Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/tFircwNyBtq6WrCGFuYs7WuevGg.roa
File: tFircwNyBtq6WrCGFuYs7WuevGg.roa (raw, json)
Hash identifier: DZiasd6myKMTFl9daNNFAbTp1NlU0koSzXdCNVlijgA=
Subject key identifier: B4:58:AB:73:03:72:06:DA:BA:5A:B0:86:16:E6:2C:ED:6B:9E:BC:68
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018CC94E5B5EA51ACE3FA17ECBADAB67ED3C
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/tFircwNyBtq6WrCGFuYs7WuevGg.roa
Signing time: Tue 02 Jan 2024 08:33:24 +0000
ROA not before: Tue 02 Jan 2024 08:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15960
IP address blocks: 217.64.160.0/20 maxlen: 24
185.215.100.0/22 maxlen: 24
93.94.80.0/21 maxlen: 24
2a00:15e0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5b:5e:a5:1a:ce:3f:a1:7e:cb:ad:ab:67:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b458ab73037206daba5ab08616e62ced6b9ebc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:7f:19:93:dc:3a:e7:67:54:dd:38:4f:f2:
d4:9d:68:52:1b:e4:d9:25:51:e9:2f:48:f5:8f:e7:
80:1c:81:01:57:74:06:3c:d6:24:f4:a4:3e:8f:27:
a2:c8:b9:e7:19:c3:c7:b4:3a:38:ca:76:70:36:e4:
6c:74:cd:86:db:4a:5d:e5:46:57:be:a2:36:f9:3b:
fb:2e:24:a6:92:ca:5d:27:bc:31:1d:98:df:ae:be:
fc:b6:ac:bf:98:40:6e:7d:f9:86:04:4e:f4:80:02:
e1:30:46:b5:f0:52:6d:57:e5:e9:3d:0a:75:69:e6:
a5:2f:57:fe:ec:ab:78:20:82:6a:c1:02:7d:03:2a:
8c:66:a8:b7:56:0c:45:cc:80:3a:1d:4b:9a:da:20:
9c:c2:0b:cb:6a:eb:8f:7f:a7:e3:a9:55:8e:3a:ec:
27:49:91:0e:a4:ee:2a:60:98:a3:37:03:0d:bf:66:
61:a2:91:eb:28:3a:62:13:f0:02:5f:1b:ed:aa:94:
d2:d6:c9:2d:43:ba:4e:f8:b3:1a:86:87:bb:6b:27:
e1:4b:8d:ce:a5:f4:55:c6:94:57:7a:6e:0b:3a:86:
7c:69:fb:03:d8:ed:2a:26:e9:21:94:01:c2:19:0d:
5b:d1:a4:7a:49:26:3a:a8:7b:d0:83:a9:6e:d2:ce:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:AB:73:03:72:06:DA:BA:5A:B0:86:16:E6:2C:ED:6B:9E:BC:68
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/tFircwNyBtq6WrCGFuYs7WuevGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.80.0/21
185.215.100.0/22
217.64.160.0/20
IPv6:
2a00:15e0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:61:8f:e8:7e:2f:03:95:6c:dd:b9:ad:f4:d9:22:d0:41:c6:
8b:e6:2b:a9:b7:73:b8:7b:30:aa:3d:49:d8:73:bf:46:bc:85:
da:79:a2:4c:ec:5a:79:5b:98:65:71:42:aa:90:05:41:2a:50:
9e:f2:b4:c4:a7:3e:02:e6:29:86:3b:8a:89:a6:14:8d:0a:6b:
a7:ba:4f:fb:76:05:be:5b:0d:86:21:b9:a1:ce:f2:50:09:93:
de:04:47:3f:21:e2:03:29:b8:8f:39:78:b7:67:27:f2:9d:53:
7e:d4:df:73:15:c8:99:f1:6c:ae:ab:f6:23:bd:2f:e4:d1:e6:
1d:34:47:14:38:b3:b9:d1:90:65:b3:b2:7c:20:d7:ed:ce:45:
a0:28:ad:3c:81:16:50:4a:81:2b:f9:de:ce:ce:91:65:66:5c:
77:28:0b:1e:2f:ec:75:53:bb:8a:45:07:d3:06:40:70:11:a8:
57:a4:36:cf:e6:ba:ac:0f:6c:ed:38:dd:2b:7e:2e:e8:7f:6f:
8f:e9:3c:aa:60:fa:49:91:9b:f8:54:34:91:f3:d9:75:d2:06:
8c:a7:9c:ab:46:cc:3c:81:c2:97:6d:1f:f1:90:04:5c:ac:8e:
64:a2:79:84:27:73:e6:95:d4:9d:47:04:2f:ec:88:bb:15:e8:
42:38:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:07 2024 by rpki-client on console-fra.rpki-client.org