Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/tgQV0lEWE-ylAGLeL8shB60lp4Q.roa
File: tgQV0lEWE-ylAGLeL8shB60lp4Q.roa (raw, json)
Hash identifier: 3bvG0K7wA4yc+g56aIP0v0noqNZLpvg2Dkup8bNYBxw=
Subject key identifier: B6:04:15:D2:51:16:13:EC:A5:00:62:DE:2F:CB:21:07:AD:25:A7:84
Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial: 018CC6B86395145C30776B3C96C810C4EFAE
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/tgQV0lEWE-ylAGLeL8shB60lp4Q.roa
Signing time: Mon 01 Jan 2024 20:30:21 +0000
ROA not before: Mon 01 Jan 2024 20:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39425
IP address blocks: 37.156.37.0/24 maxlen: 24
193.162.136.0/24 maxlen: 24
89.40.133.0/24 maxlen: 27
89.43.240.0/22 maxlen: 23
89.43.246.0/24 maxlen: 24
89.43.240.0/21 maxlen: 24
89.43.244.0/23 maxlen: 24
89.43.247.0/24 maxlen: 24
188.241.121.0/24 maxlen: 24
89.37.186.0/23 maxlen: 23
92.114.88.0/22 maxlen: 22
94.176.186.0/23 maxlen: 23
89.35.4.0/23 maxlen: 23
188.241.111.0/24 maxlen: 24
89.46.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:63:95:14:5c:30:77:6b:3c:96:c8:10:c4:ef:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Validity
Not Before: Jan 1 20:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b60415d2511613eca50062de2fcb2107ad25a784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:69:8e:c5:01:12:11:da:43:2b:2e:e8:1a:
aa:11:39:9a:8d:a0:ce:6a:15:4c:da:d6:51:b4:22:
35:1e:39:a4:86:18:24:13:76:c8:b1:cc:2f:5a:f9:
e7:cc:94:d1:41:70:5e:51:d9:35:82:57:13:46:e3:
39:4e:a3:28:14:50:a2:8e:5c:89:89:03:10:e6:77:
80:de:ec:51:8f:5b:1e:48:8b:40:bc:f1:b5:3b:5a:
1e:78:ad:27:ab:3a:60:79:94:65:a4:12:27:62:24:
8b:72:56:ab:46:4e:5c:b0:0c:e2:cf:55:24:86:23:
7e:7e:80:36:c5:48:3b:1a:ce:ad:71:9c:fb:53:1e:
4d:e0:ee:ac:24:e4:64:fe:eb:9f:27:65:31:55:ca:
e8:3b:91:46:83:89:20:c0:ff:67:c9:e3:5f:f3:e9:
7d:17:d6:1b:af:8c:f9:17:6f:f5:b9:f1:23:2a:04:
02:ea:2d:a3:2b:4f:8e:e7:88:c5:ea:f7:c1:aa:ff:
fa:50:f2:48:2d:85:35:3e:76:aa:b5:c2:f2:2f:ef:
3b:13:4e:14:57:6f:e4:28:c3:ae:63:f8:eb:03:02:
fd:b2:26:1d:c1:2f:78:2f:de:ad:c6:94:66:bc:b5:
d7:40:bc:86:84:16:26:7d:5a:81:81:03:aa:57:7e:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:04:15:D2:51:16:13:EC:A5:00:62:DE:2F:CB:21:07:AD:25:A7:84
X509v3 Authority Key Identifier:
keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/tgQV0lEWE-ylAGLeL8shB60lp4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.37.0/24
89.35.4.0/23
89.37.186.0/23
89.40.133.0/24
89.43.240.0/21
89.46.24.0/21
92.114.88.0/22
94.176.186.0/23
188.241.111.0/24
188.241.121.0/24
193.162.136.0/24
Signature Algorithm: sha256WithRSAEncryption
85:54:f3:e5:28:80:ee:cb:0e:73:c8:4a:b6:77:ac:58:6f:92:
e4:4e:02:64:82:6b:de:04:d2:5e:6f:b0:95:6c:2b:6d:78:5b:
36:e0:39:1c:9f:bd:ff:bb:0e:78:74:1b:1e:0d:a2:74:bf:eb:
fe:b3:ba:a3:cb:30:ad:94:05:23:6a:bd:d0:d0:e5:bb:1c:53:
82:e4:9d:47:23:51:93:ad:8e:72:a9:9e:2c:38:8d:4d:a6:aa:
55:f7:05:ca:78:0f:72:34:2e:3f:1c:06:32:75:f0:fd:33:f2:
b2:de:a9:48:25:61:b4:fa:f9:f2:51:1c:23:70:1b:a3:ae:2d:
01:17:0f:a9:30:8a:e0:a6:72:e5:16:19:1e:a1:f5:e8:33:9f:
6b:e4:41:9b:e6:ea:6a:d9:f6:04:b4:14:93:77:f7:fc:4e:82:
00:c1:68:57:dc:6b:e6:06:a5:06:18:68:ba:db:e2:25:b7:22:
bc:ec:b1:88:2f:49:dc:b1:af:e8:8a:c9:6c:de:86:58:bb:7d:
cc:ee:54:bc:f9:0e:26:ab:ae:c1:d2:70:b3:3a:2e:ed:10:5a:
08:f6:4e:d5:96:ed:b0:e8:30:b8:9f:8d:34:d2:ce:22:e0:a3:
87:39:34:24:b7:62:5c:da:75:86:80:c2:d0:77:78:80:88:0e:
77:d9:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:18:45 2024 by rpki-client on console-ams.rpki-client.org