Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TBEgZEZ1Bje3461QTfAsNN8uJMU.roa
File: TBEgZEZ1Bje3461QTfAsNN8uJMU.roa (raw, json)
Hash identifier: MzMAXK7QuCk8CxACFlXYng8XSk9X4AgqoHkzidy37Xo=
Subject key identifier: 4C:11:20:64:46:75:06:37:B7:E3:AD:50:4D:F0:2C:34:DF:2E:24:C5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE81148F03C92DDC233CBEFE07A228
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TBEgZEZ1Bje3461QTfAsNN8uJMU.roa
Signing time: Tue 02 Jan 2024 06:31:14 +0000
ROA not before: Tue 02 Jan 2024 06:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 45.15.143.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:81:14:8f:03:c9:2d:dc:23:3c:be:fe:07:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c11206446750637b7e3ad504df02c34df2e24c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:94:fa:24:d1:5a:38:dc:c3:66:ac:6a:1c:
23:9d:a0:8b:c5:f0:a3:a9:78:bb:a7:e2:f1:dd:bd:
b9:78:2b:79:65:b9:40:d7:dc:27:61:c2:95:23:72:
a2:b1:97:06:36:e1:f3:55:cf:d7:e3:11:d4:78:cd:
d9:b0:df:15:c7:0c:74:99:0e:44:ae:39:db:51:8b:
2a:6d:5f:f0:bc:b5:b8:dc:76:ab:48:9f:bf:50:2f:
d0:f9:6d:aa:bb:0c:1b:c2:75:cd:95:dc:cc:48:6b:
3c:ed:a6:78:e5:7d:69:dd:e2:7d:d5:a1:65:11:a5:
53:e7:a4:0a:20:b9:12:6a:dd:06:37:a4:3d:ef:7d:
a0:14:1b:41:72:e2:03:ba:b2:ef:26:84:6f:dd:b8:
5d:e9:a0:90:8b:de:f3:7c:f7:50:8b:83:1d:1d:26:
b5:f0:6a:12:63:27:79:16:d1:af:ea:5a:d5:42:32:
e1:1e:f4:07:62:67:b9:00:09:95:c0:0a:a3:64:71:
cd:09:30:71:e0:fb:0a:6d:67:90:ec:db:81:3d:4e:
31:6f:18:be:d0:f6:f4:8a:4c:60:ac:39:a2:49:91:
a3:71:a5:4d:b6:d6:cb:88:22:c9:6c:e1:ed:d6:69:
4f:ca:3b:15:1d:fa:9c:b4:05:0f:4e:f3:53:09:6f:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:20:64:46:75:06:37:B7:E3:AD:50:4D:F0:2C:34:DF:2E:24:C5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TBEgZEZ1Bje3461QTfAsNN8uJMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
45.15.143.0/24
45.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f7:6c:b4:f1:06:fd:57:26:ea:ab:31:5d:67:09:73:b0:14:
4f:31:3a:fa:63:b7:cd:17:e6:0e:0c:72:b0:96:01:22:53:1b:
a1:7b:e2:e9:14:6f:98:9b:95:04:3a:7e:fc:13:a2:82:c7:57:
cc:69:20:89:94:93:51:b2:18:43:02:cf:68:fd:e0:cb:9d:f0:
2f:7c:16:5b:52:c4:02:a8:bd:b0:c8:9a:f7:8e:0d:ec:c7:b9:
85:ae:d5:9a:13:de:24:e5:5e:98:33:12:37:1f:19:e1:23:8b:
7d:e3:a6:fa:90:66:56:80:ba:59:2c:ba:9f:c5:6c:72:66:39:
16:33:02:1a:36:82:d9:53:4d:2a:28:65:ed:e8:53:aa:61:22:
94:6b:87:c3:9c:38:d1:2a:94:5a:01:7d:23:79:ed:7b:02:da:
ca:a2:44:14:e5:f0:59:41:41:63:0d:e7:41:f3:81:e9:ee:12:
74:27:b9:66:7e:a7:75:0a:cf:fa:e3:e4:6a:7b:8e:b0:9f:8c:
b7:fc:42:2f:8a:7a:8a:a3:b9:50:e0:d6:d8:cc:a8:6a:50:98:
c5:91:c0:fc:bc:a6:f4:df:61:0e:5d:c4:8d:4a:81:c2:50:e1:
cd:49:7b:41:b5:62:a5:34:28:48:e5:8b:d4:ae:75:59:6d:df:
2e:02:6c:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzI3oEUjwPJLdwjPL7+B6IoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwMTAyMDYzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzExMjA2NDQ2NzUwNjM3YjdlM2FkNTA0ZGYwMmMzNGRmMmUyNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo52U+iTRWjjcw2asahwjnaCLxfCj
qXi7p+Lx3b25eCt5ZblA19wnYcKVI3KisZcGNuHzVc/X4xHUeM3ZsN8Vxwx0mQ5E
rjnbUYsqbV/wvLW43HarSJ+/UC/Q+W2quwwbwnXNldzMSGs87aZ45X1p3eJ91aFl
EaVT56QKILkSat0GN6Q9732gFBtBcuIDurLvJoRv3bhd6aCQi97zfPdQi4MdHSa1
8GoSYyd5FtGv6lrVQjLhHvQHYme5AAmVwAqjZHHNCTBx4PsKbWeQ7NuBPU4xbxi+
0Pb0ikxgrDmiSZGjcaVNttbLiCLJbOHt1mlPyjsVHfqctAUPTvNTCW+gewIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEwRIGRGdQY3t+OtUE3wLDTfLiTFMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvVEJFZ1pFWjFCamUzNDYxUVRmQXNOTjh1Sk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf0mAwQA
LQ+PAwQALVzDMA0GCSqGSIb3DQEBCwUAA4IBAQCx92y08Qb9VybqqzFdZwlzsBRP
MTr6Y7fNF+YODHKwlgEiUxuhe+LpFG+Ym5UEOn78E6KCx1fMaSCJlJNRshhDAs9o
/eDLnfAvfBZbUsQCqL2wyJr3jg3sx7mFrtWaE94k5V6YMxI3HxnhI4t946b6kGZW
gLpZLLqfxWxyZjkWMwIaNoLZU00qKGXt6FOqYSKUa4fDnDjRKpRaAX0jee17AtrK
okQU5fBZQUFjDedB84Hp7hJ0J7lmfqd1Cs/64+Rqe46wn4y3/EIvinqKo7lQ4NbY
zKhqUJjFkcD8vKb032EOXcSNSoHCUOHNSXtBtWKlNChI5YvUrnVZbd8uAmy6
-----END CERTIFICATE-----
Generated at Tue Apr 30 14:32:38 2024 by rpki-client on console-fra.rpki-client.org