Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/TbBL_oMCorgtBsKLy_4mvOUFcAs.roa
File: TbBL_oMCorgtBsKLy_4mvOUFcAs.roa (raw, json)
Hash identifier: 2R05mPJrg6Lc6wA1dKrmT8bhyOzDe/hhtHIDjt9Vd9A=
Subject key identifier: 4D:B0:4B:FE:83:02:A2:B8:2D:06:C2:8B:CB:FE:26:BC:E5:05:70:0B
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 018CC72759F5967EB020673DC9539292500B
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/TbBL_oMCorgtBsKLy_4mvOUFcAs.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60027
IP address blocks: 213.243.48.0/24 maxlen: 24
213.243.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:59:f5:96:7e:b0:20:67:3d:c9:53:92:92:50:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4db04bfe8302a2b82d06c28bcbfe26bce505700b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:77:ce:d9:b1:bc:c5:00:3b:d3:b1:d9:b6:
8d:96:c0:34:7a:f8:36:d0:c9:4f:b9:dc:a5:cf:db:
21:a2:7b:c0:04:1e:f2:aa:96:5a:45:bb:a0:09:d9:
4e:73:0b:f2:a7:4a:6a:74:bc:23:2d:76:c2:83:bb:
13:e9:1e:dc:0b:69:d2:60:db:31:78:41:d2:bd:70:
d9:59:ad:5a:d7:3f:68:6b:3e:81:64:01:cd:cd:92:
5e:c8:30:2d:63:6b:44:a8:91:af:ba:c4:2e:32:7c:
c0:84:a7:0a:68:51:ee:29:f4:8b:d9:ba:f5:c4:37:
e8:dc:e1:34:dd:0a:a8:fc:26:9b:8a:c9:83:53:17:
ec:b2:af:89:54:08:2d:c6:4c:fc:04:1b:d9:94:75:
e5:54:77:14:ad:2b:f6:09:e9:4e:36:82:50:cb:58:
38:22:1b:76:48:a3:fc:2a:20:59:48:b4:95:cd:e7:
ad:94:ea:d1:54:eb:de:ad:35:85:50:88:57:9e:95:
d4:09:6c:2f:35:3d:eb:dd:65:aa:42:53:73:a2:af:
94:7d:65:09:bf:cd:ef:eb:ba:fa:86:74:ca:27:f6:
ce:02:8d:c9:2a:d4:99:b8:91:a8:11:d6:53:7b:0d:
7d:68:b2:98:94:18:14:c7:81:6e:cd:ee:54:55:73:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:4B:FE:83:02:A2:B8:2D:06:C2:8B:CB:FE:26:BC:E5:05:70:0B
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/TbBL_oMCorgtBsKLy_4mvOUFcAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.243.48.0/24
213.243.61.0/24
Signature Algorithm: sha256WithRSAEncryption
82:72:0a:ca:10:7f:e1:1b:eb:43:2c:a4:6e:73:5b:a3:33:20:
95:b9:1e:5d:ef:47:3a:9a:49:22:c5:2d:77:17:4b:8b:26:c9:
8d:36:6b:9f:a1:41:87:0c:c8:6b:6c:b3:2c:45:d6:82:34:75:
59:37:58:96:22:ca:2c:61:00:a3:77:16:a6:cf:7d:1b:76:3c:
97:a6:1b:a6:1a:9d:f4:15:9f:8e:de:f0:45:b3:f8:4e:7e:9f:
7f:50:79:cb:d7:9a:00:88:86:9f:81:53:3b:1a:ff:2f:8c:bd:
33:43:9c:aa:f6:b8:31:e5:33:c5:47:95:c6:49:d5:6f:e3:14:
9c:2f:e4:75:31:3d:13:88:fb:d0:9f:74:e0:f2:d1:a0:58:7a:
75:de:95:03:43:9f:7f:ae:58:c5:03:5c:da:93:71:fb:4a:97:
99:1b:1a:7d:60:22:81:c9:d3:4f:51:ea:fe:b0:69:eb:63:e8:
d5:fa:94:25:84:27:71:ab:95:1b:dc:2e:5b:eb:bc:e4:4f:08:
b4:8a:2b:dd:0a:3d:10:22:17:9b:7d:d3:38:b1:e4:d9:19:8d:
f7:a5:03:9d:17:db:49:63:09:ce:7d:6d:dc:34:59:62:c2:e6:
93:8f:78:f8:e8:83:8c:40:4e:74:77:1b:d9:bf:e1:e2:03:0b:
93:70:92:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJ1n1ln6wIGc9yVOSklALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjQwMTAxMjIzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGIwNGJmZTgzMDJhMmI4MmQwNmMyOGJjYmZlMjZiY2U1MDU3MDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+B3ztmxvMUAO9Ox2baNlsA0evg2
0MlPudylz9shonvABB7yqpZaRbugCdlOcwvyp0pqdLwjLXbCg7sT6R7cC2nSYNsx
eEHSvXDZWa1a1z9oaz6BZAHNzZJeyDAtY2tEqJGvusQuMnzAhKcKaFHuKfSL2br1
xDfo3OE03Qqo/CabismDUxfssq+JVAgtxkz8BBvZlHXlVHcUrSv2CelONoJQy1g4
Iht2SKP8KiBZSLSVzeetlOrRVOverTWFUIhXnpXUCWwvNT3r3WWqQlNzoq+UfWUJ
v83v67r6hnTKJ/bOAo3JKtSZuJGoEdZTew19aLKYlBgUx4Fuze5UVXNAEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE2wS/6DAqK4LQbCi8v+JrzlBXALMB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvVGJCTF9vTUNvcmd0QnNLTHlfNG12T1VGY0FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1fMwAwQA
1fM9MA0GCSqGSIb3DQEBCwUAA4IBAQCCcgrKEH/hG+tDLKRuc1ujMyCVuR5d70c6
mkkixS13F0uLJsmNNmufoUGHDMhrbLMsRdaCNHVZN1iWIsosYQCjdxamz30bdjyX
phumGp30FZ+O3vBFs/hOfp9/UHnL15oAiIafgVM7Gv8vjL0zQ5yq9rgx5TPFR5XG
SdVv4xScL+R1MT0TiPvQn3Tg8tGgWHp13pUDQ59/rljFA1zak3H7SpeZGxp9YCKB
ydNPUer+sGnrY+jV+pQlhCdxq5Ub3C5b67zkTwi0iivdCj0QIhebfdM4seTZGY33
pQOdF9tJYwnOfW3cNFliwuaTj3j46IOMQE50dxvZv+HiAwuTcJIH
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:07:37 2024 by rpki-client on console-fra.rpki-client.org