Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/tLzpABes7NzI0gkK7xIo5WP1AA0.roa
File: tLzpABes7NzI0gkK7xIo5WP1AA0.roa (raw, json)
Hash identifier: zoFli4tJdlIDA663OFU27kpPxBsE05Z5i03kFOaHXag=
Subject key identifier: B4:BC:E9:00:17:AC:EC:DC:C8:D2:09:0A:EF:12:28:E5:63:F5:00:0D
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E007C09D1EBA907E5F3A602E3A016
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/tLzpABes7NzI0gkK7xIo5WP1AA0.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60877
IP address blocks: 195.187.41.0/24 maxlen: 24
193.59.93.0/24 maxlen: 24
194.181.125.0/24 maxlen: 24
194.181.31.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:00:7c:09:d1:eb:a9:07:e5:f3:a6:02:e3:a0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4bce90017acecdcc8d2090aef1228e563f5000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:bc:ab:45:e3:e1:11:d0:89:94:01:ef:86:
fd:8f:44:f0:5a:7b:81:6b:3f:ba:55:83:f9:0d:f5:
f5:4d:14:7e:0d:a4:26:49:13:fa:c3:cb:da:0f:29:
4d:c2:5f:51:ac:eb:19:52:34:14:97:59:6a:e7:1d:
cd:ba:44:d0:56:87:8d:4c:e0:80:74:ec:1e:7a:1f:
7e:47:61:8c:5e:28:4e:53:b3:4e:6e:0d:52:31:36:
98:44:e9:ea:44:d5:a1:5d:7f:7c:ab:d8:21:90:c2:
84:a6:53:5e:61:a3:cf:3f:7e:d5:50:fe:16:cc:a9:
02:76:0d:7b:18:b5:b6:28:54:ae:86:4d:a5:07:2d:
d3:e7:8c:42:4f:4f:0f:94:8f:22:f0:21:fe:61:a5:
a4:89:3a:67:b1:ea:76:6b:a3:15:80:11:e6:4e:49:
b8:e7:eb:13:8f:32:d8:79:dc:cc:25:4f:ed:18:cb:
72:8b:11:20:55:e3:77:80:ea:84:2f:8b:65:a9:e3:
e7:b6:1e:4e:18:53:29:9f:43:95:67:06:79:d3:03:
bd:18:13:49:fb:09:26:54:0f:66:43:e6:60:5e:87:
33:e3:96:26:51:3a:42:74:2e:47:b8:5b:b3:f3:11:
19:e0:e6:23:29:74:5e:a7:94:88:03:c8:12:06:45:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:E9:00:17:AC:EC:DC:C8:D2:09:0A:EF:12:28:E5:63:F5:00:0D
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/tLzpABes7NzI0gkK7xIo5WP1AA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.93.0/24
194.181.31.0/24
194.181.125.0/24
195.187.41.0/24
Signature Algorithm: sha256WithRSAEncryption
64:92:3e:e6:81:5e:1b:23:8a:3d:a3:3d:40:05:a5:fd:19:f1:
5d:5c:13:63:c2:5a:89:48:b1:0c:cb:de:ed:31:16:3a:f6:4d:
64:e8:77:4e:3c:5a:5f:6b:ac:da:68:fb:a0:c8:1f:33:c9:06:
78:58:bd:99:60:1b:95:13:94:40:db:00:b8:ad:6b:79:97:0b:
52:27:dd:b2:00:cd:95:1d:d7:90:be:08:45:fb:c9:ee:bf:bf:
56:69:75:0c:26:be:ae:97:5d:bd:23:71:88:90:bc:49:e4:52:
88:2d:d2:0a:5d:fe:0c:06:c1:94:33:d0:77:2f:5c:3d:df:1e:
db:2e:f1:dd:91:9f:d8:4d:27:02:40:d4:27:a7:3f:e6:78:3c:
6d:d9:47:0b:7f:07:75:48:04:d5:30:75:d1:8e:dd:21:e8:4c:
49:4e:83:58:1b:5b:16:cd:7a:6d:eb:1a:5d:80:b4:a7:0c:6d:
17:f4:2c:61:7b:bd:ac:9d:5e:2d:f3:a1:22:81:a7:71:84:ab:
e1:ca:4c:d8:c2:7e:6b:2b:fa:28:4b:4c:68:cf:f3:86:be:ad:
5c:50:92:1d:2f:06:de:e0:0d:39:ed:2c:f0:f4:04:e4:dc:e1:
03:d4:0c:15:c3:79:28:02:aa:4d:0f:b0:03:ad:db:d2:47:14:
dc:0c:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:09 2024 by rpki-client on console-fra.rpki-client.org