Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/tzKg-9YAwy7JpxMOLtSFQN9qslQ.roa
File: tzKg-9YAwy7JpxMOLtSFQN9qslQ.roa (raw, json)
Hash identifier: 18ap+dc4OLL48Vm0YNrxOhdMF36bWyeNl7dIfbOIQh4=
Subject key identifier: B7:32:A0:FB:D6:00:C3:2E:C9:A7:13:0E:2E:D4:85:40:DF:6A:B2:54
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 018CC725E259426EF8455C1B586A2409B0F7
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/tzKg-9YAwy7JpxMOLtSFQN9qslQ.roa
Signing time: Mon 01 Jan 2024 22:29:57 +0000
ROA not before: Mon 01 Jan 2024 22:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35357
IP address blocks: 92.119.132.0/24 maxlen: 24
92.119.132.0/23 maxlen: 23
92.119.132.0/22 maxlen: 22
92.119.133.0/24 maxlen: 24
92.119.135.0/24 maxlen: 24
92.119.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:e2:59:42:6e:f8:45:5c:1b:58:6a:24:09:b0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Jan 1 22:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b732a0fbd600c32ec9a7130e2ed48540df6ab254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:83:a7:01:27:96:14:a5:5e:64:80:ba:9c:f4:
c9:07:54:3a:8b:9d:76:9f:9b:d4:e6:1c:e2:63:0b:
54:1b:ea:5c:ea:89:b0:1a:18:ec:d4:43:eb:59:05:
52:42:d2:2b:07:35:df:e2:9b:77:3e:02:d1:20:8e:
fc:05:4a:10:59:30:6a:09:35:f3:e0:c7:44:3e:34:
cd:16:82:69:63:59:1a:c2:39:2e:df:df:6d:77:ff:
11:78:83:c3:74:f8:1d:c8:9b:07:fe:87:f9:d7:52:
49:c7:09:bd:d8:32:52:f0:42:d9:4a:1b:96:a2:8a:
a6:17:f7:3f:6a:c4:b0:54:9d:fd:b3:8c:82:94:33:
3f:45:43:7d:0f:fe:b1:92:ca:78:23:82:78:26:cb:
a7:1e:65:52:49:51:0c:21:b2:7c:46:01:02:21:7d:
35:53:af:e2:4d:56:fd:df:ac:58:71:7d:29:27:0c:
36:05:de:a4:6a:9d:20:3a:40:b5:78:87:09:f2:0f:
5c:23:c5:d8:cb:49:77:68:20:75:a5:38:12:e9:90:
32:38:98:9d:e1:6d:58:3a:27:d5:76:19:d3:65:87:
e3:84:d9:a9:73:9f:02:44:a1:5b:6a:96:ff:27:b9:
b5:35:d1:78:ea:c4:62:c8:cd:43:e8:9f:7d:b8:5c:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:A0:FB:D6:00:C3:2E:C9:A7:13:0E:2E:D4:85:40:DF:6A:B2:54
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/tzKg-9YAwy7JpxMOLtSFQN9qslQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.132.0/22
Signature Algorithm: sha256WithRSAEncryption
44:53:2e:4a:31:9c:94:4c:83:83:e4:dc:7c:f1:ee:ae:a6:0c:
e6:81:29:26:39:34:e3:9d:ed:3a:62:58:c9:88:fd:06:a9:f3:
24:b0:99:2d:dc:46:7f:06:59:28:b0:47:05:b1:5c:d5:5a:50:
51:0f:c6:1a:56:12:09:66:d2:dd:5b:ce:8d:85:ba:d6:01:d1:
2b:b3:c0:e0:95:fb:37:29:26:1a:99:3d:4b:ab:25:e7:94:28:
00:5f:9d:6c:7c:7c:bc:f1:7d:b2:b6:a9:bd:9d:fd:57:d0:d6:
3a:aa:20:b4:15:6b:c3:53:9c:36:70:74:b6:7c:ae:c6:b0:08:
cc:fb:75:1e:ae:ca:f4:60:4c:03:3c:65:9e:c0:7e:a7:9f:bf:
a9:c3:74:89:51:f0:f9:b7:fd:a5:37:6e:8a:7c:8f:98:69:23:
f2:99:05:a0:cc:82:db:38:80:4c:e2:56:2d:61:e1:03:2c:15:
e8:d7:b6:3b:3a:99:92:9d:8d:b4:48:63:54:07:4d:3d:08:f3:
5c:3b:ee:23:28:d3:bd:34:88:81:0b:80:74:c0:ea:a2:bd:ab:
e7:80:db:9e:fe:0e:a1:a3:82:5e:be:0f:d0:11:7f:85:99:43:
be:74:d6:8b:43:56:e3:99:a2:20:82:9d:18:f5:17:03:f0:ce:
e0:45:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:34:05 2024 by rpki-client on console-fra.rpki-client.org