Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/tyjCGtdeuARVfSDcwQ2-laHmt2o.roa
File: tyjCGtdeuARVfSDcwQ2-laHmt2o.roa (raw, json)
Hash identifier: lOxze9lUnYKVzVdC+YePSefvYgQ8qYzWuNvFuMVfBLE=
Subject key identifier: B7:28:C2:1A:D7:5E:B8:04:55:7D:20:DC:C1:0D:BE:95:A1:E6:B7:6A
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 018CFE1E30FA8B3AAEE09803D2BB385AF3E7
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/tyjCGtdeuARVfSDcwQ2-laHmt2o.roa
Signing time: Fri 12 Jan 2024 14:40:40 +0000
ROA not before: Fri 12 Jan 2024 14:40:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202548
IP address blocks: 185.212.185.0/24 maxlen: 24
45.130.45.0/24 maxlen: 24
185.42.160.0/24 maxlen: 24
2a0f:a040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:1e:30:fa:8b:3a:ae:e0:98:03:d2:bb:38:5a:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Jan 12 14:40:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b728c21ad75eb804557d20dcc10dbe95a1e6b76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:8c:d4:cf:6a:0f:c1:25:a6:77:33:2d:ef:
1d:ab:3f:77:7f:27:4c:fa:50:eb:ca:09:3b:dd:6c:
ee:fa:d5:d8:fe:65:00:fc:db:e4:4c:18:e5:4a:c9:
c2:d4:d8:9f:97:04:4e:41:02:98:93:56:06:d4:ef:
f8:2d:a2:32:d6:97:60:e5:77:18:cb:7e:85:ee:9b:
c3:43:b2:fb:fd:38:1d:64:b7:83:85:af:b2:61:1f:
18:3c:d6:23:4a:46:47:ef:54:93:74:54:33:1c:42:
c9:9b:71:6f:24:b8:14:0e:cd:f3:f7:89:5f:58:63:
96:a1:31:97:17:ea:1f:65:37:ca:76:dd:8a:36:9d:
8a:ef:d8:02:a2:38:e2:2f:c0:68:8d:b8:66:e5:8a:
15:6b:1c:ec:ff:f6:41:f5:1f:0d:a9:b2:2e:70:c9:
12:7e:35:72:30:f1:b3:75:f1:81:c3:52:2e:48:7f:
12:45:3d:e7:88:02:07:c4:e3:6d:33:e1:89:63:42:
77:57:b6:f3:b7:2a:7a:33:2f:49:de:c5:93:5d:97:
32:a1:a9:a8:d1:d4:37:a1:8e:f0:ff:f2:bb:19:1f:
d1:4e:a8:90:3f:30:cb:8b:4a:d7:cf:7a:db:9e:b4:
0a:85:b4:f3:6e:55:8c:24:2b:d0:df:d1:2e:7b:84:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:C2:1A:D7:5E:B8:04:55:7D:20:DC:C1:0D:BE:95:A1:E6:B7:6A
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/tyjCGtdeuARVfSDcwQ2-laHmt2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.45.0/24
185.42.160.0/24
185.212.185.0/24
IPv6:
2a0f:a040::/29
Signature Algorithm: sha256WithRSAEncryption
75:7c:3c:b1:04:3a:42:cd:00:0c:0f:94:f2:98:7d:49:6a:98:
b0:88:f6:a8:95:8f:03:32:42:88:03:83:4f:5b:a3:10:e1:f5:
33:75:cd:00:68:b9:6e:54:3e:60:b4:dc:a9:35:cc:00:ed:22:
22:d9:7b:17:a4:83:06:26:18:3c:27:3f:1b:8b:a8:e9:e6:b1:
c7:84:50:bc:67:c6:e5:3f:87:90:57:96:72:77:9c:49:09:59:
e3:82:37:f7:e3:8a:f4:80:e8:92:32:fd:bf:99:d4:d0:cb:49:
85:52:c1:e0:55:ae:16:d3:ef:12:27:c1:3a:55:03:e2:9c:ff:
b6:bc:42:7b:9b:d7:38:95:b1:97:4e:16:b3:9a:03:21:e0:bf:
93:0a:3e:3f:ea:0f:c2:d5:9a:e1:00:b7:d2:68:38:8e:05:a5:
6a:e4:56:23:26:42:e4:b1:35:cc:64:2c:96:25:f3:35:2c:fc:
b3:51:13:6d:99:cc:34:3f:b5:8b:87:b6:9d:10:e3:06:cc:ed:
99:c2:81:47:48:b9:a4:cc:5c:36:d2:6a:85:b1:b3:9c:fa:6d:
46:fe:61:29:c3:2e:66:13:67:2e:00:93:68:43:bc:4d:ff:d1:
0d:d7:d1:cf:9d:48:74:3d:54:f1:07:73:e8:8a:1d:03:b9:fb:
9e:2c:99:ac
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYz+HjD6izqu4JgD0rs4WvPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODhhYzNjZTdlOTFlMjQwY2FmZjIxOWNiZTM4ZmNmMDIz
YmYyYjYwHhcNMjQwMTEyMTQ0MDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzI4YzIxYWQ3NWViODA0NTU3ZDIwZGNjMTBkYmU5NWExZTZiNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tCM1M9qD8ElpnczLe8dqz93fydM
+lDrygk73Wzu+tXY/mUA/NvkTBjlSsnC1NiflwROQQKYk1YG1O/4LaIy1pdg5XcY
y36F7pvDQ7L7/TgdZLeDha+yYR8YPNYjSkZH71STdFQzHELJm3FvJLgUDs3z94lf
WGOWoTGXF+ofZTfKdt2KNp2K79gCojjiL8Bojbhm5YoVaxzs//ZB9R8NqbIucMkS
fjVyMPGzdfGBw1IuSH8SRT3niAIHxONtM+GJY0J3V7bztyp6My9J3sWTXZcyoamo
0dQ3oY7w//K7GR/RTqiQPzDLi0rXz3rbnrQKhbTzblWMJCvQ39Eue4SY5wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLcowhrXXrgEVX0g3MENvpWh5rdqMB8GA1UdIwQY
MBaAFHSIrDzn6R4kDK/yGcvjj88CO/K2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQt
ZDU3NjNmZWNkNjA1LzEvdHlqQ0d0ZGV1QVJWZlNEY3dRMi1sYUhtdDJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQtZDU3NjNmZWNkNjA1
LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALYItAwQA
uSqgAwQAudS5MA0EAgACMAcDBQMqD6BAMA0GCSqGSIb3DQEBCwUAA4IBAQB1fDyx
BDpCzQAMD5TymH1JapiwiPaolY8DMkKIA4NPW6MQ4fUzdc0AaLluVD5gtNypNcwA
7SIi2XsXpIMGJhg8Jz8bi6jp5rHHhFC8Z8blP4eQV5Zyd5xJCVnjgjf344r0gOiS
Mv2/mdTQy0mFUsHgVa4W0+8SJ8E6VQPinP+2vEJ7m9c4lbGXThazmgMh4L+TCj4/
6g/C1ZrhALfSaDiOBaVq5FYjJkLksTXMZCyWJfM1LPyzURNtmcw0P7WLh7adEOMG
zO2ZwoFHSLmkzFw20mqFsbOc+m1G/mEpwy5mE2cuAJNoQ7xN/9EN19HPnUh0PVTx
B3Poih0DufueLJms
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:04:31 2024 by rpki-client on console-ams.rpki-client.org