Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/TG14qmIqIEE3wGqoE00JnReDzyA.roa
File: TG14qmIqIEE3wGqoE00JnReDzyA.roa (raw, json)
Hash identifier: PsRgO1QVnPKz0L0zMfPRzdioZXmhZ1lFLL07QWvYzow=
Subject key identifier: 4C:6D:78:AA:62:2A:20:41:37:C0:6A:A8:13:4D:09:9D:17:83:CF:20
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0192C6778F41160AAB34A6FDA0A3DEF624C4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/TG14qmIqIEE3wGqoE00JnReDzyA.roa
Signing time: Sat 26 Oct 2024 01:36:16 +0000
ROA not before: Sat 26 Oct 2024 01:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.221.26.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c6:77:8f:41:16:0a:ab:34:a6:fd:a0:a3:de:f6:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 26 01:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c6d78aa622a204137c06aa8134d099d1783cf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:34:2a:43:a3:44:68:ac:02:50:4d:00:06:
ff:8a:d3:dc:54:82:05:e2:60:8f:a3:f3:e3:17:82:
7e:78:26:eb:58:37:7c:ad:c8:b4:98:a5:76:99:a5:
07:f6:6d:21:a5:1d:c8:e9:57:ef:26:1c:d1:f1:26:
82:92:2a:74:45:3a:0b:ad:6e:ac:ab:27:eb:bd:91:
2c:e1:5d:08:a2:51:fc:b6:52:9f:d1:93:b7:87:b4:
01:e7:a3:8d:70:19:6e:79:20:13:80:6b:31:b2:7f:
7c:2d:b4:9e:4d:35:9c:79:f2:ac:55:53:dc:26:51:
ac:1e:54:5c:4a:5a:9c:1c:c9:05:ba:8c:09:c5:71:
f9:0e:43:3d:e1:22:17:3b:f3:65:de:20:64:0b:68:
b2:be:ea:4d:36:03:d9:02:3e:7e:8d:22:7f:3a:81:
99:48:a1:c8:e8:d6:02:8f:37:5b:9e:4b:d3:86:68:
b5:2b:17:c8:37:68:84:38:c2:ae:04:55:ae:7a:ca:
48:1d:3e:71:38:31:ec:ae:b7:a2:b1:1b:b6:f4:4d:
f9:4f:c3:07:8b:ca:7b:1b:f2:e5:5e:f2:5e:49:2f:
1e:fd:32:d8:c9:dd:52:cf:db:4a:9b:cf:a2:7c:6d:
87:50:21:79:49:7b:d0:be:bd:13:30:7e:ae:c3:cb:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:78:AA:62:2A:20:41:37:C0:6A:A8:13:4D:09:9D:17:83:CF:20
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/TG14qmIqIEE3wGqoE00JnReDzyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.26.0/24
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
10:89:35:65:f8:f8:e4:c3:9a:39:62:be:ee:62:01:29:1b:8c:
38:15:b7:cf:2d:f7:c6:f2:62:36:74:5d:8f:0e:00:aa:d1:80:
34:86:e6:0f:50:b4:f1:af:f5:df:bb:17:9a:38:62:b8:65:25:
0a:fc:f1:f6:1f:05:42:85:12:43:7f:d1:89:ce:c9:9f:03:ac:
db:ae:1a:97:ea:52:7d:e3:11:27:42:ff:00:13:f5:dc:cd:46:
25:0f:8a:b7:56:df:29:52:fd:d7:e4:0e:60:5a:59:c6:cf:52:
17:27:c6:ef:24:f9:ec:70:76:81:f4:11:db:92:0a:b1:9f:9e:
ad:a1:ae:1e:e2:22:20:23:9d:dd:d9:2c:a0:22:d1:b1:3a:46:
1e:d4:bf:f6:94:04:02:e9:2f:82:ec:25:bc:d0:a7:5a:15:ce:
da:e6:47:6b:0d:d7:83:16:2e:70:6b:a3:e4:b4:67:7e:58:cd:
88:f3:6b:e9:ae:c7:89:11:f4:79:db:a8:ea:7d:40:ca:eb:4c:
48:cb:dc:7e:ce:e5:ca:12:8a:57:3b:c6:9e:03:2c:7f:de:0a:
6e:73:8a:2f:a6:6b:ca:e9:bd:ec:4f:73:fa:02:14:6b:da:04:
78:80:d3:d3:c2:9d:ad:ce:11:38:63:e4:f5:f2:d4:2b:57:cb:
40:41:4f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:42 2024 by rpki-client on console-fra.rpki-client.org