Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/tas80hspRYcaRZz6aF742hwnBao.roa
File: tas80hspRYcaRZz6aF742hwnBao.roa (raw, json)
Hash identifier: duO/ZvLM1WsWdR+IXRxYGxbp0g2OE0DmHW61SEd38nY=
Subject key identifier: B5:AB:3C:D2:1B:29:45:87:1A:45:9C:FA:68:5E:F8:DA:1C:27:05:AA
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 018CC801950403D24BBEF9114C7A475A0D96
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/tas80hspRYcaRZz6aF742hwnBao.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203030
IP address blocks: 185.27.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:95:04:03:d2:4b:be:f9:11:4c:7a:47:5a:0d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5ab3cd21b2945871a459cfa685ef8da1c2705aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:52:16:be:4f:68:b3:04:06:83:30:61:46:
88:3c:85:49:24:58:02:48:ee:9f:5a:9f:87:f1:18:
f6:a3:1e:e4:f4:d1:24:7b:dd:4e:07:b0:15:67:b3:
99:ff:e9:3e:aa:b7:28:c8:c4:b1:88:20:f7:63:0e:
95:40:3a:79:d2:7a:e3:9a:34:81:57:54:38:c8:be:
c0:23:58:7e:03:cd:24:62:26:f5:be:82:b3:1b:ef:
34:2e:35:9e:9c:94:c1:f4:c6:5d:07:ff:fb:dd:93:
9a:ca:87:22:fa:c1:4a:c7:41:2b:c7:4c:d3:d1:d9:
ff:b8:7a:cb:a8:e4:cc:2d:1f:3c:de:18:69:e4:a1:
9a:0f:c1:f8:38:08:89:7f:65:8e:06:ba:fd:c8:d0:
11:f7:ce:7f:e8:2b:a0:87:1b:46:a6:ce:86:e3:af:
b2:f1:e9:07:d1:34:38:9f:2e:a1:fd:ec:34:be:fb:
98:db:72:e9:49:39:52:77:57:82:40:47:95:5d:84:
9c:2b:0e:91:c3:b0:18:d3:01:62:cf:b4:fa:e7:50:
65:3d:d1:98:f0:f6:21:20:c8:1e:ad:b2:09:33:30:
ec:58:a1:b9:e9:02:70:c0:d7:30:b1:8f:4a:fa:82:
7e:cf:08:f7:22:3b:8b:c8:1c:e0:45:ab:b7:a1:95:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:3C:D2:1B:29:45:87:1A:45:9C:FA:68:5E:F8:DA:1C:27:05:AA
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/tas80hspRYcaRZz6aF742hwnBao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.224.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:de:ba:a9:5d:e1:aa:59:5f:d0:16:ba:05:51:d2:54:4e:0b:
60:ca:89:98:eb:8a:49:36:df:23:46:d0:20:5e:64:f6:39:85:
60:6b:77:5b:e6:c4:95:4d:bd:ff:41:a6:2d:d9:a3:59:60:bd:
e0:07:fd:9d:2b:5e:a4:94:45:74:09:f0:c4:71:35:17:2a:99:
15:78:07:b9:fb:8f:1a:58:0e:35:86:bd:01:ed:3d:0e:27:2a:
32:b3:39:d5:b9:0c:20:46:16:5c:ec:9b:4b:fd:f1:d8:b9:48:
43:bc:ca:d8:e1:60:02:02:f9:a4:91:9a:d8:48:f7:8c:98:5e:
dc:84:4c:76:41:8a:7d:c4:a4:d6:0c:0c:89:04:5f:b4:ec:d6:
dd:88:18:50:6b:81:c6:31:37:f2:ea:08:81:11:c2:2c:3d:ca:
86:6b:30:b6:eb:0a:63:1d:82:2f:b7:30:91:9e:e1:ff:1d:d8:
60:cd:ba:e7:37:c2:50:ed:c7:7f:8e:7d:3b:31:94:ee:16:49:
6f:0c:f5:f3:7b:00:e4:18:1e:7e:c3:a2:b3:c2:ad:b8:8e:c3:
c7:0e:d5:9f:c3:7a:86:fe:ff:e1:0a:03:36:01:29:bf:00:f2:
e2:49:50:18:13:dc:d8:d8:ed:fd:73:f0:7d:5c:49:11:88:0e:
83:03:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:59:08 2024 by rpki-client on console-fra.rpki-client.org