Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/TBlASPcR78fuynDDw3RgtcVhkrQ.roa
File: TBlASPcR78fuynDDw3RgtcVhkrQ.roa (raw, json)
Hash identifier: ZgFGRZrNPcQYHDv0l0eVYG11hp9amh5nevB8oXQScOk=
Subject key identifier: 4C:19:40:48:F7:11:EF:C7:EE:CA:70:C3:C3:74:60:B5:C5:61:92:B4
Certificate issuer: /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial: 01942823DFDD22F528F14B0AA65DED7BCBA3
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/TBlASPcR78fuynDDw3RgtcVhkrQ.roa
Signing time: Thu 02 Jan 2025 17:50:27 +0000
ROA not before: Thu 02 Jan 2025 17:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204478
IP address blocks: 185.11.168.0/22 maxlen: 22
185.41.76.0/22 maxlen: 22
185.70.68.0/22 maxlen: 22
185.108.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:df:dd:22:f5:28:f1:4b:0a:a6:5d:ed:7b:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Validity
Not Before: Jan 2 17:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c194048f711efc7eeca70c3c37460b5c56192b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:8d:13:5a:c7:0b:8c:23:ea:d6:9c:8d:cc:
73:d4:b8:00:ff:fd:4a:a3:53:93:ff:2d:bb:78:66:
03:2b:a0:55:4b:f6:14:ca:5e:a2:36:a7:d7:5e:92:
2b:ce:56:ba:a0:ce:77:31:21:65:d5:cb:c1:54:7a:
5d:01:43:d0:e1:dd:b5:03:df:9f:36:00:ee:39:e0:
d8:b1:e5:f0:64:95:15:ca:1a:4d:37:89:a8:0f:19:
7c:2c:01:4a:fc:56:a9:0a:6a:ff:ff:71:87:1e:d8:
41:70:31:e8:5f:40:46:8c:cd:28:71:51:3a:26:06:
05:7b:0f:54:b1:1b:3d:ab:ac:44:14:c3:bc:e7:9b:
23:d9:02:22:fe:9e:83:71:24:d0:88:6e:fd:c0:7e:
3d:bf:4a:00:a5:03:5a:44:92:3c:e8:f3:21:f6:97:
8a:73:56:ef:3c:b9:70:cd:aa:a1:9c:01:5a:cc:5c:
2b:a3:6e:f2:1e:71:42:0f:f7:40:64:cd:29:b2:86:
10:3e:08:57:c6:64:7c:6b:e1:54:91:16:0a:b0:03:
5d:bb:c9:76:81:15:6c:1e:a9:08:1e:1e:e2:ce:14:
ab:50:00:32:ac:8f:cc:69:65:77:c3:65:92:a9:3c:
33:b0:2e:ec:b5:0a:d2:48:9b:b7:66:69:c6:c7:ae:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:40:48:F7:11:EF:C7:EE:CA:70:C3:C3:74:60:B5:C5:61:92:B4
X509v3 Authority Key Identifier:
keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/TBlASPcR78fuynDDw3RgtcVhkrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.168.0/22
185.41.76.0/22
185.70.68.0/22
185.108.244.0/22
Signature Algorithm: sha256WithRSAEncryption
13:8c:0e:6f:81:26:53:35:c9:5d:3d:de:ca:02:7d:5c:c2:1a:
d0:34:53:28:da:f2:c9:d9:50:13:ef:55:3f:97:4e:a7:1d:a0:
34:b6:f6:25:c5:6e:21:d1:58:d6:b6:a9:b9:e3:43:ec:41:3c:
89:1f:a5:66:f3:19:c3:3e:af:cc:78:b0:da:73:e0:7f:08:4a:
cd:55:67:8a:ef:e2:21:26:a0:9b:f7:8a:22:61:73:85:38:af:
03:fa:92:31:28:9d:5f:9f:c7:1c:31:2b:96:9d:8c:e0:ca:e9:
8d:98:93:fa:dd:8c:58:85:fd:52:88:0e:6f:c4:be:80:56:a5:
d8:48:c9:f8:06:7b:91:ad:41:c2:af:d7:a5:a6:0d:8c:d2:40:
49:0d:6d:b9:c6:9f:ab:9d:87:7a:65:d2:44:87:e7:c1:e8:14:
72:5c:52:7b:25:8e:df:b4:7e:ee:5c:32:40:13:c8:18:62:34:
d1:f5:47:1b:d7:44:cb:e5:cf:db:74:1e:32:1a:78:15:24:77:
b6:2a:dd:4e:d3:aa:31:b1:a0:e6:c6:21:79:02:b1:68:0e:b5:
6c:16:2e:97:fb:83:e2:9b:a5:7e:3e:08:de:51:89:e7:63:a0:
19:8e:93:4b:37:78:79:86:d8:0e:c1:07:65:2f:74:5f:02:b0:
40:43:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:38 2025 by rpki-client