Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tYtcpmozmP7U84B8zGZMemz12AI.roa
File: tYtcpmozmP7U84B8zGZMemz12AI.roa (raw, json)
Hash identifier: AJH7g2lWU7YYtZojk8RZ2aAU+ZYBjNmoUAGNHFkODAg=
Subject key identifier: B5:8B:5C:A6:6A:33:98:FE:D4:F3:80:7C:CC:66:4C:7A:6C:F5:D8:02
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 018D12006C2C866354E3494AAF55C71B2B24
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tYtcpmozmP7U84B8zGZMemz12AI.roa
Signing time: Tue 16 Jan 2024 11:20:34 +0000
ROA not before: Tue 16 Jan 2024 11:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393559
IP address blocks: 185.230.180.0/22 maxlen: 24
185.230.181.0/24 maxlen: 24
2a13:d00::/29 maxlen: 48
2a13:d00:cf00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:00:6c:2c:86:63:54:e3:49:4a:af:55:c7:1b:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jan 16 11:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b58b5ca66a3398fed4f3807ccc664c7a6cf5d802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:3a:88:67:42:6c:78:e8:eb:08:be:06:1a:
e3:44:45:a7:ea:33:8f:e5:8c:0f:37:8c:c3:00:64:
ab:13:36:9c:1d:ce:e3:46:f9:46:21:bd:aa:c0:fe:
eb:0e:fb:18:73:65:11:fe:5c:b5:6c:97:86:4e:f2:
ed:19:a7:41:61:78:a4:54:a8:ed:12:2e:8c:9b:ee:
f9:ea:7b:e2:1d:1d:60:50:38:48:b5:bb:8c:d6:ea:
c7:5c:c7:85:d9:5c:a2:7f:09:ec:c6:6d:c0:4b:19:
09:33:c5:de:0e:b9:5d:ae:79:3e:74:52:13:32:f9:
6b:8f:d3:cf:a5:03:f9:cd:45:1a:9f:bf:7d:da:27:
27:8f:9d:11:69:ff:be:6a:a2:a9:20:00:7a:ce:df:
78:fd:52:bc:d5:32:43:9a:22:f7:c2:17:71:08:2a:
5b:46:04:07:3c:e0:dc:63:0d:00:91:5c:84:00:f3:
24:48:a5:60:d2:30:6e:39:62:2d:5a:46:cd:74:04:
1c:5e:1c:9f:1e:84:5b:a1:59:38:15:dd:5b:ee:9e:
3c:23:9a:fb:9b:aa:54:45:00:b8:eb:d0:a9:c2:c4:
fe:b6:0e:ba:12:40:e5:6b:1f:0c:32:a1:4d:cb:ef:
83:f1:68:28:03:86:19:0d:ca:99:53:38:2d:6d:06:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8B:5C:A6:6A:33:98:FE:D4:F3:80:7C:CC:66:4C:7A:6C:F5:D8:02
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tYtcpmozmP7U84B8zGZMemz12AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.180.0/22
IPv6:
2a13:d00::/29
Signature Algorithm: sha256WithRSAEncryption
93:4c:78:9c:b7:4b:f1:7f:a8:03:1a:4c:5b:29:70:4e:b7:24:
f0:a5:1b:fc:81:7a:0d:80:56:88:9c:0a:a6:ac:b8:ab:e9:e4:
3c:d8:dc:87:0f:b4:dc:bb:7a:e1:70:ed:d5:ca:e3:4a:11:4b:
6b:13:46:84:8f:49:06:df:1c:e1:98:59:d3:f5:f2:72:13:c5:
5c:ec:4c:f2:95:e2:70:08:d1:ae:41:8e:1d:cd:fe:7c:a8:eb:
79:08:c5:81:c8:1a:6e:ce:61:62:bd:e4:f6:f8:9e:70:8e:b3:
ee:d2:09:0a:88:c8:b9:9a:75:1a:a8:61:be:7e:fc:c9:23:3d:
6a:ca:7b:a5:60:e6:85:0a:54:72:95:0f:30:47:fc:5d:58:31:
34:fc:4f:bf:59:23:2b:16:cd:4d:71:2c:40:9c:28:6b:d4:b6:
99:df:2f:06:8c:ae:5a:7e:86:cd:21:e3:a5:32:33:62:ef:45:
7c:c6:ed:ef:4e:4e:02:d3:de:81:61:06:00:fa:91:7b:8b:88:
97:5b:1a:e5:f7:1d:63:de:fc:d2:e9:3d:27:0b:c8:05:a6:39:
8b:45:9a:02:e4:12:c7:fc:1d:89:3a:ae:99:f5:2f:37:b3:39:
9b:01:3f:7b:d0:43:b9:86:99:e9:93:3c:80:fc:bc:fb:b6:8c:
b7:4d:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:38 2024 by rpki-client on console-fra.rpki-client.org