Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/TMS1O1FoRoQRgmqTv13IHkFvaW8.roa
File: TMS1O1FoRoQRgmqTv13IHkFvaW8.roa (raw, json)
Hash identifier: gJ+KOHl4ZmrFelinh18Me0qQLJk09E+gVn2Mx0m0rig=
Subject key identifier: 4C:C4:B5:3B:51:68:46:84:11:82:6A:93:BF:5D:C8:1E:41:6F:69:6F
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019350A59955146449C9B5992CE0EE00503D
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/TMS1O1FoRoQRgmqTv13IHkFvaW8.roa
Signing time: Thu 21 Nov 2024 21:34:10 +0000
ROA not before: Thu 21 Nov 2024 21:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 103.83.87.0/24 maxlen: 24
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a0f:3380::/32 maxlen: 32
2a0f:3381::/32 maxlen: 32
2a0f:3382::/32 maxlen: 32
2a0f:3383::/32 maxlen: 32
2a0f:3384::/32 maxlen: 32
2a0f:3385::/32 maxlen: 32
2a0f:3386::/32 maxlen: 32
2a0f:3387::/32 maxlen: 32
2a14:4080::/29 maxlen: 29
2a14:4080::/32 maxlen: 32
2a14:4081::/32 maxlen: 32
2a14:4082::/32 maxlen: 32
2a14:4083::/32 maxlen: 32
2a14:4084::/32 maxlen: 32
2a14:4085::/32 maxlen: 32
2a14:4086::/32 maxlen: 32
2a14:4087::/32 maxlen: 32
2a14:4380::/29 maxlen: 29
2a14:4380::/32 maxlen: 32
2a14:4381::/32 maxlen: 32
2a14:4382::/32 maxlen: 32
2a14:4383::/32 maxlen: 32
2a14:4384::/32 maxlen: 32
2a14:4385::/32 maxlen: 32
2a14:4386::/32 maxlen: 32
2a14:4387::/32 maxlen: 32
2a14:4480::/29 maxlen: 29
2a14:4480::/32 maxlen: 32
2a14:4481::/32 maxlen: 32
2a14:4482::/32 maxlen: 32
2a14:4483::/32 maxlen: 32
2a14:4484::/32 maxlen: 32
2a14:4485::/32 maxlen: 32
2a14:4486::/32 maxlen: 32
2a14:4487::/32 maxlen: 32
2a14:4980::/29 maxlen: 29
2a14:4980::/32 maxlen: 32
2a14:4981::/32 maxlen: 32
2a14:4982::/32 maxlen: 32
2a14:4983::/32 maxlen: 32
2a14:4984::/32 maxlen: 32
2a14:4985::/32 maxlen: 32
2a14:4986::/32 maxlen: 32
2a14:4987::/32 maxlen: 32
2a14:4a80::/29 maxlen: 29
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
2a14:4b80::/29 maxlen: 29
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:a5:99:55:14:64:49:c9:b5:99:2c:e0:ee:00:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 21 21:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cc4b53b5168468411826a93bf5dc81e416f696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:0b:8a:f3:fe:23:ab:f1:e5:4f:41:10:1d:
b0:ea:e5:5c:b1:2f:cd:5f:c0:eb:19:ad:2c:f9:8d:
2c:1f:95:87:3b:25:be:0f:99:27:5b:8e:30:be:ee:
03:68:70:ec:55:a6:02:c3:c7:90:48:2d:23:92:6d:
3c:d2:e4:b6:e9:58:ea:f7:7f:3c:67:77:df:23:68:
78:cb:06:87:94:9a:34:2c:0a:96:88:65:df:17:ed:
3e:1b:a7:3a:7a:54:8a:52:ef:68:60:4e:ca:83:5a:
fd:f8:1f:44:22:d0:4f:4d:96:46:2e:a5:b3:64:96:
1f:f6:c3:08:39:86:9e:e2:b1:72:f3:d5:06:3e:3e:
e3:e3:c3:d3:ec:dc:3f:b6:d8:f3:51:82:6d:7f:a5:
67:de:46:b7:09:d2:68:66:36:62:22:fc:79:05:ab:
1e:2d:f8:38:e5:37:f1:90:51:d4:3c:5e:9b:80:42:
