Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/2tjpWqYFbsp3PJ7j0a8LgZv9o-k.roa
File: 2tjpWqYFbsp3PJ7j0a8LgZv9o-k.roa (raw, json)
Hash identifier: yc1LwHgvBHnrFxChVc9lBWOHj/dQfTKRBxylI9liBwA=
Subject key identifier: DA:D8:E9:5A:A6:05:6E:CA:77:3C:9E:E3:D1:AF:0B:81:9B:FD:A3:E9
Certificate issuer: /CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
Certificate serial: 019422FB07905C207CC20D9E854931DBB330
Authority key identifier: B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/2tjpWqYFbsp3PJ7j0a8LgZv9o-k.roa
Signing time: Wed 01 Jan 2025 17:47:44 +0000
ROA not before: Wed 01 Jan 2025 17:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25471
IP address blocks: 185.104.252.0/24 maxlen: 24
185.104.253.0/24 maxlen: 24
185.104.254.0/24 maxlen: 24
185.104.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:07:90:5c:20:7c:c2:0d:9e:85:49:31:db:b3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad8e95aa6056eca773c9ee3d1af0b819bfda3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:2e:ca:71:8e:bc:7e:6c:74:08:d2:86:50:
3c:e1:fd:6f:d0:fd:2f:ce:22:85:99:81:6d:3b:98:
b3:af:1e:b4:f0:ac:e6:2f:77:a9:82:ea:42:7a:e6:
e7:c3:fd:07:00:d8:ba:32:6f:c4:a2:8d:85:c4:4e:
9e:54:b9:61:7d:1e:72:72:d9:b9:3f:89:a4:83:c6:
f1:2a:3c:f8:0c:6a:4e:f6:ed:ad:42:b1:fe:1b:97:
0d:e9:40:e6:f2:29:4d:dc:3f:aa:da:7f:1b:12:bd:
9a:2d:d7:d0:5f:d4:a3:0f:8c:07:10:41:d6:4d:bf:
b7:ee:eb:bf:88:f9:f0:6e:a4:02:f3:5c:25:a3:41:
5e:92:8d:e3:df:ce:4a:c2:97:d6:05:37:04:28:bf:
c8:8d:10:39:70:5d:f2:f1:50:90:28:64:f5:64:58:
35:cd:26:32:18:21:4d:2c:89:b8:46:0e:eb:7f:91:
ae:d5:5f:57:da:11:97:80:58:7d:5a:6d:b1:2c:d7:
61:27:ef:f5:7c:fd:d0:4b:51:80:15:fa:21:2d:50:
53:ac:df:31:ab:0d:5c:02:f9:59:5b:d5:a5:bc:c8:
f2:77:86:fb:f5:cc:15:a2:a5:43:8a:5b:04:e3:e8:
81:60:fc:99:93:e1:05:4f:d1:9a:a9:54:e1:00:6d:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:E9:5A:A6:05:6E:CA:77:3C:9E:E3:D1:AF:0B:81:9B:FD:A3:E9
X509v3 Authority Key Identifier:
keyid:B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/2tjpWqYFbsp3PJ7j0a8LgZv9o-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.252.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:39:e4:8b:78:b2:f3:dc:43:48:4f:d3:f6:69:50:52:80:81:
4b:ed:69:73:d4:b9:d6:44:ef:ab:88:ab:61:ef:5a:ae:85:72:
48:97:2e:13:ea:1e:cb:f9:c5:82:21:d4:21:e6:ed:b5:d0:f8:
ba:a3:25:d7:df:98:aa:d1:72:f1:5f:3d:b1:5d:46:8d:af:98:
98:d4:38:78:33:b4:dd:d1:5e:c1:90:a0:90:dd:5a:dd:1a:15:
32:12:33:2b:6f:49:85:dc:75:ca:ec:7a:4c:0a:5c:e5:0b:3a:
7d:39:5e:7c:54:c6:ee:97:70:02:db:d4:0b:69:f1:41:1a:fe:
3d:bf:da:b6:1d:f7:af:e2:1d:c9:15:95:41:3d:b1:9c:ba:7e:
99:63:36:5b:6b:c5:11:5a:8f:19:8b:77:9b:20:6d:d3:e1:0b:
3b:8d:93:0c:2e:1e:9b:60:08:67:53:24:8b:94:14:56:76:4b:
ca:a9:c2:e1:aa:ea:90:e1:54:1e:0b:47:c7:a8:86:6f:d4:77:
fd:73:a2:8d:71:3a:a2:b3:b7:55:d5:b1:6a:4f:8c:39:92:ca:
4d:e8:29:67:a2:17:ee:17:31:fd:c8:a6:4d:ed:d8:f2:19:24:
a1:a1:b9:90:59:8e:da:b5:94:53:16:43:15:94:a0:be:75:82:
8b:66:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:03 2025 by rpki-client