Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/TTJU7t0LbrNwnqyk10lh_2y7NTg.roa
File: TTJU7t0LbrNwnqyk10lh_2y7NTg.roa (raw, json)
Hash identifier: b0GhabtDwLE4WtTGeU4v3zG6CtD7vaJGJKHK+K9jN4M=
Subject key identifier: 4D:32:54:EE:DD:0B:6E:B3:70:9E:AC:A4:D7:49:61:FF:6C:BB:35:38
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 018CF360DEE3E28474F1EBBFC233F9E98D8B
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/TTJU7t0LbrNwnqyk10lh_2y7NTg.roa
Signing time: Wed 10 Jan 2024 12:37:41 +0000
ROA not before: Wed 10 Jan 2024 12:37:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56788
IP address blocks: 185.166.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:60:de:e3:e2:84:74:f1:eb:bf:c2:33:f9:e9:8d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Jan 10 12:37:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3254eedd0b6eb3709eaca4d74961ff6cbb3538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:b7:ce:94:ed:e5:f1:bc:30:ea:d3:cb:92:
02:7d:ba:b6:cc:c6:0d:54:7a:3b:5d:af:30:3b:12:
82:81:ad:7f:40:a4:98:a6:24:c0:04:f5:75:4f:cd:
25:f3:05:98:7c:51:72:f0:67:ca:77:86:42:ee:8c:
f0:a5:9b:aa:b5:e9:98:f9:fc:b4:61:e6:04:b7:f5:
ef:e5:00:d8:e2:33:91:98:c4:33:48:af:4b:62:e0:
82:34:99:be:6c:2e:bb:a4:07:f3:55:29:28:89:7f:
be:4d:f8:b7:1c:30:ae:bf:9c:73:53:21:1a:b0:74:
1e:00:de:49:7b:f9:ed:1a:2d:19:b0:88:c1:ac:ef:
55:9a:83:09:9b:f1:1d:1c:c5:94:22:e7:87:2a:05:
14:85:2e:d9:b3:de:d3:36:d1:50:2f:16:05:83:8c:
c6:4d:33:9d:3b:46:38:56:02:00:9b:e6:52:73:3c:
22:6d:ec:65:d0:56:ba:31:99:1c:1e:bf:76:e2:7c:
eb:e6:d3:2e:d9:be:ec:46:38:fb:d5:e0:9c:dd:5a:
3f:d0:c8:64:82:88:3f:d3:d8:b5:31:29:fb:7f:62:
d5:7d:b7:c4:96:5d:9e:62:5d:f8:83:95:77:15:da:
7a:12:b3:94:3f:84:65:ea:a7:be:22:8d:8e:e5:26:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:54:EE:DD:0B:6E:B3:70:9E:AC:A4:D7:49:61:FF:6C:BB:35:38
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/TTJU7t0LbrNwnqyk10lh_2y7NTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:40:0e:f1:57:46:68:ad:c7:83:5b:96:f5:02:fa:8b:7e:c3:
cd:5e:59:ed:3c:84:c7:d6:ac:a8:2a:6c:e2:4f:30:a4:4a:68:
ef:5f:49:ff:2f:41:27:a4:f9:a4:51:6e:54:20:d7:2d:2a:68:
e0:f2:54:c9:c0:86:ff:2a:c8:6c:37:fc:c3:16:6a:16:4e:11:
d3:9b:d9:3c:e0:bd:06:8c:9d:6c:ad:1d:b5:02:bf:b2:25:47:
cf:2e:7d:6a:6f:a3:70:64:c2:36:d1:90:29:78:1f:50:ff:9f:
86:43:f8:68:06:dd:d8:a2:be:92:d1:a1:5d:f3:cb:52:f3:cd:
24:41:9a:97:7f:a8:96:25:a7:f0:1c:e6:e0:53:10:6d:77:47:
58:2b:e8:bb:63:77:7e:1e:95:c0:15:29:60:8e:45:89:35:5c:
6a:a6:eb:33:ef:5b:c4:da:bc:85:3f:0c:cd:2b:b9:1f:fb:a3:
8d:0e:08:a1:d3:38:cf:ed:e5:15:bc:1e:0c:09:d1:ea:16:0c:
bc:9e:2e:8a:c0:27:4d:99:37:53:b6:60:94:9d:84:f4:5d:9b:
4b:b7:ff:85:7c:84:3d:68:7b:94:55:12:8e:a9:cd:8e:b6:3d:
c1:74:a3:1a:1d:73:6f:5c:db:24:12:85:73:78:9e:13:15:7f:
79:01:62:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzzYN7j4oR08eu/wjP56Y2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDM4MjkzZjY2OWRiNDhiNmQwYmQxMDM2YWRmZGVmNmJk
M2QzNzUwHhcNMjQwMTEwMTIzNzQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDMyNTRlZWRkMGI2ZWIzNzA5ZWFjYTRkNzQ5NjFmZjZjYmIzNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxG3zpTt5fG8MOrTy5ICfbq2zMYN
VHo7Xa8wOxKCga1/QKSYpiTABPV1T80l8wWYfFFy8GfKd4ZC7ozwpZuqtemY+fy0
YeYEt/Xv5QDY4jORmMQzSK9LYuCCNJm+bC67pAfzVSkoiX++Tfi3HDCuv5xzUyEa
sHQeAN5Je/ntGi0ZsIjBrO9VmoMJm/EdHMWUIueHKgUUhS7Zs97TNtFQLxYFg4zG
TTOdO0Y4VgIAm+ZSczwibexl0Fa6MZkcHr924nzr5tMu2b7sRjj71eCc3Vo/0Mhk
gog/09i1MSn7f2LVfbfEll2eYl34g5V3Fdp6ErOUP4Rl6qe+Io2O5Sb58QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE0yVO7dC26zcJ6spNdJYf9suzU4MB8GA1UdIwQY
MBaAFCbTgpP2adtIttC9EDat/e9r09N1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTIt
NDQ4YjliOTViMDllLzEvVFRKVTd0MExick53bnF5azEwbGhfMnk3TlRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTItNDQ4YjliOTViMDll
LzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaYIMA0G
CSqGSIb3DQEBCwUAA4IBAQA+QA7xV0ZorceDW5b1AvqLfsPNXlntPITH1qyoKmzi
TzCkSmjvX0n/L0EnpPmkUW5UINctKmjg8lTJwIb/KshsN/zDFmoWThHTm9k84L0G
jJ1srR21Ar+yJUfPLn1qb6NwZMI20ZApeB9Q/5+GQ/hoBt3Yor6S0aFd88tS880k
QZqXf6iWJafwHObgUxBtd0dYK+i7Y3d+HpXAFSlgjkWJNVxqpusz71vE2ryFPwzN
K7kf+6ONDgih0zjP7eUVvB4MCdHqFgy8ni6KwCdNmTdTtmCUnYT0XZtLt/+FfIQ9
aHuUVRKOqc2Otj3BdKMaHXNvXNskEoVzeJ4TFX95AWK8
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:54:38 2024 by rpki-client on console-fra.rpki-client.org