Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/TVxTbBjVy2jC7AqyHIse4_OM1jU.roa
File: TVxTbBjVy2jC7AqyHIse4_OM1jU.roa (raw, json)
Hash identifier: 7keNHTNsMEg+6ghDpgDBeetispIEsO7K6DjYpyR05Y4=
Subject key identifier: 4D:5C:53:6C:18:D5:CB:68:C2:EC:0A:B2:1C:8B:1E:E3:F3:8C:D6:35
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 018CC8010F6C74C2D49A3544876FCE9D8BB9
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/TVxTbBjVy2jC7AqyHIse4_OM1jU.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39311
IP address blocks: 87.237.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0f:6c:74:c2:d4:9a:35:44:87:6f:ce:9d:8b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d5c536c18d5cb68c2ec0ab21c8b1ee3f38cd635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:ad:67:c0:1e:b1:d9:da:31:98:81:37:7b:
83:11:00:80:52:84:32:ff:1f:42:c6:3e:70:d7:7f:
2d:90:39:5b:18:35:52:1c:63:70:fe:5b:20:39:60:
5e:fb:c8:24:75:53:41:2c:10:55:36:62:5b:53:bc:
f8:6f:a7:70:63:60:93:c6:24:4c:b5:75:24:e5:0a:
64:53:c2:b1:e9:4b:12:34:e3:10:a8:43:56:99:cf:
30:83:ce:28:a2:6b:9f:a1:86:ab:c4:4d:03:6d:ad:
92:b4:45:23:e0:2a:0e:24:58:28:b1:2e:1c:44:64:
50:45:25:cc:51:e2:1c:16:cc:1e:92:6f:de:38:04:
68:13:a3:e4:1c:81:55:48:e4:a8:46:15:ff:70:8f:
01:29:45:72:a2:af:fa:e4:4b:2d:7c:19:67:52:13:
d7:25:40:a7:29:c6:f3:78:13:43:f8:9e:03:54:01:
88:6d:38:02:4d:f3:7a:a4:3d:cc:fe:c4:1c:cf:a6:
b4:f5:49:dc:6f:0a:b1:28:5b:91:21:0b:1d:17:96:
7f:bc:be:af:40:82:60:02:2a:eb:84:ec:47:e8:b0:
c7:b8:a9:a1:af:79:52:db:a8:b1:b6:61:a5:8f:3d:
75:90:8a:cf:02:c1:bb:c6:4b:a8:49:d4:6b:66:09:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:53:6C:18:D5:CB:68:C2:EC:0A:B2:1C:8B:1E:E3:F3:8C:D6:35
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/TVxTbBjVy2jC7AqyHIse4_OM1jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3f:9b:a9:a7:3f:c6:fd:c4:d6:ea:da:ac:c8:5a:3e:f2:04:
ec:40:2d:81:01:f8:22:6e:33:25:ec:36:a5:49:e4:09:c5:8d:
d2:98:8c:ab:fa:a5:cc:ed:ed:b2:fd:9a:18:87:b6:bc:56:0b:
28:d7:fc:b7:fb:2d:50:46:0d:13:26:26:b5:b4:be:d6:90:7f:
88:de:08:44:aa:33:7b:76:e8:98:c5:f9:f8:37:ca:e2:44:eb:
4c:db:7e:b5:2e:5e:35:7e:e2:6d:80:c1:c8:f7:e4:ad:3a:1b:
e2:d2:d5:75:f9:31:57:e0:a4:83:87:fd:6f:fb:74:5e:27:af:
a3:f8:2c:3a:e0:d3:1b:4d:c0:4c:d1:6e:66:52:2e:16:24:6b:
3d:48:d6:50:96:cb:ce:c1:27:a3:15:f9:44:e6:90:33:39:6d:
3d:47:17:8a:e7:b7:9c:3a:df:85:86:73:ea:2a:48:1d:1c:6b:
55:7d:75:f6:d1:c8:ed:f9:63:58:76:da:ea:85:79:3a:a4:87:
7d:5f:7a:22:f3:12:24:6a:18:eb:89:01:8c:75:c2:77:e6:2c:
da:69:b5:cc:0a:9b:92:6c:0c:9d:83:be:a9:2a:96:fc:f5:9c:
f7:e3:73:42:2c:82:3e:af:59:39:b8:49:f3:61:9b:28:f6:c2:
f8:dc:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:23:57 2024 by rpki-client on console-ams.rpki-client.org