Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/tuVp8nEe--sFqLfT3FANQ6oj0gE.roa
File: tuVp8nEe--sFqLfT3FANQ6oj0gE.roa (raw, json)
Hash identifier: NC+TNJUzgOSrOoJtRYQer9BaNSdJqMYIXHLM/s/z4p0=
Subject key identifier: B6:E5:69:F2:71:1E:FB:EB:05:A8:B7:D3:DC:50:0D:43:AA:23:D2:01
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 018CC7942212170425500B9841718A2E39E2
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/tuVp8nEe--sFqLfT3FANQ6oj0gE.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14413
IP address blocks: 144.2.192.0/19 maxlen: 24
144.2.0.0/19 maxlen: 24
185.63.144.0/22 maxlen: 24
144.2.176.0/20 maxlen: 24
2a04:f540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:22:12:17:04:25:50:0b:98:41:71:8a:2e:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e569f2711efbeb05a8b7d3dc500d43aa23d201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:ec:a1:b4:4d:09:98:e5:53:76:13:de:31:
04:a2:08:d5:dc:49:46:93:8b:ea:b4:6a:c8:cf:63:
46:0d:f7:a6:8b:55:0f:bd:17:4e:33:17:a7:f4:6e:
64:33:f6:1c:4a:42:d8:be:c5:d6:dc:14:73:c9:87:
ef:c5:ea:6e:5b:37:88:10:85:bf:50:7f:31:ad:bc:
9c:e1:c3:9e:b7:a8:b0:e6:29:dd:4a:4a:b7:1e:29:
02:ba:15:5c:6d:74:d9:72:60:83:70:1a:bd:26:45:
44:c0:a8:33:ed:16:d9:2f:bf:e0:b0:14:aa:1b:b2:
b8:af:3c:42:3a:81:63:53:b5:ee:83:f2:0a:09:cf:
84:ca:3f:e9:17:19:4a:c0:a8:aa:71:92:37:3e:3a:
bb:e5:e1:24:65:b8:27:86:6d:b0:8e:72:b7:e4:e8:
ef:46:2c:a9:32:48:e7:6c:f7:aa:b6:14:4c:fe:bb:
c9:e0:ac:09:00:95:cc:82:19:de:52:62:98:17:7c:
29:f4:86:a6:1b:12:80:5e:b5:d2:4e:9b:ac:4e:f0:
17:64:af:93:ab:2a:46:88:d1:65:d9:0a:64:74:b9:
90:f1:e7:53:cc:2c:ca:09:fa:cf:60:07:dd:e0:f7:
d1:c3:9e:ee:f8:cf:bf:c5:21:2b:c2:b2:34:41:0b:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:69:F2:71:1E:FB:EB:05:A8:B7:D3:DC:50:0D:43:AA:23:D2:01
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/tuVp8nEe--sFqLfT3FANQ6oj0gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.0.0/19
144.2.176.0-144.2.223.255
185.63.144.0/22
IPv6:
2a04:f540::/29
Signature Algorithm: sha256WithRSAEncryption
6d:d6:f7:1b:4d:2e:94:3b:47:7e:19:f6:31:62:5d:0f:41:a4:
08:c5:42:9d:26:be:9f:87:12:ea:0f:77:1f:c7:67:7f:56:51:
1e:5e:8c:73:d0:4e:fb:fd:ab:f6:84:79:42:2b:b9:0b:29:8b:
62:c9:15:f6:98:50:23:f7:b0:53:dc:8e:7d:b8:00:42:6f:90:
10:48:a7:9f:fe:5d:83:a7:a8:75:b5:fc:c1:31:da:63:23:8e:
c2:88:a7:14:4d:c4:af:75:8f:60:b5:4a:ec:36:0b:10:07:4f:
4d:bd:15:c2:c4:19:69:1d:9b:4e:fc:72:83:29:9d:6c:7c:28:
eb:d8:d6:b9:9c:b5:56:05:7f:18:d5:2c:9d:a0:a8:ae:9c:79:
a8:80:43:77:cc:32:ad:f4:cb:20:29:ce:72:2a:8b:df:5e:5a:
7f:60:9d:34:22:6a:74:04:db:d4:be:81:0c:59:80:32:dc:c3:
63:a0:ba:8f:39:a1:23:c0:df:a8:e8:31:31:4a:f8:72:4c:a9:
1f:bb:52:61:29:00:6a:04:e6:84:d6:df:50:e9:59:0a:8f:4a:
f2:d3:1a:d5:2f:ac:19:ae:f9:c8:9f:30:e7:07:ad:d0:d1:ac:
6e:7d:77:2e:1c:6c:90:2e:de:b3:9c:b1:e3:8a:f7:2b:51:e6:
75:03:97:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:18:27 2024 by rpki-client on console-fra.rpki-client.org