Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/TEcgcfmPc588zPAFcM06ho7aozE.roa
File: TEcgcfmPc588zPAFcM06ho7aozE.roa (raw, json)
Hash identifier: niZABl/p53xvLn9Jd0yvH3YAzX7TmR1lU6dVv6SS6w0=
Subject key identifier: 4C:47:20:71:F9:8F:73:9F:3C:CC:F0:05:70:CD:3A:86:8E:DA:A3:31
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 018CC26D4DD3CA4495D8705012BDD08F194F
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/TEcgcfmPc588zPAFcM06ho7aozE.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205584
IP address blocks: 2.57.156.0/22 maxlen: 24
185.215.29.0/24 maxlen: 24
185.215.28.0/24 maxlen: 24
185.215.28.0/22 maxlen: 24
185.215.31.0/24 maxlen: 24
185.215.30.0/24 maxlen: 24
193.105.168.0/24 maxlen: 24
195.78.98.0/23 maxlen: 24
2a0b:a2c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4d:d3:ca:44:95:d8:70:50:12:bd:d0:8f:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c472071f98f739f3cccf00570cd3a868edaa331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:0b:87:13:00:f0:75:80:3c:d5:b5:a6:98:
16:4b:fd:0b:13:e5:be:52:ad:41:3c:5b:fd:5c:f0:
05:0a:01:97:e8:bf:f1:ac:29:8a:01:93:07:61:35:
1a:ce:93:a9:6d:17:cc:81:0a:6d:11:08:84:fa:8b:
3a:06:d4:a3:6f:76:c6:74:f8:46:4b:a8:87:e7:66:
9f:05:4c:db:2d:03:ac:e8:92:21:04:df:49:1e:40:
67:f5:9d:d5:4d:e5:fb:c2:61:62:3f:43:6f:fd:71:
f1:c4:d4:53:31:2e:d6:c8:77:e8:21:d4:ca:c4:a0:
be:f8:f1:8c:13:8d:b9:32:99:74:ef:f2:00:09:e0:
39:e7:5d:f7:1c:1c:7b:7c:4f:dc:14:e7:32:91:5e:
9f:da:b8:40:dc:07:52:68:b8:65:ec:f6:06:cc:6e:
e2:11:63:2f:bd:f4:5b:10:be:71:99:d0:54:79:13:
9a:25:75:07:c3:56:cc:41:b0:9f:da:db:9d:04:1f:
0e:28:70:dd:74:a6:92:68:4c:17:6f:af:9f:ed:e7:
a0:bf:b3:04:42:13:c8:8f:34:3e:89:23:cf:b7:14:
70:3a:d1:c9:7b:81:6a:cd:ef:c9:79:b4:9c:aa:7d:
77:45:c3:38:b2:12:5e:1d:7a:29:8a:0b:49:4c:ef:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:47:20:71:F9:8F:73:9F:3C:CC:F0:05:70:CD:3A:86:8E:DA:A3:31
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/TEcgcfmPc588zPAFcM06ho7aozE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.156.0/22
185.215.28.0/22
193.105.168.0/24
195.78.98.0/23
IPv6:
2a0b:a2c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:50:1f:17:42:81:69:b0:6d:bf:4b:2f:a8:81:cc:f8:7a:73:
85:d9:fe:54:d7:27:e8:f9:35:dd:2a:3b:1a:44:5a:ec:5d:05:
52:32:e4:93:61:6f:c2:af:bd:22:0e:2a:d6:21:33:ad:75:70:
52:d7:9f:c5:99:e3:d8:2b:b0:5f:cf:be:47:e6:40:94:65:c5:
11:4c:9d:e4:cb:39:c5:c0:d5:91:65:f0:3b:33:1d:f5:7a:73:
21:6d:86:c0:18:4e:b7:dd:69:09:aa:6b:b6:b5:a2:ef:3c:40:
cb:35:dc:20:6e:cb:36:dd:bb:04:2d:2e:32:c7:0a:c8:4c:eb:
9c:2f:dc:1e:fd:96:de:73:76:79:1a:79:74:1a:cc:31:8d:75:
52:23:f4:a6:a5:be:33:1c:e0:68:4a:91:92:46:86:74:f9:4a:
bf:db:26:f5:de:18:e4:9d:a1:80:c6:3b:82:fc:dd:cb:f8:e4:
bf:83:27:f9:96:e0:e2:52:05:6a:ce:9e:a3:18:94:80:7e:76:
97:66:95:52:68:ac:d6:5c:e3:e8:f1:19:29:bc:b5:07:f4:3c:
a9:4d:b3:32:50:04:6c:fe:48:b7:6d:32:11:36:8e:4b:85:17:
2a:7c:14:ff:d0:8e:06:0a:9d:c0:91:d1:6b:e6:fa:f1:b5:a4:
83:d3:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:08:47 2024 by rpki-client on console-ams.rpki-client.org