Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/TF7C4LC968wCf5dvaTF5M1O_Sqg.roa
File: TF7C4LC968wCf5dvaTF5M1O_Sqg.roa (raw, json)
Hash identifier: OMPVQqCl3JhElI8BdvycLpaNOAZ/j3au20WjDxllEj0=
Subject key identifier: 4C:5E:C2:E0:B0:BD:EB:CC:02:7F:97:6F:69:31:79:33:53:BF:4A:A8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068475DF9FBBF152CB4947715A22271
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/TF7C4LC968wCf5dvaTF5M1O_Sqg.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56690
IP address blocks: 193.233.12.0/23 maxlen: 23
193.233.24.0/23 maxlen: 23
193.233.26.0/23 maxlen: 23
193.233.28.0/23 maxlen: 23
193.233.54.0/23 maxlen: 23
193.233.73.0/24 maxlen: 24
193.233.92.0/22 maxlen: 22
193.233.150.0/24 maxlen: 24
193.233.166.0/23 maxlen: 23
193.233.168.0/23 maxlen: 23
193.233.176.0/20 maxlen: 20
193.233.212.0/22 maxlen: 22
193.233.224.0/22 maxlen: 22
193.233.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:47:5d:f9:fb:bf:15:2c:b4:94:77:15:a2:22:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c5ec2e0b0bdebcc027f976f6931793353bf4aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:61:9d:ec:14:2d:c9:98:8f:f1:54:a2:29:
1c:8d:e7:a8:f4:8a:9a:3b:c3:e0:79:fe:24:96:69:
f6:71:6f:85:1f:e8:28:ef:3c:bf:41:0c:d2:66:c7:
6b:99:62:1f:ec:e0:12:04:a8:4d:67:48:f4:1e:61:
a4:f2:50:33:da:3e:8c:33:34:ea:ab:12:15:f1:0d:
e4:26:f0:3b:b7:4d:66:e6:54:88:da:f5:ec:25:93:
08:70:14:3a:7d:d4:83:30:3a:80:18:9c:a3:5d:84:
a3:f9:4c:9a:d9:61:4e:b4:c9:f9:06:90:22:a4:00:
5b:56:aa:5e:c1:ad:c0:c4:31:38:46:01:14:41:0c:
96:15:a1:0a:8b:ad:04:98:f3:be:9b:c9:87:8d:68:
b1:2e:72:b8:5b:a2:f1:0e:80:af:b7:70:bc:b7:31:
c2:7b:e2:18:62:0e:8b:0e:62:54:8c:d5:32:1f:3b:
a6:d2:a1:76:6b:e9:89:6d:ff:86:3a:6c:23:09:9f:
46:d8:cf:11:08:f8:28:15:09:97:ab:ea:f1:43:18:
61:dc:ac:00:b3:c7:85:cc:a5:2f:5b:30:0a:3d:02:
a0:43:be:84:86:5c:69:38:a8:a1:ff:16:ec:fa:28:
15:91:6b:66:d7:9b:e9:ac:27:35:35:7d:31:6e:e4:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:C2:E0:B0:BD:EB:CC:02:7F:97:6F:69:31:79:33:53:BF:4A:A8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/TF7C4LC968wCf5dvaTF5M1O_Sqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.12.0/23
193.233.24.0-193.233.29.255
193.233.54.0/23
193.233.73.0/24
193.233.92.0/22
193.233.150.0/24
193.233.166.0-193.233.169.255
193.233.176.0/20
193.233.212.0/22
193.233.224.0/22
193.233.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:71:43:b2:4c:b6:3d:89:0f:8c:32:62:87:93:6d:9e:15:66:
be:21:14:44:4a:b1:00:7b:6e:38:16:c0:ad:61:e4:7b:f8:18:
3f:46:9a:3a:75:ab:70:9d:0e:40:e3:d0:20:8e:c6:f7:8a:15:
cd:e9:40:ea:48:52:11:9c:ef:0e:ff:9a:8a:b2:39:1c:2a:d5:
d1:b8:e3:0c:b9:b3:5b:44:72:ea:12:7d:24:90:ee:7b:22:8a:
b6:a4:f5:90:1b:2e:e7:64:67:25:db:e3:bc:aa:1e:d6:73:58:
28:6c:3c:2d:17:e2:b0:9e:97:c6:45:9b:a8:11:bd:fa:d5:b2:
7d:3b:95:3d:ba:d9:98:f2:8b:b2:af:6d:5a:a8:53:76:a1:dc:
28:cf:b9:35:22:18:58:ac:9b:3f:54:3e:eb:39:8c:d6:04:b2:
eb:4e:dd:30:38:a5:60:ef:c4:72:8e:9b:7b:be:3c:9e:d2:c9:
2e:32:27:5e:36:16:ba:ec:27:6c:95:b1:95:ff:76:ac:a5:d9:
d7:7b:9c:9e:e8:65:96:ad:52:cf:64:e9:47:a9:87:b4:c5:65:
1a:d6:92:07:8d:bc:9b:c5:4f:8d:40:e4:a3:13:0c:1c:63:36:
16:8a:d0:15:75:25:02:1c:8a:6e:db:dd:e0:b7:0f:27:47:90:
fd:a5:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:37 2025 by rpki-client