Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TWPsZKmIgOo3DvHEzQOWZeHgjLE.roa
File: TWPsZKmIgOo3DvHEzQOWZeHgjLE.roa (raw, json)
Hash identifier: fsfC8VIt6C/fvU2Re5Y8LNDeyYEVAAcUbxFXM+irklE=
Subject key identifier: 4D:63:EC:64:A9:88:80:EA:37:0E:F1:C4:CD:03:96:65:E1:E0:8C:B1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC6BE70A17A286ACD2F4207601BF68F9C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TWPsZKmIgOo3DvHEzQOWZeHgjLE.roa
Signing time: Mon 01 Jan 2024 20:36:58 +0000
ROA not before: Mon 01 Jan 2024 20:36:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 84.32.56.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:be:70:a1:7a:28:6a:cd:2f:42:07:60:1b:f6:8f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 20:36:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d63ec64a98880ea370ef1c4cd039665e1e08cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:40:b6:96:4e:e0:a1:83:02:1a:8f:c5:b1:
83:80:4a:ac:be:e2:05:19:a2:82:99:29:5e:07:c6:
4b:d8:f7:e1:8a:a2:a0:b3:11:42:dd:35:16:10:f1:
bb:ca:90:c2:4c:14:a8:2f:5e:d7:69:75:fc:73:ec:
cd:42:9f:35:d1:a0:44:da:35:3a:a9:23:06:36:d6:
f9:b1:2a:d2:55:4b:01:0b:03:50:7e:78:4a:f3:1c:
df:2e:ae:96:56:9c:cc:ec:85:c8:67:fc:bb:58:44:
e1:07:78:98:97:28:a1:b5:96:d3:29:9f:15:5a:89:
0b:25:55:0f:b8:da:36:1d:61:95:f3:cc:e0:22:34:
49:60:3e:22:8a:0f:2b:16:07:53:37:ca:0d:ef:da:
da:80:e6:d9:b9:1a:26:4f:42:e1:46:3e:fc:a0:d0:
fc:57:6d:fc:8d:d5:38:5f:6a:2f:70:ff:d4:37:48:
45:e3:33:4d:ad:a0:77:ad:b1:eb:24:f0:ed:96:68:
9d:97:78:70:94:01:7d:e4:26:ab:c4:06:0e:08:41:
00:27:cd:46:7c:8f:cb:a9:26:8d:77:38:77:2a:26:
1b:34:41:83:10:bb:e8:47:72:a8:87:11:31:eb:17:
bb:fe:4a:6b:71:f2:4e:e5:81:e0:24:00:aa:71:50:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:63:EC:64:A9:88:80:EA:37:0E:F1:C4:CD:03:96:65:E1:E0:8C:B1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TWPsZKmIgOo3DvHEzQOWZeHgjLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
88.216.20.0/23
88.216.103.0/24
88.216.181.0/24
88.216.184.0/23
88.216.212.0/23
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
26:62:76:ea:c3:94:80:3f:21:5b:c2:7b:c1:92:fc:73:b1:60:
b9:24:70:38:3a:a3:2f:b6:17:3d:3b:69:a1:cb:0a:72:70:2d:
52:10:57:12:fc:7b:de:64:18:1f:0b:98:76:af:42:49:1d:96:
d3:9f:b6:41:a8:1a:c1:8e:ff:57:a6:b2:c9:ef:9b:47:7d:aa:
f8:cf:49:f9:c1:f4:49:8b:68:20:be:12:63:2f:2c:e9:71:c0:
2a:93:fd:ce:38:60:33:7f:14:da:e8:53:12:76:e2:62:df:fe:
4e:09:6f:cd:8b:84:2e:1b:40:3c:eb:6c:84:8b:77:ea:88:1e:
58:ec:34:fc:21:86:f0:87:c5:0d:24:c8:34:ab:99:89:bc:19:
b6:be:e7:df:44:04:5b:26:06:69:06:43:fb:b4:47:51:52:08:
fc:d2:c5:5f:ef:b9:45:26:e6:b1:bf:8f:7e:a2:76:d0:7e:13:
f5:91:11:6b:ac:87:85:35:59:24:2a:40:09:ae:63:aa:fe:b2:
cc:94:61:f4:0d:72:b4:55:a7:55:42:09:0c:ce:1b:be:e9:a1:
30:a6:57:a7:f5:09:56:30:3f:a6:f7:7b:70:53:96:8b:bc:ec:
c3:fe:97:4a:14:bf:46:6a:52:28:62:05:ec:e4:54:27:a2:04:
f0:a5:20:a6
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzGvnCheihqzS9CB2Ab9o+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwMTAxMjAzNjU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDYzZWM2NGE5ODg4MGVhMzcwZWYxYzRjZDAzOTY2NWUxZTA4Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRJAtpZO4KGDAhqPxbGDgEqsvuIF
GaKCmSleB8ZL2PfhiqKgsxFC3TUWEPG7ypDCTBSoL17XaXX8c+zNQp810aBE2jU6
qSMGNtb5sSrSVUsBCwNQfnhK8xzfLq6WVpzM7IXIZ/y7WEThB3iYlyihtZbTKZ8V
WokLJVUPuNo2HWGV88zgIjRJYD4iig8rFgdTN8oN79ragObZuRomT0LhRj78oND8
V238jdU4X2ovcP/UN0hF4zNNraB3rbHrJPDtlmidl3hwlAF95CarxAYOCEEAJ81G
fI/LqSaNdzh3KiYbNEGDELvoR3KohxEx6xe7/kprcfJO5YHgJACqcVA/FwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFE1j7GSpiIDqNw7xxM0DlmXh4IyxMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVFdQc1pLbUlnT28zRHZIRXpRT1daZUhnakxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAVCA4AwQB
WNgUAwQAWNhnAwQAWNi1AwQBWNi4AwQBWNjUAwQAWNjXMA0GCSqGSIb3DQEBCwUA
A4IBAQAmYnbqw5SAPyFbwnvBkvxzsWC5JHA4OqMvthc9O2mhywpycC1SEFcS/Hve
ZBgfC5h2r0JJHZbTn7ZBqBrBjv9XprLJ75tHfar4z0n5wfRJi2ggvhJjLyzpccAq
k/3OOGAzfxTa6FMSduJi3/5OCW/Ni4QuG0A862yEi3fqiB5Y7DT8IYbwh8UNJMg0
q5mJvBm2vuffRARbJgZpBkP7tEdRUgj80sVf77lFJuaxv49+onbQfhP1kRFrrIeF
NVkkKkAJrmOq/rLMlGH0DXK0VadVQgkMzhu+6aEwplen9QlWMD+m93twU5aLvOzD
/pdKFL9GalIoYgXs5FQnogTwpSCm
-----END CERTIFICATE-----
Generated at Tue May 7 03:14:17 2024 by rpki-client on console-fra.rpki-client.org