05:b7:50:3c:6d:40:68:69:fd:d0:64:d5:62:02:87:b5:76:92:
2f:06:14:c0:7f:ff:dc:7f:2f:5d:e0:d2:dd:f5:99:77:0f:a0:
b8:56:b9:a0:22:7d:99:be:45:d4:61:36:cd:6e:9a:0d:fc:49:
1a:c4:33:f0:1d:2d:62:54:a8:56:57:13:9d:8a:17:7f:94:75:
85:d0:9d:76:63:86:86:d0:3d:32:49:cc:b0:23:38:9e:8e:46:
6b:4e:5a:2c:85:d7:29:39:5f:7c:a1:cb:c0:de:7e:dd:ec:bb:
14:a5:95:89:cc:a1:d5:c6:73:dc:de:72:c0:cb:9c:68:c0:04:
73:54:c0:75:1f:d3:19:c6:0c:91:1f:81:81:8e:ab:eb:66:39:
a6:17:f7:b3:f0:b0:7f:1b:e1:41:bb:7f:88:21:09:85:60:d6:
d6:0c:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org