Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/T1NeGE98oOylZOGfWhPHxvKxkSw.roa
File: T1NeGE98oOylZOGfWhPHxvKxkSw.roa (raw, json)
Hash identifier: hHSKAXzTpsoZOszTpVgTJecL4NSKa2uAjcwrDoCYbiw=
Subject key identifier: 4F:53:5E:18:4F:7C:A0:EC:A5:64:E1:9F:5A:13:C7:C6:F2:B1:91:2C
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 018CC2DB1EE7B761B7283B3C44F713EF4EE6
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/T1NeGE98oOylZOGfWhPHxvKxkSw.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198247
IP address blocks: 141.105.160.0/23 maxlen: 23
185.26.24.0/24 maxlen: 24
185.203.228.0/24 maxlen: 24
185.203.230.0/23 maxlen: 23
185.203.229.0/24 maxlen: 24
2a02:f407:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1e:e7:b7:61:b7:28:3b:3c:44:f7:13:ef:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f535e184f7ca0eca564e19f5a13c7c6f2b1912c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:2e:9c:85:0e:16:5d:45:f9:31:f2:4d:30:
e9:02:92:38:9d:8a:6b:6c:17:08:98:59:a2:0e:23:
24:ef:c2:ee:8c:33:d8:a3:5c:a3:01:18:79:6e:38:
25:ac:a4:00:b9:76:c4:8b:d8:ce:9b:ac:4e:ea:4f:
27:83:0c:a4:1a:dd:68:e1:f7:04:dd:24:68:9c:ba:
99:35:67:86:d3:22:1a:86:d4:39:88:6d:8e:fa:e0:
7f:b5:5c:da:9b:35:e6:aa:b2:83:b1:8a:21:2e:48:
d3:1f:74:95:69:ea:be:b3:00:9b:85:8f:3d:dc:dd:
0c:1c:96:e9:70:01:39:06:ce:31:7b:67:ae:52:9c:
98:f0:76:2f:a7:c5:ee:0b:8f:f9:dc:8c:41:fd:ed:
41:0d:42:df:ce:e3:e6:cf:43:6e:33:ff:76:3a:b3:
af:71:2d:1f:56:66:60:28:c1:50:dd:f4:7e:01:42:
95:9d:d6:aa:cf:28:a5:f2:84:51:7d:8a:fb:a4:45:
f7:80:51:cd:e9:52:5d:57:3d:b4:16:e8:b4:0d:c7:
bd:86:66:ae:b1:38:1d:d0:6f:ea:a8:a6:69:30:35:
8f:b8:6f:df:2f:0c:78:de:17:dc:64:e7:5f:71:8d:
4a:8e:e0:a6:b9:be:c2:99:fb:b0:47:65:06:57:80:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:5E:18:4F:7C:A0:EC:A5:64:E1:9F:5A:13:C7:C6:F2:B1:91:2C
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/T1NeGE98oOylZOGfWhPHxvKxkSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.160.0/23
185.26.24.0/24
185.203.228.0/22
IPv6:
2a02:f407:4::/48
Signature Algorithm: sha256WithRSAEncryption
0c:7f:b2:9e:65:a7:74:0b:17:49:7b:f7:96:a1:1e:7b:79:e6:
be:e9:7d:ef:46:02:48:bd:ef:ba:e3:62:f5:05:c0:3a:ff:7b:
5b:97:17:5e:ba:22:05:a9:b1:89:fe:fc:2d:a7:79:20:7f:ba:
d7:ea:49:3c:e5:eb:f2:e9:fa:48:d1:e8:48:38:7b:8b:f9:34:
a9:ed:76:c6:2f:a4:56:c9:3b:82:2f:5d:2b:af:d7:79:af:71:
7d:6e:f0:68:32:90:7a:5c:dd:7e:f8:12:e0:22:29:a8:f7:28:
c0:45:19:75:42:ab:d1:69:b1:50:10:8e:7c:3d:76:fe:26:f2:
f8:d5:e2:6f:ac:cf:b6:c1:fb:74:c9:c7:13:c1:d7:0d:e4:0c:
e6:91:b5:bd:35:b8:6f:7f:85:9b:e3:d1:56:48:b9:7f:46:33:
65:81:b0:94:cb:da:81:d9:d2:7d:26:8e:0c:5a:ae:c9:a7:b8:
e5:ea:ab:97:80:21:06:61:1f:70:f9:1f:d1:a0:b9:3f:88:d3:
b7:4e:ff:35:91:e1:cb:d5:5c:66:7c:4a:69:8c:00:9e:5c:34:
9e:ac:f0:b3:e0:24:5a:9a:ac:89:e4:fe:4f:ec:74:54:fd:fe:
be:e6:0b:98:a0:c0:ab:c7:f6:5b:4b:5e:f3:a5:e3:61:60:c8:
14:01:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:07:19 2024 by rpki-client on console-fra.rpki-client.org