Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Tz4-ln_BHiJ01UHtiraVh6e0B88.roa
File: Tz4-ln_BHiJ01UHtiraVh6e0B88.roa (raw, json)
Hash identifier: Hs0kdHPOe+uGMkg/TghgwPE1Wktk6UWmcqM1aWtcFYE=
Subject key identifier: 4F:3E:3E:96:7F:C1:1E:22:74:D5:41:ED:8A:B6:95:87:A7:B4:07:CF
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC8020B4595BB51E48F8546733ABB628D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Tz4-ln_BHiJ01UHtiraVh6e0B88.roa
Signing time: Tue 02 Jan 2024 02:30:26 +0000
ROA not before: Tue 02 Jan 2024 02:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209313
IP address blocks: 94.25.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:0b:45:95:bb:51:e4:8f:85:46:73:3a:bb:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f3e3e967fc11e2274d541ed8ab69587a7b407cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:15:0f:4c:85:75:9e:3d:3e:28:20:c4:29:
fc:08:8d:16:db:0d:b5:ee:de:a7:ed:13:5d:24:d2:
34:6a:30:40:a7:ab:a7:bc:ad:4e:4b:fd:c1:2e:60:
0d:2b:46:81:46:e4:28:f7:bd:06:d0:24:78:eb:3c:
34:6e:e7:c1:1e:95:8f:49:be:e9:52:1b:b4:77:d2:
85:81:b0:ed:12:b4:18:ac:05:8c:2f:dd:7f:83:0e:
67:55:87:6b:81:c4:28:fa:7a:d7:7f:23:71:db:57:
91:20:df:f3:b1:15:65:67:cc:51:b9:64:02:65:97:
27:53:78:1a:59:1c:4c:17:13:73:80:ff:b1:0f:0a:
aa:5d:04:bb:c0:b1:8a:3f:a3:4b:23:3e:93:8d:02:
b0:af:7f:65:f7:ce:d0:f0:68:49:24:e1:21:c4:a3:
00:39:c7:b6:7a:d2:b1:2a:ce:91:ed:8f:d8:51:88:
3b:0e:de:18:90:a0:2a:e4:67:e0:ea:65:2c:a9:ee:
02:7f:a7:9d:ff:f1:86:b6:1b:92:a3:8c:7e:c9:b3:
8c:07:a4:9a:a4:4e:00:24:86:70:9f:54:9d:b5:15:
13:c7:c3:6a:16:dc:82:43:8a:1c:df:29:ca:fb:ba:
3e:04:dc:8f:2c:2e:a7:94:83:e9:55:3d:c2:e5:72:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:3E:96:7F:C1:1E:22:74:D5:41:ED:8A:B6:95:87:A7:B4:07:CF
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Tz4-ln_BHiJ01UHtiraVh6e0B88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.30.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a3:be:f7:8f:8a:c3:37:b3:e8:e8:cd:ec:85:d4:71:ec:f2:
d4:43:f3:2b:0e:17:ce:45:4e:fc:fd:62:26:7d:3e:33:95:ed:
92:c0:82:dc:3b:b6:fd:0b:6b:c7:11:03:81:3d:89:e0:b8:0f:
92:b5:b4:df:ee:85:ae:86:90:e0:68:d8:4c:a5:f6:35:2b:57:
2c:67:14:f2:cc:69:14:b5:c4:76:bf:57:f4:77:48:51:7e:81:
cc:b6:fc:ed:4f:71:41:25:f9:d6:15:61:44:94:cf:ec:a4:ee:
0c:09:94:cb:8b:c9:19:22:9e:f1:fc:14:d9:2f:71:19:4f:00:
97:d8:f8:1f:a6:cb:a8:ec:ec:ef:c4:d8:86:a0:f8:c6:e8:a2:
e7:b6:b1:d3:5c:30:ab:6a:f0:6a:c1:38:53:21:ca:7d:d8:6e:
c0:30:09:7c:af:70:8b:02:37:62:f2:57:07:53:65:ff:87:a2:
90:d3:e1:76:5d:96:66:0e:2f:89:ec:f3:e3:bf:65:7e:74:86:
28:c0:61:4a:dc:d5:ed:37:a3:d5:c7:6b:9d:29:c1:44:dc:c7:
d6:78:3e:46:df:e4:6a:d7:8b:dc:60:af:25:61:29:5b:a2:d1:
9f:36:7a:d1:3c:8d:35:9d:c4:af:5e:01:d6:3b:37:27:9f:2d:
77:84:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:42 2024 by rpki-client on console-fra.rpki-client.org