Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/TBtGk_n0757D1fUFIXoumWoss-I.roa
File: TBtGk_n0757D1fUFIXoumWoss-I.roa (raw, json)
Hash identifier: DwtOUepeJhZOPLXSyp1432e/eSCAUu2OoyC4qsdKMj4=
Subject key identifier: 4C:1B:46:93:F9:F4:EF:9E:C3:D5:F5:05:21:7A:2E:99:6A:2C:B3:E2
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 018CC64AE46F5FBFC29600CB147E361DF000
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/TBtGk_n0757D1fUFIXoumWoss-I.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209910
IP address blocks: 185.236.249.0/24 maxlen: 24
185.236.251.0/24 maxlen: 24
185.236.250.0/24 maxlen: 24
185.236.248.0/24 maxlen: 24
185.236.248.0/22 maxlen: 22
45.65.64.0/22 maxlen: 22
193.84.93.0/24 maxlen: 24
193.84.92.0/24 maxlen: 24
185.200.78.0/24 maxlen: 24
185.200.76.0/24 maxlen: 24
185.200.76.0/22 maxlen: 22
185.200.79.0/24 maxlen: 24
193.84.48.0/23 maxlen: 23
193.84.48.0/24 maxlen: 24
193.84.49.0/24 maxlen: 24
5.252.93.0/24 maxlen: 24
5.252.92.0/24 maxlen: 24
5.252.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e4:6f:5f:bf:c2:96:00:cb:14:7e:36:1d:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c1b4693f9f4ef9ec3d5f505217a2e996a2cb3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:73:50:9c:0a:41:67:6a:83:8c:d3:5a:ae:
9b:1b:63:b5:7c:3e:04:76:f8:17:c2:f0:f2:05:f7:
39:23:19:10:e2:cc:3c:d3:d6:a4:c0:59:e3:02:ee:
05:26:38:87:37:33:4f:8f:07:71:6f:d3:49:4c:56:
97:43:e9:b5:00:53:70:e8:ff:bc:e6:6c:b3:21:43:
4f:fb:ec:29:40:2f:39:b2:0d:16:dd:50:e9:ab:81:
d8:a0:fe:53:19:24:92:ae:76:53:66:ca:2e:65:ca:
4b:dc:c3:c5:aa:fe:48:fe:8d:dc:a2:8d:2b:3d:23:
dc:ab:21:22:29:8b:c6:1f:2a:b1:af:f2:90:da:a5:
5b:f2:6a:3f:f2:70:b0:3f:96:5f:7c:8b:d0:a8:a5:
6c:6d:a0:34:3a:f0:9f:91:41:12:d1:f7:a3:b7:09:
c1:f8:bc:35:23:cc:75:94:6f:c0:47:b7:de:7d:2a:
7f:28:09:19:c0:19:a9:3b:11:d1:7c:ae:5c:23:e5:
9a:93:a2:3e:bc:a6:1f:b4:00:f6:f9:28:c3:80:49:
e5:68:6b:65:a5:89:98:ed:cd:55:ef:11:84:d1:73:
65:bd:fc:60:52:1c:35:7b:4a:82:30:e7:67:94:64:
1a:6b:c7:df:16:25:e5:14:4d:e5:4c:fa:c6:e0:11:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:46:93:F9:F4:EF:9E:C3:D5:F5:05:21:7A:2E:99:6A:2C:B3:E2
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/TBtGk_n0757D1fUFIXoumWoss-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/22
45.65.64.0/22
185.200.76.0/22
185.236.248.0/22
193.84.48.0/23
193.84.92.0/23
Signature Algorithm: sha256WithRSAEncryption
38:ea:dd:8a:35:80:23:db:0f:39:92:92:33:28:3a:49:81:3e:
29:b0:86:78:a5:98:25:38:7b:7d:a1:d8:ca:e1:d4:a5:dd:81:
e2:d2:74:f9:24:f8:ad:39:dc:f8:8b:18:b8:c1:51:09:5f:55:
ad:73:5e:aa:92:32:49:ef:94:ed:6d:23:ab:e2:90:58:ff:d9:
4e:29:40:68:92:be:4c:18:e9:0f:f6:0c:06:5b:af:26:f9:c7:
ce:79:b3:de:b6:bd:72:13:ee:1a:56:ec:c3:e7:13:98:84:2a:
45:bb:ae:cb:37:a2:e2:b8:57:0b:4c:ad:72:75:64:2c:51:d2:
72:ed:6b:9f:ad:40:80:6a:d6:85:df:f1:da:c3:7c:3d:c5:6a:
ac:03:36:6a:7e:9f:ce:23:c3:b1:42:bd:1b:fe:6c:7a:19:c9:
ce:72:6d:e2:78:d9:12:2c:7a:ee:26:71:5a:c1:51:d1:90:a8:
f2:a0:d3:3d:69:61:e2:63:1d:6c:11:53:d8:26:8f:2e:c5:9a:
e9:c6:0c:f4:02:d6:d7:73:f3:ca:86:77:54:b2:c1:8d:cd:1a:
18:d8:93:07:50:84:42:e9:4f:75:d0:89:a5:c4:cb:cc:c9:91:
29:a7:b9:c5:f8:79:ca:50:8c:14:94:f1:0e:f4:48:47:5f:d0:
5c:1d:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:16:25 2024 by rpki-client on console-fra.rpki-client.org