Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/TINsK14tVkPnTRZR_ZlFXCFyeVU.roa
File: TINsK14tVkPnTRZR_ZlFXCFyeVU.roa (raw, json)
Hash identifier: N/GIm3rtMm0CfXzbos/tlIYsJw7j5xZbBeyzAuoEAKE=
Subject key identifier: 4C:83:6C:2B:5E:2D:56:43:E7:4D:16:51:FD:99:45:5C:21:72:79:55
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 018CC3490DFDD44AF8EA6902D5F53A304109
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/TINsK14tVkPnTRZR_ZlFXCFyeVU.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206120
IP address blocks: 194.147.172.0/24 maxlen: 24
194.147.227.0/24 maxlen: 24
194.147.228.0/24 maxlen: 24
185.195.248.0/22 maxlen: 22
185.195.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0d:fd:d4:4a:f8:ea:69:02:d5:f5:3a:30:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c836c2b5e2d5643e74d1651fd99455c21727955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:98:0a:74:03:1d:66:a5:17:a8:36:b2:58:
d0:59:21:3e:eb:e9:3d:39:23:b8:01:ff:11:50:c4:
8a:ba:25:03:ff:20:ee:55:c3:e1:25:24:95:a2:85:
3c:a4:ab:d2:a6:22:b6:89:70:4c:f6:14:09:a9:6b:
3f:07:a9:1e:a9:c1:6c:6e:1d:08:4a:fd:b9:b8:a5:
a3:7c:5f:cd:45:d0:56:bd:e5:36:9e:40:7f:9a:00:
23:6f:23:94:fd:91:a5:e9:64:1a:cd:5e:1c:5c:12:
dd:44:be:0b:a0:70:71:0c:56:b5:68:74:ef:a4:15:
0d:7d:8d:5b:5a:50:99:fe:e5:f8:ab:63:5d:14:45:
e0:2d:09:14:be:9b:98:99:98:37:1d:17:7b:4b:fc:
4f:82:48:19:78:ea:79:d4:d5:5c:8e:f5:23:b1:98:
5e:a0:ef:c4:0f:1f:c5:37:c4:31:10:24:78:1c:06:
1e:4f:17:65:c2:e2:46:a5:e4:73:f9:7c:ad:79:0a:
61:0b:88:19:af:4f:df:5e:68:91:01:d1:6b:b4:67:
c7:c2:4d:51:d4:5e:48:1c:7d:53:29:1d:da:a6:74:
90:6e:56:cc:7a:97:e5:a2:c9:c3:84:24:23:31:08:
a4:35:e2:69:d8:78:b0:52:a2:69:74:79:11:19:89:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:6C:2B:5E:2D:56:43:E7:4D:16:51:FD:99:45:5C:21:72:79:55
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/TINsK14tVkPnTRZR_ZlFXCFyeVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.248.0/22
194.147.172.0/24
194.147.227.0-194.147.228.255
Signature Algorithm: sha256WithRSAEncryption
5f:3e:0b:32:b3:d7:92:99:f2:8f:75:a9:df:a9:0e:70:72:da:
70:57:87:a5:fd:c4:92:f3:c4:95:a7:7f:11:cd:a7:ff:3c:06:
c5:b6:bd:5c:46:0a:5d:6f:c5:4d:be:c7:97:51:a6:bf:76:57:
05:41:57:49:f0:32:40:87:1f:f1:bd:b3:1e:b2:3f:24:84:0b:
df:ca:b8:be:88:82:75:8f:72:99:14:6c:1d:d7:cd:ab:e2:73:
f3:a9:7b:fc:94:79:be:bd:d2:e8:04:77:ea:f1:7c:9e:89:8b:
41:f3:74:c7:19:c8:aa:40:4b:38:ca:05:40:56:d5:af:b9:a9:
aa:6f:2f:f9:0e:69:09:a5:e5:74:4e:2a:c7:d2:d3:83:bc:a1:
3f:c3:20:bb:34:6d:dd:27:6f:f7:37:7d:99:98:b6:f0:0d:0d:
eb:ce:d7:c9:aa:11:cf:49:bb:2d:f4:3c:c7:e4:6f:e3:2d:27:
c8:e4:df:ba:db:bc:6f:6b:92:d8:6f:29:63:22:1e:a4:be:1c:
19:4b:ae:56:9e:df:13:de:e4:d9:83:e1:96:ea:65:c9:37:91:
42:30:26:11:d6:a6:62:43:18:17:b2:02:a0:1a:a4:ea:f1:46:
af:c8:f2:9a:3b:96:ba:65:d3:bb:6d:99:53:3c:51:43:fe:e6:
b6:84:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:26:54 2024 by rpki-client on console-ams.rpki-client.org