Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa
File: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (raw, json)
Hash identifier: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=
Subject key identifier: B6:F9:3F:4D:67:E5:08:9F:19:36:B8:76:33:EE:CC:E7:F7:4D:80:46
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 0195473350AD92D905C143E70AF6A271DAA4
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa
Signing time: Thu 27 Feb 2025 11:38:20 +0000
ROA not before: Thu 27 Feb 2025 11:38:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20648
IP address blocks: 62.164.181.0/24 maxlen: 24
62.164.185.0/24 maxlen: 24
149.126.8.0/24 maxlen: 24
149.126.9.0/24 maxlen: 24
185.75.176.0/24 maxlen: 24
185.75.177.0/24 maxlen: 24
185.81.168.0/24 maxlen: 24
185.81.170.0/24 maxlen: 24
192.109.40.0/24 maxlen: 24
192.109.41.0/24 maxlen: 24
193.239.197.0/24 maxlen: 24
194.46.42.0/24 maxlen: 24
194.46.47.0/24 maxlen: 24
194.164.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:33:50:ad:92:d9:05:c1:43:e7:0a:f6:a2:71:da:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Feb 27 11:38:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6f93f4d67e5089f1936b87633eecce7f74d8046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:4d:fb:36:cf:1e:5f:bd:7f:5e:32:2e:e9:
27:b2:63:7a:92:5b:03:a5:05:54:58:10:39:e5:e6:
ab:a8:ff:55:f3:4b:95:f6:40:08:58:cf:56:fe:c3:
96:2b:f1:fc:82:a8:de:e9:87:e8:34:c6:6a:6b:75:
27:8f:cd:a5:76:ab:af:5e:56:fd:78:11:ba:21:f6:
d8:41:e1:a3:8a:70:76:11:99:0a:b6:8e:11:f4:7e:
72:68:8f:f1:9f:bc:7b:81:b7:33:77:c5:28:5a:93:
48:c0:4a:38:ab:51:d4:d3:97:0d:be:de:93:e1:d2:
dd:b6:c2:e3:a6:44:a6:ec:1b:f5:b4:50:84:18:df:
50:8e:c8:f2:4d:ce:2a:fb:64:d9:2e:06:9e:0b:cd:
47:7a:b2:a6:64:bd:4c:fb:98:f4:10:dd:88:2c:b2:
34:25:29:f7:86:e6:13:fd:c0:12:10:86:a7:6a:a8:
95:45:3c:c7:e1:c0:76:54:b5:63:65:0c:84:9b:b9:
ee:84:c6:43:25:d2:3b:d6:be:94:3f:af:9d:bd:da:
41:54:36:8c:9a:84:e7:40:1a:6f:d8:f1:fa:d5:fd:
ae:07:a0:4d:9c:13:fd:75:38:bc:0f:78:75:ff:b9:
4d:bc:04:44:05:02:9f:d1:ab:77:c0:69:d6:48:ed:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:3F:4D:67:E5:08:9F:19:36:B8:76:33:EE:CC:E7:F7:4D:80:46
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.181.0/24
62.164.185.0/24
149.126.8.0/23
185.75.176.0/23
185.81.168.0/24
185.81.170.0/24
192.109.40.0/23
193.239.197.0/24
194.46.42.0/24
194.46.47.0/24
194.164.218.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3b:ec:9a:57:d0:e6:c7:ce:ed:99:82:b8:2c:ba:16:7c:83:
36:e8:1a:2e:87:56:6d:cf:22:94:09:67:85:d4:a4:0f:2c:bd:
ba:e0:7c:55:82:8a:fe:74:05:33:bf:d7:16:d0:14:00:a0:09:
64:0d:ed:76:ff:f0:7f:71:ea:a2:d4:a9:99:2a:0b:2c:8f:49:
e9:0d:91:67:3d:69:a1:ee:1c:96:f3:6c:3c:d6:c0:76:6a:42:
28:7d:7c:ff:b6:bd:66:b9:fc:7b:80:fc:01:75:03:c7:2a:4b:
82:3b:e8:73:e8:f2:81:d9:f3:41:c0:f6:5e:3a:3e:20:e4:86:
fe:e9:2c:f0:72:5b:5f:db:6d:f4:f3:88:8c:c6:d2:f5:9e:de:
52:f2:7a:2c:ca:5a:b7:ba:e2:4b:ab:25:8c:ea:20:aa:b6:a3:
6d:8f:c5:0b:32:d5:48:18:10:ec:47:ad:49:5d:79:79:f2:f2:
cf:72:f5:55:0c:10:fa:bf:d2:df:c0:e3:e8:60:08:a1:01:d5:
4d:60:34:81:52:81:7c:4b:61:9d:ee:41:ad:83:98:d8:75:d9:
67:da:ec:e7:3e:6d:44:a3:a6:7d:a3:e7:b8:d4:7a:c8:05:09:
28:66:96:04:d3:51:8e:f6:b1:62:96:68:2a:9a:5a:2c:ef:59:
51:a7:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:33:55 2025 by rpki-client