Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/tsgLFBiXDVEej1p_RJIngcs74M8.roa
File: tsgLFBiXDVEej1p_RJIngcs74M8.roa (raw, json)
Hash identifier: fofInnuSbDbiP1toHpYSRXncICGDJZ2MoM+Tjv9kJn8=
Subject key identifier: B6:C8:0B:14:18:97:0D:51:1E:8F:5A:7F:44:92:27:81:CB:3B:E0:CF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 018CCA2ABC1FC1AE9079B0F98740D22B4602
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/tsgLFBiXDVEej1p_RJIngcs74M8.roa
Signing time: Tue 02 Jan 2024 12:34:07 +0000
ROA not before: Tue 02 Jan 2024 12:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199181
IP address blocks: 5.158.64.0/20 maxlen: 21
77.39.128.0/19 maxlen: 20
185.142.68.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:bc:1f:c1:ae:90:79:b0:f9:87:40:d2:2b:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jan 2 12:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c80b1418970d511e8f5a7f44922781cb3be0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:12:68:6c:76:c8:ee:c6:9f:2c:1e:c4:1d:
3f:78:6a:19:d7:9c:7b:0d:47:66:89:b9:00:a2:70:
1f:1e:f7:af:dd:7b:a3:f8:03:c1:34:7e:09:d1:97:
68:d5:b1:87:2c:fe:96:d9:02:b1:16:d0:8f:42:2a:
14:95:71:1a:6d:3f:ab:7f:e6:76:72:dc:ee:fd:57:
f4:84:41:80:d2:c8:f2:dd:50:7e:44:5c:98:82:79:
52:26:63:cb:ce:91:c6:6b:f7:35:d2:e1:a5:1e:57:
8e:99:02:32:b3:0e:d0:86:8f:10:24:9a:06:b3:19:
26:26:ec:a4:db:d7:ba:d6:88:3d:ac:af:6a:34:ca:
ef:88:58:71:8b:c0:d0:8e:9c:04:ad:9b:2e:ef:ca:
89:22:b0:b6:4c:9c:e1:83:ee:ec:97:8f:48:42:77:
c3:dd:70:e5:ab:86:68:ad:72:f6:62:37:55:c1:2c:
90:23:70:6f:c6:7d:35:34:19:a4:e9:69:15:e6:4a:
e7:2c:16:c1:a2:25:0a:e2:95:14:a4:6a:59:c0:03:
17:83:d9:b7:65:2f:fd:56:0c:08:83:51:44:b3:4a:
5c:d4:be:1f:b8:2c:ff:c3:d6:83:1d:a5:a9:a2:20:
e0:d0:c1:c0:69:89:bb:c0:52:54:48:d0:e4:a8:ea:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:0B:14:18:97:0D:51:1E:8F:5A:7F:44:92:27:81:CB:3B:E0:CF
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/tsgLFBiXDVEej1p_RJIngcs74M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.64.0/20
77.39.128.0/19
185.142.68.0/22
Signature Algorithm: sha256WithRSAEncryption
41:e4:ea:4a:7e:a1:01:4a:6a:53:d0:d5:d2:55:85:1e:8d:da:
c8:33:b1:06:67:50:f8:a9:2d:08:67:02:2b:71:5f:f7:b9:d4:
f5:f1:8c:5b:bc:bf:63:67:1c:e4:78:f7:ae:53:23:e3:39:5e:
23:67:1a:50:f0:22:79:29:51:f4:0a:56:07:ab:cd:c4:e9:9d:
03:33:85:57:9d:8e:ab:ce:47:44:e1:57:43:15:54:56:06:52:
44:26:28:41:6c:c6:1b:ea:ee:33:c1:02:60:4e:11:7b:54:06:
db:c6:34:69:d4:8d:92:d3:aa:d4:2d:50:a0:0f:8a:17:aa:72:
7a:84:ed:87:81:35:1c:99:2e:77:fb:fc:b6:93:10:96:15:ba:
54:62:f6:ef:b3:52:b6:47:f2:18:ef:40:e7:81:16:b8:6d:77:
16:46:14:42:6c:62:fd:94:b6:57:63:bb:24:c6:6b:99:52:ad:
cc:9a:81:2a:e7:e1:72:4e:18:8d:12:47:a1:b2:ec:bd:a2:ae:
87:f9:14:15:da:93:fe:4a:0a:ee:78:1e:ee:87:40:e2:9e:fa:
30:34:2d:20:f8:be:be:e2:8b:9c:e3:36:15:94:d4:ec:66:88:
2a:a4:75:3f:6c:40:33:14:3e:4a:16:c4:ce:d3:03:91:89:b5:
3b:b0:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:22:14 2024 by rpki-client on console-ams.rpki-client.org