Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/ty0TwiSndCeqi12VOJa9idpRr7I.roa
File: ty0TwiSndCeqi12VOJa9idpRr7I.roa (raw, json)
Hash identifier: 22ouoG7v3AsIwAJLS9o6vmAvkRb9irJ8NfoZiJ0uQs8=
Subject key identifier: B7:2D:13:C2:24:A7:74:27:AA:8B:5D:95:38:96:BD:89:DA:51:AF:B2
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 018ECC4488056A7483CDA36AAFEDB63482A1
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/ty0TwiSndCeqi12VOJa9idpRr7I.roa
Signing time: Thu 11 Apr 2024 08:27:07 +0000
ROA not before: Thu 11 Apr 2024 08:27:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212228
IP address blocks: 37.10.71.0/24 maxlen: 24
45.11.180.0/24 maxlen: 24
91.240.202.0/24 maxlen: 24
91.242.217.0/24 maxlen: 24
185.158.250.0/24 maxlen: 24
2a0b:7140:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:44:88:05:6a:74:83:cd:a3:6a:af:ed:b6:34:82:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Apr 11 08:27:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b72d13c224a77427aa8b5d953896bd89da51afb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:26:bd:b0:b8:f5:bd:0d:c6:e8:32:b9:c0:
76:58:57:a2:b1:d3:69:27:83:47:d8:d3:8d:5a:97:
b9:6f:45:b3:9c:f3:2f:3f:ae:92:90:c9:44:98:36:
e2:78:c2:09:d6:1f:8c:b1:43:5b:35:16:33:e5:c3:
b9:d1:2c:7b:a4:61:76:e7:b5:b9:31:d4:b6:20:d1:
a6:68:0c:55:0d:1c:e9:27:77:e6:cc:29:32:0c:ba:
55:e8:b5:d6:bf:5e:a8:40:17:9a:86:01:03:f1:a6:
4b:9d:8a:c7:d6:2a:53:b2:86:cf:03:a2:90:80:ee:
b4:b9:aa:25:cf:b6:3f:eb:90:60:96:d9:e1:db:b8:
91:33:b1:be:20:ec:dd:c3:47:20:d3:80:b8:e8:5c:
d3:62:80:cc:dd:0a:53:14:57:2e:48:48:85:ac:8d:
3c:9e:d0:f9:be:6f:8b:d9:cd:dc:f3:6f:14:47:4d:
b1:62:e1:8e:b1:2d:85:b4:72:76:8b:5d:14:03:65:
aa:fa:43:c1:4b:4b:1f:79:b4:25:b1:33:fd:ac:10:
2b:6f:f6:5d:81:2e:3f:9b:37:9a:b3:cc:31:e9:55:
b7:47:bc:3d:7c:21:eb:34:2b:87:5e:6c:c1:96:3b:
32:1e:40:74:8c:b0:91:d1:7b:b9:7f:f2:98:28:b0:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:13:C2:24:A7:74:27:AA:8B:5D:95:38:96:BD:89:DA:51:AF:B2
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/ty0TwiSndCeqi12VOJa9idpRr7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.10.71.0/24
45.11.180.0/24
91.240.202.0/24
91.242.217.0/24
185.158.250.0/24
IPv6:
2a0b:7140:2::/48
Signature Algorithm: sha256WithRSAEncryption
10:24:54:cf:84:34:e0:55:86:91:21:a4:b5:fc:db:45:b9:eb:
f4:f1:92:14:89:48:27:d0:25:77:9e:e1:a8:24:fa:a0:0f:4c:
09:a3:a9:85:ce:d5:51:f4:af:1d:d5:d6:1d:8b:9a:19:6a:35:
90:70:a3:e7:f4:8d:51:16:37:c7:75:58:51:b9:be:69:d5:06:
da:c2:d9:44:80:34:ee:ba:e1:7e:ba:f5:34:0a:40:24:f5:79:
13:e6:cf:85:c8:b6:a7:9e:fb:cd:0d:c7:9c:6a:0d:e8:9c:30:
10:83:fa:e2:a0:54:f1:b1:24:7d:10:0f:cc:c7:c8:f9:ef:aa:
8e:e5:ed:f8:b4:c2:80:76:57:8b:d1:55:be:87:32:2a:68:39:
5d:6f:bf:e9:c4:1d:ec:a7:1b:4f:13:e9:52:60:85:0c:d3:fe:
81:c3:33:50:82:a9:d3:90:bb:2b:e9:7d:6b:e2:cd:c7:c3:cf:
64:ee:e2:ee:37:21:92:45:ae:79:c9:fe:d3:e9:38:a1:c8:d4:
96:41:08:b5:90:67:24:05:f7:53:a8:18:82:aa:83:9e:ee:d6:
05:2a:ad:bb:f5:7f:21:6e:d9:a7:11:22:35:d0:ad:1f:98:bc:
c3:92:81:ac:c3:f1:96:74:53:3a:91:c1:2c:fe:8e:01:ba:96:
2f:9a:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:28:32 2024 by rpki-client on console-fra.rpki-client.org