64:a2:41:22:81:d7:6d:57:c2:96:9a:16:f7:a5:79:
db:fd:8c:d1:23:c2:ec:e5:f8:85:04:e3:b2:40:8c:
9d:ad:b7:2f:77:4c:7c:a2:49:b5:1a:5b:e2:ec:08:
a4:cb:55:96:43:51:2c:65:3e:59:2c:df:d3:ad:5f:
89:9a:f9:18:56:59:37:d0:7a:e5:83:3a:d4:69:71:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:B5:3B:51:68:46:84:11:82:6A:93:BF:5D:C8:1E:41:6F:69:6F
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/TMS1O1FoRoQRgmqTv13IHkFvaW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.87.0/24
IPv6:
2a0b:9800::/29
2a0f:3380::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
61:e6:92:84:22:6c:02:10:de:3c:47:fc:2e:92:97:0b:ea:56:
04:d6:27:0b:22:78:11:9b:de:b9:3b:ce:6d:32:8e:65:90:19:
80:71:53:9b:50:51:ea:10:f7:fa:39:97:c0:2d:41:6a:4e:28:
c9:37:e5:7b:6d:f1:b3:99:4e:1f:d7:61:c4:94:f3:39:12:9c:
eb:48:62:45:5b:a3:64:2c:10:94:6d:43:72:7c:36:59:86:9e:
a3:4e:d7:3e:ce:c9:17:06:3b:d0:45:de:21:4b:b4:c0:55:93:
11:02:c7:3f:1a:2f:7a:8a:50:cb:59:30:bb:b4:dd:34:62:6d:
cc:91:98:14:97:74:52:de:6c:c8:b9:33:dd:d4:fa:a6:04:44:
11:0a:1b:95:cb:89:cc:99:47:5f:a4:77:db:4f:23:3e:12:47:
3e:69:c3:1a:7c:c8:73:73:41:2f:a7:47:f9:5c:94:ba:80:28:
5f:2d:00:b3:17:1a:f8:db:29:fe:28:eb:7f:83:28:29:ed:e7:
f5:f2:b3:7f:14:d9:0f:76:b0:a3:13:cb:ca:cc:de:da:c1:1e:
c9:d7:02:d9:ec:6e:07:81:fd:72:c2:d5:5c:79:13:04:98:fa:
f3:ad:a6:fb:b6:27:4b:99:88:2c:44:cf:9f:dd:5f:c6:a3:8e:
be:54:cc:ce
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZNQpZlVFGRJybWZLODuAFA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjQxMTIxMjEzNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2M0YjUzYjUxNjg0Njg0MTE4MjZhOTNiZjVkYzgxZTQxNmY2OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2sLivP+I6vx5U9BEB2w6uVcsS/N
X8DrGa0s+Y0sH5WHOyW+D5knW44wvu4DaHDsVaYCw8eQSC0jkm080uS26Vjq9388
Z3ffI2h4ywaHlJo0LAqWiGXfF+0+G6c6elSKUu9oYE7Kg1r9+B9EItBPTZZGLqWz
ZJYf9sMIOYae4rFy89UGPj7j48PT7Nw/ttjzUYJtf6Vn3ka3CdJoZjZiIvx5Base
Lfg45TfxkFHUPF6bgEJkokEigddtV8KWmhb3pXnb/YzRI8Ls5fiFBOOyQIydrbcv
d0x8okm1Glvi7Aiky1WWQ1EsZT5ZLN/TrV+JmvkYVlk30HrlgzrUaXFAYwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFEzEtTtRaEaEEYJqk79dyB5Bb2lvMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvVE1TMU8xRm9Sb1FSZ21xVHYxM0lIa0Z2YVc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAMBAIAATAGAwQAZ1NXMD4E
AgACMDgDBQMqC5gAAwUDKg8zgAMFAyoUQIADBQMqFEOAAwUDKhREgAMFAyoUSYAD
BQMqFEqAAwUDKhRLgDANBgkqhkiG9w0BAQsFAAOCAQEAYeaShCJsAhDePEf8LpKX
C+pWBNYnCyJ4EZveuTvObTKOZZAZgHFTm1BR6hD3+jmXwC1Bak4oyTfle23xs5lO
H9dhxJTzORKc60hiRVujZCwQlG1Dcnw2WYaeo07XPs7JFwY70EXeIUu0wFWTEQLH
PxoveopQy1kwu7TdNGJtzJGYFJd0Ut5syLkz3dT6pgREEQoblcuJzJlHX6R3208j
PhJHPmnDGnzIc3NBL6dH+VyUuoAoXy0Asxca+Nsp/ijrf4MoKe3n9fKzfxTZD3aw
oxPLysze2sEeydcC2exuB4H9csLVXHkTBJj6862m+7YnS5mILETPn91fxqOOvlTM
zg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:14:48 2024 by rpki-client on console-fra.rpki-client.org