Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/TBUQGbvGy8WpxYe11EDrGLGBcx8.roa
File: TBUQGbvGy8WpxYe11EDrGLGBcx8.roa (raw, json)
Hash identifier: 3whARzgV373Hq7bJRQXnA+BqWKOJ6PlgdDArlf/RCOg=
Subject key identifier: 4C:15:10:19:BB:C6:CB:C5:A9:C5:87:B5:D4:40:EB:18:B1:81:73:1F
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019420D66097B08B7CF1EECF42442ED09886
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/TBUQGbvGy8WpxYe11EDrGLGBcx8.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23422
IP address blocks: 83.143.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:60:97:b0:8b:7c:f1:ee:cf:42:44:2e:d0:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c151019bbc6cbc5a9c587b5d440eb18b181731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:e1:e2:04:9f:67:6e:e3:d7:3d:b3:19:60:
d2:72:44:dd:2c:ee:8a:24:f0:9b:8b:52:6a:3b:91:
5e:43:f2:f5:64:f2:bd:64:4c:55:e0:18:e0:f2:02:
32:0d:4d:84:10:60:a8:29:d8:2e:a1:b6:a2:3f:23:
3b:af:db:9d:ff:16:8a:36:e6:49:4c:30:63:49:d1:
bf:a4:3b:5e:4f:5c:a1:39:ee:76:84:35:a2:5d:11:
58:cd:92:1f:2e:fb:0b:ab:21:43:3c:c4:21:70:67:
a9:ad:fb:f2:59:13:67:71:70:60:7b:b7:fd:08:41:
29:5b:8b:48:8c:f7:35:45:87:1a:0d:30:e0:b2:50:
93:5c:7a:6d:2d:d4:68:40:79:95:59:e9:f3:3c:05:
4c:16:5f:62:4d:e6:91:aa:2c:c8:a6:18:b2:53:ed:
3a:c0:d2:20:c9:3e:b7:f8:16:73:b2:8c:52:4f:8f:
7e:50:96:20:6e:38:86:48:9b:27:91:17:f6:d7:c0:
0e:07:cd:9c:6b:9f:78:81:4a:26:31:1d:f6:44:19:
1c:14:96:34:9c:b0:64:5f:5b:2f:00:37:df:ab:90:
44:9a:2e:36:5e:e3:35:dc:78:66:cd:62:0b:e2:e4:
8e:70:75:bd:a3:57:5b:0e:20:e0:40:9a:fa:bf:6b:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:10:19:BB:C6:CB:C5:A9:C5:87:B5:D4:40:EB:18:B1:81:73:1F
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/TBUQGbvGy8WpxYe11EDrGLGBcx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.106.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a1:77:5f:ab:48:30:4e:b6:55:37:7d:e9:e7:17:6c:e5:56:
cf:c1:78:71:b4:15:83:c4:b9:9b:2e:fd:dc:57:63:54:cb:51:
2f:87:59:12:e9:e0:ad:1e:b4:fa:05:42:86:08:f3:57:13:37:
fc:1a:41:2f:54:07:be:56:48:59:51:60:c6:61:c0:06:95:62:
7c:c8:22:22:98:f4:be:24:21:49:63:9b:1a:7b:36:0f:e2:72:
0c:12:13:79:f1:7d:97:95:e3:5c:3b:e4:a3:ab:4e:37:b4:4d:
e7:4b:21:15:15:85:57:15:55:ef:49:50:26:85:96:9a:71:47:
ba:24:11:b0:18:e8:3b:09:37:f3:eb:d1:ca:f3:a7:5e:20:0f:
91:13:84:ea:a7:73:7d:95:47:0f:64:bc:c9:d3:d6:d5:5c:39:
60:fb:30:91:37:af:eb:84:c8:82:a5:b4:6b:28:9b:65:2a:6e:
0d:66:b5:ce:2b:39:6d:e4:03:25:a2:a7:03:9d:27:a0:93:51:
f1:5a:7b:fa:68:19:b0:8f:8b:4c:4b:72:87:5a:3c:56:8c:41:
0c:65:1a:53:86:60:64:d7:2d:5a:93:65:d6:45:d6:bc:59:54:
a3:fc:75:c6:b7:57:31:e3:4f:2d:95:6a:26:2f:30:1b:7e:15:
14:4b:1a:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1mCXsIt88e7PQkQu0JiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy
ZmY0MTQwHhcNMjUwMTAxMDc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzE1MTAxOWJiYzZjYmM1YTljNTg3YjVkNDQwZWIxOGIxODE3MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy73h4gSfZ27j1z2zGWDSckTdLO6K
JPCbi1JqO5FeQ/L1ZPK9ZExV4Bjg8gIyDU2EEGCoKdguobaiPyM7r9ud/xaKNuZJ
TDBjSdG/pDteT1yhOe52hDWiXRFYzZIfLvsLqyFDPMQhcGeprfvyWRNncXBge7f9
CEEpW4tIjPc1RYcaDTDgslCTXHptLdRoQHmVWenzPAVMFl9iTeaRqizIphiyU+06
wNIgyT63+BZzsoxST49+UJYgbjiGSJsnkRf218AOB82ca594gUomMR32RBkcFJY0
nLBkX1svADffq5BEmi42XuM13HhmzWIL4uSOcHW9o1dbDiDgQJr6v2tSiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEwVEBm7xsvFqcWHtdRA6xixgXMfMB8GA1UdIwQY
MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt
Y2ZjNDZhNzZlYzc4LzEvVEJVUUdidkd5OFdweFllMTFFRHJHTEdCY3g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4
LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU49qMA0G
CSqGSIb3DQEBCwUAA4IBAQBioXdfq0gwTrZVN33p5xds5VbPwXhxtBWDxLmbLv3c
V2NUy1Evh1kS6eCtHrT6BUKGCPNXEzf8GkEvVAe+VkhZUWDGYcAGlWJ8yCIimPS+
JCFJY5saezYP4nIMEhN58X2XleNcO+Sjq043tE3nSyEVFYVXFVXvSVAmhZaacUe6
JBGwGOg7CTfz69HK86deIA+RE4Tqp3N9lUcPZLzJ09bVXDlg+zCRN6/rhMiCpbRr
KJtlKm4NZrXOKzlt5AMloqcDnSegk1HxWnv6aBmwj4tMS3KHWjxWjEEMZRpThmBk
1y1ak2XWRda8WVSj/HXGt1cx408tlWomLzAbfhUUSxqS
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:27 2025 by rpki-client