Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tsr-UHB8Bdte3VccTAzwR45X6R8.roa
File: tsr-UHB8Bdte3VccTAzwR45X6R8.roa (raw, json)
Hash identifier: eoUFKZXHQIFV5aqhWkljmRaohnJTG7OefxBaLa5Qf2k=
Subject key identifier: B6:CA:FE:50:70:7C:05:DB:5E:DD:57:1C:4C:0C:F0:47:8E:57:E9:1F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018EE753B2F41D88C559F2257C13E820B921
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tsr-UHB8Bdte3VccTAzwR45X6R8.roa
Signing time: Tue 16 Apr 2024 14:33:25 +0000
ROA not before: Tue 16 Apr 2024 14:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.67.117.0/24 maxlen: 24
91.242.71.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
194.56.153.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
194.213.10.0/24 maxlen: 24
194.242.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:53:b2:f4:1d:88:c5:59:f2:25:7c:13:e8:20:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 16 14:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6cafe50707c05db5edd571c4c0cf0478e57e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:61:cd:4e:72:bc:8a:c3:5a:55:83:80:72:
1d:ac:53:a4:7f:01:e7:a5:0c:b3:c7:f5:bb:a8:df:
1d:04:ec:f7:95:2a:4d:d1:9e:d8:b8:89:98:12:d9:
bc:81:8b:f0:a5:7b:1b:47:5a:52:e2:16:f4:02:23:
41:da:06:19:7e:a1:ac:d9:c0:bc:45:cc:97:82:4d:
84:2c:ac:e4:ec:cd:17:c6:7a:59:84:97:cc:95:5a:
1b:5b:2b:b0:5d:a4:5f:4f:51:77:45:48:86:c3:ce:
9d:62:cb:4c:7d:a8:c7:d3:49:ec:f0:b2:d9:68:85:
fb:e9:90:82:03:04:c5:d3:bb:28:41:3c:be:b3:f7:
f6:ac:28:fa:a2:9c:24:66:9c:08:35:fc:46:5a:fc:
0e:69:33:9b:18:86:a4:f7:0a:26:36:82:c0:75:87:
df:64:88:78:c8:60:b3:a6:fe:e5:23:70:a3:ef:56:
37:e4:10:df:da:06:b8:88:59:d1:38:30:34:b6:1b:
e3:8f:0c:fe:ef:19:dc:a0:24:e8:07:2a:57:b2:51:
4c:25:df:af:e3:c9:42:00:34:f9:83:75:48:e6:c4:
4d:de:fc:a4:63:d9:61:c6:25:95:a0:ff:4d:b7:c3:
bf:9b:6d:d9:ba:62:2b:60:ec:45:c0:14:e3:3e:3d:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:FE:50:70:7C:05:DB:5E:DD:57:1C:4C:0C:F0:47:8E:57:E9:1F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tsr-UHB8Bdte3VccTAzwR45X6R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
91.242.71.0-91.242.73.255
91.242.75.0/24
91.242.103.0/24
94.231.198.0/24
185.40.105.0/24
194.56.153.0/24
194.180.238.0/24
194.213.10.0/24
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
64:c9:15:0e:f9:17:90:87:92:45:84:7e:90:27:4f:54:c0:2b:
1d:4a:57:e9:83:93:41:b2:f1:49:c1:8e:f2:35:f6:1d:37:4b:
97:c1:ba:70:9e:d9:6a:5b:11:bc:e1:82:b0:62:08:63:c6:eb:
cc:07:38:0a:b9:11:40:59:cc:91:ed:41:cf:c0:23:8f:3b:ef:
3b:6b:b6:b8:75:9c:ba:db:f6:d5:bf:7d:18:2b:25:5a:14:c1:
1d:c6:a2:f4:67:d4:35:1f:8a:91:c2:52:72:3d:88:48:b7:6e:
79:e2:68:e2:d6:62:12:1a:3f:c0:ee:63:aa:ff:e9:43:e4:92:
a5:93:39:27:7f:18:fd:49:06:99:00:de:36:c2:c9:ef:c9:74:
36:48:06:ac:f6:4b:79:22:44:73:4e:00:8b:a1:c9:87:3c:1f:
54:e0:18:12:84:d8:6f:d8:4a:2a:40:55:55:c0:cf:ba:f7:17:
89:02:3d:db:29:e6:4b:5b:6c:47:5a:59:eb:0a:61:e7:39:7b:
13:13:14:1b:5e:13:c9:e4:36:fb:b4:35:98:36:9c:b0:fe:ab:
9f:d4:92:f4:f1:60:e2:87:ea:12:73:c4:12:8e:6f:dc:cf:87:
04:e2:f9:25:c5:c3:9d:23:6c:04:0b:77:fc:51:8d:ed:93:a0:
70:c8:d6:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 4 12:52:36 2024 by rpki-client on console-ams.rpki-client.org