Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/TpBBQXynVRsq_Xooe1wjBnYvjx0.roa
File: TpBBQXynVRsq_Xooe1wjBnYvjx0.roa (raw, json)
Hash identifier: hIdi84CODxWDT2FgapB+qMPK0yym2zg6mSCYe8SEyis=
Subject key identifier: 4E:90:41:41:7C:A7:55:1B:2A:FD:7A:28:7B:5C:23:06:76:2F:8F:1D
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018F2E86E1EE16DFEFA611BEE4F2195E2C92
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/TpBBQXynVRsq_Xooe1wjBnYvjx0.roa
Signing time: Tue 30 Apr 2024 10:22:22 +0000
ROA not before: Tue 30 Apr 2024 10:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 5.44.42.0/24 maxlen: 24
31.129.22.0/24 maxlen: 24
37.220.86.0/24 maxlen: 24
45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
45.129.187.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
92.118.112.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
195.80.49.0/24 maxlen: 24
212.60.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:86:e1:ee:16:df:ef:a6:11:be:e4:f2:19:5e:2c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 30 10:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e9041417ca7551b2afd7a287b5c2306762f8f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:70:6e:f5:57:0c:51:86:19:d1:d8:e8:8a:
74:61:7f:9b:91:71:f6:1b:f8:2e:f4:c6:d4:d5:04:
49:12:71:1d:b1:36:a0:30:96:12:27:e7:35:47:3c:
dc:ca:7e:56:6f:25:68:54:1a:d9:b5:0f:ee:8b:14:
70:2a:fc:55:ce:f6:32:97:81:46:ad:1e:d9:fa:35:
16:68:b2:25:99:fd:60:19:d5:5f:42:39:c1:f7:2e:
be:2c:00:cc:9f:80:36:02:27:30:57:82:7e:a3:45:
e8:c2:73:c1:63:27:d6:92:c1:ee:d1:4b:b4:43:cd:
ef:1b:8d:17:04:d9:76:3c:08:c5:30:f9:58:6b:3c:
ad:8a:2e:8e:d4:10:a3:66:8e:f4:64:5b:88:d3:f7:
60:ca:32:a0:cc:37:c2:22:8d:fa:d4:b3:d2:25:07:
7f:d0:a4:da:d6:0d:0e:f2:36:c1:bf:ff:8c:10:64:
ff:b1:3c:2b:ff:ea:a8:3c:8e:c4:59:2d:2c:91:57:
2f:3f:3b:b2:8e:42:0b:65:89:81:a6:93:86:8b:0c:
8f:cd:a9:1a:7d:ca:63:4b:9a:53:6e:bd:23:c5:89:
b7:f5:0a:ca:ac:06:6d:9c:8a:2d:64:39:ca:5f:bc:
bb:0f:ce:e5:10:b0:4b:80:64:91:df:53:4a:7f:b6:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:41:41:7C:A7:55:1B:2A:FD:7A:28:7B:5C:23:06:76:2F:8F:1D
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/TpBBQXynVRsq_Xooe1wjBnYvjx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
31.129.22.0/24
37.220.86.0/24
45.95.232.0/23
45.129.187.0/24
77.83.116.0/24
89.191.232.0/24
91.107.116.0/24
92.118.112.0/24
141.98.233.0-141.98.234.255
185.247.184.0/24
194.28.192.0/24
195.80.49.0/24
212.60.23.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d0:f9:34:ea:3a:b6:06:cb:98:4f:8a:68:e0:5b:31:eb:ef:
19:ba:5e:32:26:de:c2:bc:62:e6:de:d3:a1:1a:f3:d8:55:f4:
02:4f:20:ec:92:4e:0c:7c:62:61:27:33:34:5b:25:08:a2:04:
13:f7:18:10:67:4c:7a:a0:f6:1e:16:70:63:c1:9c:cb:fe:4a:
4b:f8:9a:0c:75:1c:44:8b:ea:3d:8c:e9:31:f0:b8:f7:c0:de:
df:1a:ec:2d:89:2f:9a:ef:26:54:81:5a:b4:22:c2:54:4d:4c:
66:a0:81:81:ee:d3:08:d8:8a:75:ac:51:27:58:48:f0:a9:08:
1b:92:10:b2:01:09:ad:50:7d:cc:a6:b5:00:2f:ba:28:9a:c1:
92:9f:0f:f6:b7:5d:c0:dd:1a:54:b0:15:74:d8:ac:ed:72:e6:
07:34:24:7d:29:0f:01:84:f4:c1:cc:6d:71:f2:2c:5e:4c:1c:
6c:ef:e8:bd:d8:f1:a6:a4:e4:92:31:35:6b:a0:30:47:5f:f4:
92:41:4e:59:f1:2f:68:36:60:0b:23:b6:a0:c3:c8:89:21:f0:
12:4a:d8:ca:96:ba:66:33:4c:5e:b2:02:1a:7f:9c:1a:fb:cd:
1e:5e:3d:84:a8:6b:80:6b:f3:e5:a5:46:32:b7:0f:ae:04:a9:
44:e0:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:47:19 2024 by rpki-client on console-fra.rpki-client.org