Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/TkONv6p4712ltbBWIOKfovJm9qc.roa
File: TkONv6p4712ltbBWIOKfovJm9qc.roa (raw, json)
Hash identifier: u9IbHqPh7hzzpi/SnyKWyjP5fGp41eal8tnU3G4FvUY=
Subject key identifier: 4E:43:8D:BF:AA:78:EF:5D:A5:B5:B0:56:20:E2:9F:A2:F2:66:F6:A7
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 018CC348AA849B11B59017B9CED7946C3D79
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/TkONv6p4712ltbBWIOKfovJm9qc.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47223
IP address blocks: 94.240.63.0/24 maxlen: 24
94.240.62.0/23 maxlen: 23
91.106.26.0/23 maxlen: 23
91.106.30.0/23 maxlen: 23
94.240.1.0/24 maxlen: 24
94.240.0.0/24 maxlen: 24
94.240.3.0/24 maxlen: 24
94.240.7.0/24 maxlen: 24
94.240.23.0/24 maxlen: 24
185.139.16.0/22 maxlen: 22
94.240.32.0/21 maxlen: 21
94.240.40.0/24 maxlen: 24
94.240.42.0/24 maxlen: 24
94.240.44.0/22 maxlen: 22
94.240.46.0/24 maxlen: 24
94.240.48.0/22 maxlen: 22
94.240.48.0/24 maxlen: 24
91.106.24.0/23 maxlen: 23
194.152.46.0/23 maxlen: 23
2a01:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:aa:84:9b:11:b5:90:17:b9:ce:d7:94:6c:3d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e438dbfaa78ef5da5b5b05620e29fa2f266f6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:ae:9d:ad:4b:96:ba:6a:f6:11:2f:90:14:
b1:e7:17:b8:51:54:d8:58:c4:46:60:af:da:a2:d9:
7a:03:3b:e7:95:d4:17:c0:73:63:89:b1:6d:de:d2:
db:87:1d:98:7a:53:74:6e:a6:e2:3e:9b:95:0a:a0:
e5:9a:a7:f7:b0:7e:46:b3:bc:91:80:f3:b7:8b:96:
5a:27:b8:d2:9e:1b:75:3f:54:f2:b7:ad:bd:f9:59:
78:7e:fd:3b:b2:c3:c5:8b:b1:9e:a5:c1:70:14:56:
1d:37:6b:57:e3:17:2c:3d:b4:e2:39:50:42:26:74:
4d:23:e3:27:41:c8:b4:90:5e:a9:25:47:b8:01:34:
42:79:ac:3d:7a:ce:72:d9:22:38:67:fa:12:f2:5d:
6d:5a:92:7c:e3:da:9f:73:0b:6d:96:c9:1f:e8:3a:
d8:ea:99:1e:a3:d6:ce:58:af:00:1f:f9:67:03:41:
6b:31:ab:4e:b8:a9:1e:21:80:ff:de:24:e5:12:63:
d3:12:75:8f:9c:4c:51:b0:22:14:11:a8:97:04:23:
1c:42:6d:65:a3:0c:15:34:8e:6a:be:ac:9d:d8:01:
07:b2:22:8a:9b:f0:4e:e0:7d:e6:a9:07:83:eb:98:
b1:72:be:8f:af:65:1d:13:3b:0d:bc:df:34:eb:fd:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:8D:BF:AA:78:EF:5D:A5:B5:B0:56:20:E2:9F:A2:F2:66:F6:A7
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/TkONv6p4712ltbBWIOKfovJm9qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.24.0/22
91.106.30.0/23
94.240.0.0/23
94.240.3.0/24
94.240.7.0/24
94.240.23.0/24
94.240.32.0-94.240.40.255
94.240.42.0/24
94.240.44.0-94.240.51.255
94.240.62.0/23
185.139.16.0/22
194.152.46.0/23
IPv6:
2a01:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
31:c1:90:c4:ef:52:4f:a2:86:98:08:73:cc:c4:89:73:6b:a6:
c3:1f:c4:6a:b8:ef:46:83:c8:6f:d7:ee:e7:6f:4f:d5:78:de:
19:91:53:5d:e5:81:f6:20:b0:9b:33:7b:01:53:b1:af:1d:b5:
79:a3:f9:a3:e0:29:52:98:7d:75:ad:b1:1f:9c:7d:f5:6c:f2:
1d:00:2d:4d:a0:c4:58:ac:1d:ca:96:c4:9a:29:2c:51:ee:a1:
d7:9b:74:c5:4a:04:bc:15:e7:45:d8:25:03:dd:26:04:ff:92:
48:17:25:a7:b0:3d:c3:e3:0d:6f:19:89:6c:55:6e:de:bf:5a:
90:12:6f:13:c1:24:f2:91:82:ea:c7:72:ee:74:bb:94:1e:a7:
ac:39:65:22:53:3c:ba:b9:4d:c2:13:34:75:35:f8:eb:5c:d0:
06:54:fa:04:59:e2:ea:6a:ed:f3:37:ed:f9:09:ec:b7:8f:9c:
14:25:8a:05:44:bf:5a:8b:69:ec:63:1b:77:81:ea:fe:c0:a3:
2d:98:b4:a2:aa:e7:1a:f3:32:e8:8b:6e:0b:00:c7:a5:a2:70:
74:cb:bf:3c:f3:42:27:60:d0:8a:f7:3d:f5:21:8d:19:33:5f:
d4:97:d4:f6:3e:1e:5f:cc:8f:dd:38:a7:0a:84:1b:07:f6:8a:
7f:47:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:24:29 2024 by rpki-client on console-ams.rpki-client.org