Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/tPjWmCvY0728lZgjNkJrlTTymxg.roa
File: tPjWmCvY0728lZgjNkJrlTTymxg.roa (raw, json)
Hash identifier: jmHWBYtmsEC9Y1g89ITUpbzizkyr4CtKZLbuGYznujM=
Subject key identifier: B4:F8:D6:98:2B:D8:D3:BD:BC:95:98:23:36:42:6B:95:34:F2:9B:18
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 018D79087C63262B4AAF7D489D3DAC6DBE28
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/tPjWmCvY0728lZgjNkJrlTTymxg.roa
Signing time: Mon 05 Feb 2024 11:30:15 +0000
ROA not before: Mon 05 Feb 2024 11:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213098
IP address blocks: 185.222.20.0/24 maxlen: 24
188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
2a0c:9c0::/48 maxlen: 48
2a0c:9c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:08:7c:63:26:2b:4a:af:7d:48:9d:3d:ac:6d:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Feb 5 11:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f8d6982bd8d3bdbc95982336426b9534f29b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:6b:fb:55:0e:88:10:1e:f7:fb:6d:64:02:
20:85:fe:fb:61:9e:4c:bd:64:e5:c2:88:5e:a3:b4:
03:2b:b1:83:d3:7a:cc:01:12:ef:e0:ed:a9:92:40:
89:dc:ef:0b:e6:ec:86:37:91:96:13:a5:23:bf:11:
55:61:8f:45:0b:1f:15:91:b5:ca:f4:a9:88:e5:6f:
c8:24:2e:fb:da:66:31:7a:c9:e4:69:a3:d9:3c:24:
ad:48:9a:eb:9f:60:d9:2c:ad:72:ff:d6:1a:01:16:
52:af:11:2c:13:36:88:9a:26:f3:f7:48:59:57:75:
0b:fa:03:b9:cc:55:db:c3:eb:1c:24:a9:f6:00:b1:
61:ab:78:f7:83:3f:22:6b:79:cc:81:aa:89:a4:3b:
fb:17:7e:9d:35:8f:bb:f4:bd:b2:10:e0:ec:87:ed:
27:03:12:cc:74:f2:6a:25:9c:24:a2:d2:3c:95:65:
05:3f:49:5c:85:5d:d3:b1:db:12:36:0b:e5:19:19:
70:9a:8d:34:da:f5:c9:c4:fe:9d:43:0b:48:16:93:
8f:c6:1c:74:e8:9b:3c:c8:49:91:ee:3e:ee:9a:83:
6a:10:99:54:c5:a1:d7:f3:c1:9d:a7:5f:38:1b:f5:
ef:04:c9:7c:da:2e:40:3f:a3:81:26:75:34:75:05:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:D6:98:2B:D8:D3:BD:BC:95:98:23:36:42:6B:95:34:F2:9B:18
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/tPjWmCvY0728lZgjNkJrlTTymxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.20.0/24
188.72.42.0/23
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
8c:f3:0e:4f:25:62:da:9d:0c:3a:3f:b5:56:2f:90:87:90:f1:
70:72:ed:be:22:85:96:78:b1:8a:75:a8:f5:17:96:43:2d:e2:
63:aa:c1:ee:c9:4e:93:00:0a:00:eb:b5:a1:4f:a6:c9:99:c0:
55:51:a9:6a:ca:a4:db:8c:2a:d8:2c:04:98:35:99:e4:12:a7:
59:15:44:2d:42:2e:01:2d:b3:58:6a:0f:5c:9a:ba:a8:97:14:
e9:8a:fe:44:5a:d8:c7:b3:3f:bc:1e:7f:16:d2:45:6a:fc:20:
56:70:32:7c:73:5e:8c:81:9c:80:0f:91:9b:db:62:e7:cf:38:
ec:4b:05:09:eb:5d:eb:89:96:e9:b0:c2:3e:2e:0d:3d:8b:fe:
26:5c:dc:33:bd:dc:7e:f4:4a:dc:75:78:6b:0e:fc:a0:0f:f7:
bb:b8:c9:25:13:2e:2d:30:2b:cf:52:c2:e5:44:5d:82:2f:eb:
e7:e6:0c:5e:05:51:9d:38:88:f9:f3:5e:d9:c8:7e:cf:61:1d:
4b:42:5d:b2:dd:ac:d6:e3:ee:df:a5:6c:04:48:91:48:8c:05:
34:c1:d4:6f:40:30:06:9f:f2:d3:56:94:70:a6:48:5a:e6:d9:
c9:7c:b5:33:ef:c1:aa:2e:f9:ef:19:ee:d1:2f:68:5b:bd:62:
94:13:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:58:07 2024 by rpki-client on console-fra.rpki-client.org