Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Tac1p3sbAfrTkW7YEygrsh6fmiE.roa
File: Tac1p3sbAfrTkW7YEygrsh6fmiE.roa (raw, json)
Hash identifier: osx0td2CrYDy6xedDvO+8aNDe2ZCoUHB+MIXHlLsk8M=
Subject key identifier: 4D:A7:35:A7:7B:1B:01:FA:D3:91:6E:D8:13:28:2B:B2:1E:9F:9A:21
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 018CCA2BA3F98EB678377499E8EBCE47EA63
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Tac1p3sbAfrTkW7YEygrsh6fmiE.roa
Signing time: Tue 02 Jan 2024 12:35:06 +0000
ROA not before: Tue 02 Jan 2024 12:35:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49028
IP address blocks: 193.203.52.0/22 maxlen: 22
185.252.236.0/22 maxlen: 22
185.252.236.0/24 maxlen: 24
45.151.8.0/22 maxlen: 22
185.252.237.0/24 maxlen: 24
185.252.238.0/24 maxlen: 24
185.252.239.0/24 maxlen: 24
2.59.188.0/22 maxlen: 22
2a0c:2dc0::/29 maxlen: 29
2a09:f7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:a3:f9:8e:b6:78:37:74:99:e8:eb:ce:47:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Jan 2 12:35:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4da735a77b1b01fad3916ed813282bb21e9f9a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:b2:99:7f:6b:5b:d4:9a:36:70:5a:7e:da:
c5:f9:08:e7:70:d5:8c:b7:26:db:57:2c:30:5e:6b:
86:fe:c4:a0:cc:ca:3a:88:f7:f8:52:e4:81:7f:57:
63:dd:d2:ad:70:5d:3a:96:3f:fb:bb:52:2e:0c:58:
25:1b:64:d2:f0:57:d0:67:49:64:55:85:cc:d0:d1:
53:ca:3a:0b:94:07:ff:e2:7c:30:05:95:1e:d3:3c:
d2:87:da:cc:db:17:f1:24:db:8c:5e:e8:79:15:45:
8f:07:9e:7b:e5:00:d5:80:70:f7:31:11:05:65:ef:
3a:d9:05:b1:48:bc:e9:6e:8e:8f:19:4e:ee:48:68:
a2:24:ea:35:d0:9f:ff:08:bc:84:a5:9f:2d:f3:29:
88:04:8e:cf:bd:7e:e4:8a:7a:c1:c6:69:75:52:09:
81:8e:be:ac:33:da:d7:2d:ff:83:8b:65:1a:6f:c7:
9a:ef:92:cd:0f:6e:c8:14:91:ea:2a:04:c0:5c:cb:
78:b3:bf:13:3c:a7:5d:cd:20:44:d6:98:7e:ba:74:
b3:c2:fb:22:ed:b7:b8:2f:e3:57:b6:87:07:b5:84:
a2:f8:6e:0a:d6:ed:67:f1:86:9c:16:aa:c4:eb:4f:
b0:d3:9d:64:f9:29:e4:f1:7e:43:b6:4f:df:48:22:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:35:A7:7B:1B:01:FA:D3:91:6E:D8:13:28:2B:B2:1E:9F:9A:21
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Tac1p3sbAfrTkW7YEygrsh6fmiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.188.0/22
45.151.8.0/22
185.252.236.0/22
193.203.52.0/22
IPv6:
2a09:f7c0::/29
2a0c:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
12:c4:ac:9c:58:b5:9e:42:e2:b4:10:57:89:25:da:e9:fe:4e:
6b:77:60:08:a3:95:1a:d7:ac:e5:e5:16:d1:11:44:27:c8:28:
f6:af:38:95:1f:13:b6:f9:f3:86:c8:f2:9a:ca:69:97:85:7b:
81:6c:e1:f1:8c:d9:8a:e0:5f:7b:63:df:c5:10:fe:2d:1e:d5:
03:d7:56:d4:df:41:14:ac:e0:df:20:eb:12:d3:39:90:8c:93:
16:84:98:a6:e7:9b:60:d3:62:77:2f:e2:78:ef:70:2c:c1:10:
86:6a:95:98:99:6a:25:0c:21:a5:37:d1:29:71:ac:c0:a2:f3:
4f:1e:96:a7:6a:d0:4c:6d:aa:2d:f9:16:af:68:a4:41:3c:0f:
e5:d7:a2:87:83:39:8f:f0:c4:a8:94:39:8c:48:51:38:c8:44:
c6:83:de:4a:a8:2c:73:91:89:8c:96:d3:a2:f4:1c:b5:3d:9e:
4e:ca:37:e5:48:a2:5f:c8:c1:b2:ee:73:aa:30:2c:c3:53:c9:
cc:49:b4:ca:b2:ef:d4:3b:b6:69:b3:b0:73:74:e5:6d:98:f7:
5d:92:26:6d:4c:22:8e:22:7b:66:9b:25:bf:15:d7:94:ff:2a:
e3:72:46:5e:df:ff:60:d0:fd:21:72:e6:08:a2:0f:0e:ec:2e:
2b:26:67:c1
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYzKK6P5jrZ4N3SZ6OvOR+pjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm
OTQ4MzcwHhcNMjQwMTAyMTIzNTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGE3MzVhNzdiMWIwMWZhZDM5MTZlZDgxMzI4MmJiMjFlOWY5YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAOymX9rW9SaNnBaftrF+QjncNWM
tybbVywwXmuG/sSgzMo6iPf4UuSBf1dj3dKtcF06lj/7u1IuDFglG2TS8FfQZ0lk
VYXM0NFTyjoLlAf/4nwwBZUe0zzSh9rM2xfxJNuMXuh5FUWPB5575QDVgHD3MREF
Ze862QWxSLzpbo6PGU7uSGiiJOo10J//CLyEpZ8t8ymIBI7PvX7kinrBxml1UgmB
jr6sM9rXLf+Di2Uab8ea75LND27IFJHqKgTAXMt4s78TPKddzSBE1ph+unSzwvsi
7be4L+NXtocHtYSi+G4K1u1n8YacFqrE60+w051k+Snk8X5Dtk/fSCKpdwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFE2nNad7GwH605Fu2BMoK7Ien5ohMB8GA1UdIwQY
MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt
MTI3MTljMjYxY2MwLzEvVGFjMXAzc2JBZnJUa1c3WUV5Z3JzaDZmbWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw
LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCAju8AwQC
LZcIAwQCufzsAwQCwcs0MBQEAgACMA4DBQMqCffAAwUDKgwtwDANBgkqhkiG9w0B
AQsFAAOCAQEAEsSsnFi1nkLitBBXiSXa6f5Oa3dgCKOVGtes5eUW0RFEJ8go9q84
lR8Ttvnzhsjymsppl4V7gWzh8YzZiuBfe2PfxRD+LR7VA9dW1N9BFKzg3yDrEtM5
kIyTFoSYpuebYNNidy/ieO9wLMEQhmqVmJlqJQwhpTfRKXGswKLzTx6Wp2rQTG2q
LfkWr2ikQTwP5deih4M5j/DEqJQ5jEhROMhExoPeSqgsc5GJjJbTovQctT2eTso3
5UiiX8jBsu5zqjAsw1PJzEm0yrLv1Du2abOwc3TlbZj3XZImbUwijiJ7ZpslvxXX
lP8q43JGXt//YND9IXLmCKIPDuwuKyZnwQ==
-----END CERTIFICATE-----
Generated at Sat May 18 05:44:10 2024 by rpki-client on console-ams.rpki-client.org