Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/TYWISTF2cR8KFDQVN_4SHqKPWNY.roa
File: TYWISTF2cR8KFDQVN_4SHqKPWNY.roa (raw, json)
Hash identifier: HdbD4L/zDHLeDR3VwTM3QdeBDT8MLsjuRidbbPY5iYo=
Subject key identifier: 4D:85:88:49:31:76:71:1F:0A:14:34:15:37:FE:12:1E:A2:8F:58:D6
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 018CC4934837A840C573D3E056B5E04A2B99
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/TYWISTF2cR8KFDQVN_4SHqKPWNY.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56911
IP address blocks: 185.139.180.0/24 maxlen: 24
185.47.137.0/24 maxlen: 24
185.47.136.0/24 maxlen: 24
185.47.139.0/24 maxlen: 24
195.177.112.0/24 maxlen: 24
195.177.115.0/24 maxlen: 24
195.177.114.0/24 maxlen: 24
195.177.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:48:37:a8:40:c5:73:d3:e0:56:b5:e0:4a:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d8588493176711f0a14341537fe121ea28f58d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:2f:3b:c9:60:e9:35:02:55:12:4d:e4:25:
6c:65:e5:f6:79:1a:a5:d5:6b:15:31:28:1c:f0:3c:
59:08:48:96:7a:71:7f:81:60:1e:ae:0a:c7:3f:4d:
d5:b6:bf:a4:fd:18:ff:a1:ce:22:cd:78:83:26:fb:
b8:5e:00:52:95:30:b2:f7:b5:40:fc:94:82:f4:c6:
0f:41:90:77:53:fe:ba:9d:f9:d0:88:05:62:f9:ff:
4f:b0:e2:8c:f2:97:13:60:4b:11:09:e0:f6:c2:2a:
b4:ad:2a:4d:12:93:13:35:79:ad:c2:f1:56:16:c6:
e6:db:9d:bb:70:18:68:78:2d:32:6f:94:38:9f:4c:
a9:1b:ec:3d:3b:a1:53:2a:70:28:58:17:ec:f1:18:
1c:5e:5b:0a:af:c3:bc:15:91:fa:85:be:c1:6e:83:
28:2b:09:3a:84:6b:7e:8a:c8:0a:db:c2:bc:9e:3b:
ca:0f:13:98:d0:b6:95:82:9e:74:a0:e7:b4:91:48:
1d:c9:60:46:54:a6:0e:7d:b9:46:d9:0f:fc:2d:c8:
d2:e1:34:b8:54:4f:38:e3:45:21:7f:ce:fd:2f:2a:
b9:1b:f3:30:56:93:4b:7e:95:72:78:f0:75:10:8f:
52:05:c3:22:d4:21:5b:80:67:a4:b7:4e:45:b4:9d:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:88:49:31:76:71:1F:0A:14:34:15:37:FE:12:1E:A2:8F:58:D6
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/TYWISTF2cR8KFDQVN_4SHqKPWNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.136.0/23
185.47.139.0/24
185.139.180.0/24
195.177.112.0/22
Signature Algorithm: sha256WithRSAEncryption
82:cd:7b:34:40:24:4a:41:1c:e0:62:da:d4:9f:f3:40:9b:11:
3f:7d:7b:a8:53:d7:d3:37:e1:54:e0:68:3a:41:2b:39:5d:31:
76:86:7c:ab:68:1f:0f:be:e9:02:ad:33:bd:4e:cc:ef:e9:31:
09:ca:59:49:43:b1:5c:97:03:8b:1d:38:e4:c0:28:f9:0c:86:
4b:6d:5c:c8:36:22:19:e8:a8:70:08:c5:84:4c:4a:7e:52:f5:
34:6f:1e:28:6f:4b:13:8e:7e:1e:8d:e4:2b:11:f9:37:1f:dd:
ed:96:51:96:02:aa:1b:3d:c4:5e:91:68:54:3b:38:3b:1f:99:
1a:4d:1c:47:e8:d8:b3:56:4e:91:a0:c9:14:a6:b4:dd:0f:9f:
ce:e6:4a:9a:25:b4:42:1a:e3:e3:f0:54:5f:1a:75:93:50:fd:
2f:33:67:5a:6f:a4:2e:12:6c:ad:89:7a:50:84:a5:0c:42:57:
0d:3e:89:2f:9e:a6:9d:0a:24:74:34:0d:4a:9c:7a:80:25:bb:
1f:cc:83:94:93:74:bf:b4:3c:ef:66:77:d1:d1:ea:c9:59:c6:
df:d8:6b:70:f3:9a:bb:7d:88:b2:06:8c:e3:e9:a2:cf:01:96:
18:53:1b:e6:9b:21:88:4e:0e:83:20:aa:26:22:1c:06:ef:46:
24:de:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:55:18 2024 by rpki-client on console-fra.rpki-client.org