Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/TWzks_Tzop1d15P0Nmx68rRNzTo.roa
File: TWzks_Tzop1d15P0Nmx68rRNzTo.roa (raw, json)
Hash identifier: zqn+8v1AAbjKT0FgJwaIW7Vxc2WDAEPZ0WcBV2SuuW8=
Subject key identifier: 4D:6C:E4:B3:F4:F3:A2:9D:5D:D7:93:F4:36:6C:7A:F2:B4:4D:CD:3A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DADEEB158E6A23EBDF49943E4C1B49
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/TWzks_Tzop1d15P0Nmx68rRNzTo.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202403
IP address blocks: 195.136.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:de:eb:15:8e:6a:23:eb:df:49:94:3e:4c:1b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d6ce4b3f4f3a29d5dd793f4366c7af2b44dcd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:c4:e6:0e:79:fa:f0:a9:42:09:48:06:c6:
8f:d2:5b:58:4b:30:bb:12:68:99:47:67:3e:b1:78:
75:9c:a9:a9:ca:4c:9c:77:dc:3d:a6:ad:55:a7:47:
8c:a5:5d:32:5b:cf:5f:e0:98:22:e6:3e:f6:04:6e:
83:2b:48:7c:94:80:d5:7a:c5:0c:2f:5d:38:0c:a6:
2c:d2:4d:73:f7:0a:ff:00:e5:cd:38:82:69:10:c5:
64:08:ea:43:6f:e8:d3:e9:c1:c7:d0:27:22:00:6d:
83:90:05:6a:40:2f:61:f4:80:c7:5a:60:6e:97:a4:
b2:6b:11:9c:e9:8c:e1:c4:5f:94:7d:45:0f:b8:40:
48:db:49:14:16:0c:ae:98:f0:42:8d:2a:41:5b:7a:
4f:dd:55:98:02:8b:51:02:63:12:98:e5:08:f4:d3:
53:f0:81:5d:f6:08:5d:de:9c:d0:cb:eb:2d:37:d5:
2f:66:0a:75:00:d4:8a:f5:2c:3a:e8:f4:12:f9:69:
28:76:e4:ec:ba:40:f9:43:6d:be:ed:ec:93:a1:66:
d0:76:91:72:76:f0:8d:9a:cd:fe:a9:ce:e6:71:9f:
ab:05:80:83:fb:33:d5:58:80:26:88:9d:df:fd:57:
e2:d1:83:6a:f3:87:14:50:be:41:2e:a8:ff:7c:ee:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6C:E4:B3:F4:F3:A2:9D:5D:D7:93:F4:36:6C:7A:F2:B4:4D:CD:3A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/TWzks_Tzop1d15P0Nmx68rRNzTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.76.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6c:93:aa:62:76:41:b8:f6:d8:70:e8:3d:cd:b5:6e:12:1a:
f1:86:cd:36:45:87:92:0f:4a:8b:23:3d:55:a6:2a:ac:08:7b:
8e:94:33:38:29:e7:9f:bd:a0:55:be:56:cb:77:36:1d:af:18:
39:f5:b5:b5:b9:57:0e:94:e5:4e:db:f7:2d:5d:ec:4d:85:47:
a2:6f:12:12:2b:26:0e:c9:73:01:b5:be:16:86:32:94:47:33:
c8:52:c4:00:10:a7:56:5f:42:b5:3b:a5:c3:9f:d3:4e:fc:75:
99:68:78:76:0f:c3:43:e9:9b:62:e1:5f:3b:79:99:be:92:82:
75:b3:f4:4d:0f:78:29:d6:4f:70:6a:11:92:c2:a3:0f:aa:75:
40:39:69:72:0a:9e:23:ec:4a:76:7c:f5:2a:1f:b3:12:e9:06:
9e:bb:5f:16:79:dd:ac:67:c1:80:e0:1d:8e:f1:ad:30:7a:f4:
92:96:10:6b:fe:f3:42:9e:58:f0:00:67:f6:4f:ab:17:d3:59:
b0:f9:a8:09:c2:a5:fa:60:7b:32:88:bd:55:51:07:d7:1d:ff:
4b:d7:df:c5:b6:c2:11:63:79:79:fa:78:aa:e9:49:0d:08:6f:
88:b8:c2:1a:ce:ba:96:8e:46:fb:9e:69:b5:ee:c7:eb:e9:ac:
e7:07:ce:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2t7rFY5qI+vfSZQ+TBtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjQwMTAxMDIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDZjZTRiM2Y0ZjNhMjlkNWRkNzkzZjQzNjZjN2FmMmI0NGRjZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoovE5g55+vCpQglIBsaP0ltYSzC7
EmiZR2c+sXh1nKmpykycd9w9pq1Vp0eMpV0yW89f4Jgi5j72BG6DK0h8lIDVesUM
L104DKYs0k1z9wr/AOXNOIJpEMVkCOpDb+jT6cHH0CciAG2DkAVqQC9h9IDHWmBu
l6SyaxGc6YzhxF+UfUUPuEBI20kUFgyumPBCjSpBW3pP3VWYAotRAmMSmOUI9NNT
8IFd9ghd3pzQy+stN9UvZgp1ANSK9Sw66PQS+WkoduTsukD5Q22+7eyToWbQdpFy
dvCNms3+qc7mcZ+rBYCD+zPVWIAmiJ3f/Vfi0YNq84cUUL5BLqj/fO6uCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1s5LP086KdXdeT9DZsevK0Tc06MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvVFd6a3NfVHpvcDFkMTVQME5teDY4clJOelRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4hMMA0G
CSqGSIb3DQEBCwUAA4IBAQC8bJOqYnZBuPbYcOg9zbVuEhrxhs02RYeSD0qLIz1V
piqsCHuOlDM4KeefvaBVvlbLdzYdrxg59bW1uVcOlOVO2/ctXexNhUeibxISKyYO
yXMBtb4WhjKURzPIUsQAEKdWX0K1O6XDn9NO/HWZaHh2D8ND6Zti4V87eZm+koJ1
s/RND3gp1k9wahGSwqMPqnVAOWlyCp4j7Ep2fPUqH7MS6Qaeu18Wed2sZ8GA4B2O
8a0wevSSlhBr/vNCnljwAGf2T6sX01mw+agJwqX6YHsyiL1VUQfXHf9L19/FtsIR
Y3l5+niq6UkNCG+IuMIazrqWjkb7nmm17sfr6aznB86d
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:44:17 2024 by rpki-client on console-ams.rpki-client.org