Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/TgHrjsYISSyNe7JEVKU3RKcKOEc.roa
File: TgHrjsYISSyNe7JEVKU3RKcKOEc.roa (raw, json)
Hash identifier: OCT4qEu4cej7EwkDYFq31UUf5xLm9c82NjO79yu6Oso=
Subject key identifier: 4E:01:EB:8E:C6:08:49:2C:8D:7B:B2:44:54:A5:37:44:A7:0A:38:47
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 018F0A3A116352E3590711971553372A32C7
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/TgHrjsYISSyNe7JEVKU3RKcKOEc.roa
Signing time: Tue 23 Apr 2024 09:12:08 +0000
ROA not before: Tue 23 Apr 2024 09:12:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25252
IP address blocks: 171.25.128.0/21 maxlen: 21
193.221.28.0/24 maxlen: 24
193.221.36.0/24 maxlen: 24
193.221.37.0/24 maxlen: 24
193.221.38.0/24 maxlen: 24
193.221.47.0/24 maxlen: 24
193.221.52.0/24 maxlen: 24
193.221.53.0/24 maxlen: 24
193.221.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:3a:11:63:52:e3:59:07:11:97:15:53:37:2a:32:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Apr 23 09:12:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e01eb8ec608492c8d7bb24454a53744a70a3847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:00:a1:5f:f7:89:2a:6d:cd:58:2b:fa:ef:
4d:7e:50:d3:11:14:c1:1f:f0:4e:93:98:32:3e:ab:
e8:54:c8:60:2f:e5:82:0a:fb:4f:9b:27:8a:ce:0e:
c4:65:88:63:1b:b9:ed:41:c0:a7:bc:11:bd:3b:82:
5e:8a:88:fa:92:dc:fc:41:04:dd:73:86:47:c6:5f:
31:78:6e:ae:88:c6:af:47:cb:88:64:6f:24:cf:90:
43:b0:4f:50:f5:a3:69:39:c0:0c:48:9e:79:ad:0f:
cf:01:8e:64:ae:10:c2:c7:a9:ff:4a:6f:32:b2:55:
61:9c:bc:96:0a:34:e2:9d:a5:24:86:59:f3:ac:61:
d3:65:22:6d:b6:7a:2e:01:05:ef:f0:f6:ca:c9:44:
f2:10:a9:8c:db:bd:66:62:1a:7d:a2:41:16:cb:94:
c5:c7:b4:f6:81:c5:ca:5e:68:20:54:64:e6:7d:0e:
a5:16:07:d3:4d:2f:60:c5:b8:2a:c6:af:58:ad:ce:
5a:ed:ac:0a:2a:43:d9:40:f0:cd:0c:84:56:61:04:
85:b4:bd:9d:87:27:a5:1c:84:81:fa:d3:6a:e0:b0:
28:4b:63:15:09:9a:b5:78:71:77:86:65:9c:f6:da:
bd:88:28:58:a3:a9:35:8c:37:3f:03:bc:ec:97:55:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:EB:8E:C6:08:49:2C:8D:7B:B2:44:54:A5:37:44:A7:0A:38:47
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/TgHrjsYISSyNe7JEVKU3RKcKOEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.128.0/21
193.221.28.0/24
193.221.36.0-193.221.38.255
193.221.47.0/24
193.221.52.0/23
193.221.59.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e8:d1:26:f7:05:8b:66:04:2a:a3:a7:d7:c6:c3:87:60:d1:
32:e0:e6:2c:6f:1a:88:bc:7c:88:e8:7b:fb:b3:b0:f2:44:fb:
7d:b6:14:89:25:aa:7f:87:90:4a:77:d6:82:fe:6b:df:45:c4:
4f:5f:f5:22:a7:62:1e:e1:cd:7a:d8:d5:5d:1a:30:ba:a4:f7:
cb:e6:13:72:ae:34:b3:c7:8b:98:c8:45:b9:ba:11:ca:25:d7:
a7:df:90:fc:da:8a:81:22:7c:35:96:fd:ba:46:62:70:75:25:
4f:ae:cf:b5:f0:fd:23:35:62:8d:2c:06:2b:c0:74:71:52:bd:
e3:35:83:dc:12:c4:e8:48:97:cb:31:6c:3b:d8:0e:14:83:dc:
6a:8b:c8:49:24:ee:7e:0b:a7:45:48:50:38:ae:ca:7c:ec:79:
7a:de:a1:f5:9e:26:11:db:44:8e:40:10:8b:c8:81:7a:28:96:
e8:6e:e7:81:30:d6:f5:f2:31:bb:f2:1d:d1:5f:c0:86:e7:f7:
76:37:99:a4:3b:40:75:44:bb:f3:13:e6:c7:a4:97:eb:41:e2:
84:71:a1:00:fc:ce:b2:a5:a8:29:ca:41:07:04:21:e3:47:59:
30:2b:fc:53:48:af:ab:ad:63:5f:c1:8e:03:ba:5f:f6:6b:9c:
18:4d:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:59:58 2024 by rpki-client on console-ams.rpki-client.org