Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/Tmn-LBcZubYW0H9_QVlUx-o3da4.roa
File: Tmn-LBcZubYW0H9_QVlUx-o3da4.roa (raw, json)
Hash identifier: A+tO+frYJHaeAEqeNlw53rwAk457G6rGpNstXQHlzgY=
Subject key identifier: 4E:69:FE:2C:17:19:B9:B6:16:D0:7F:7F:41:59:54:C7:EA:37:75:AE
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 018EA8D1FB51BB0A95AEE5B07A1FD30A06B7
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/Tmn-LBcZubYW0H9_QVlUx-o3da4.roa
Signing time: Thu 04 Apr 2024 11:15:17 +0000
ROA not before: Thu 04 Apr 2024 11:15:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203724
IP address blocks: 185.125.224.0/24 maxlen: 24
185.125.225.0/24 maxlen: 24
185.125.226.0/24 maxlen: 24
185.125.227.0/24 maxlen: 24
185.212.105.0/24 maxlen: 24
185.212.106.0/24 maxlen: 24
185.212.107.0/24 maxlen: 24
185.221.68.0/24 maxlen: 24
185.221.69.0/24 maxlen: 24
185.221.70.0/24 maxlen: 24
185.221.71.0/24 maxlen: 24
2a06:bcc0:1::/48 maxlen: 48
2a06:bcc0:2::/48 maxlen: 48
2a06:bcc0:3::/48 maxlen: 48
2a06:bcc0:4::/48 maxlen: 48
2a06:bcc0:5::/48 maxlen: 48
2a06:bcc0:9::/48 maxlen: 48
2a06:bcc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:d1:fb:51:bb:0a:95:ae:e5:b0:7a:1f:d3:0a:06:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Apr 4 11:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e69fe2c1719b9b616d07f7f415954c7ea3775ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:31:c6:ec:4d:62:b7:4b:0f:c4:00:22:30:
45:ab:c5:f3:e4:58:67:f0:e0:b1:a7:92:24:cc:9e:
5c:b6:94:77:72:6f:02:37:ed:41:6a:04:73:55:06:
af:e3:e6:7c:5a:40:07:38:43:db:6a:8b:6a:eb:37:
b8:55:20:bb:24:5f:0f:29:a6:2e:ec:4d:0b:0f:2a:
f1:7c:49:0c:44:ad:b0:00:26:66:2b:60:95:fe:12:
b1:37:af:2a:5f:7a:a6:65:9a:9d:f7:4b:b4:81:2f:
26:ff:c5:d6:30:72:2f:f4:b0:f5:d1:4b:33:71:b5:
21:b9:e5:e7:67:ea:91:64:80:79:42:c9:f5:9d:c1:
57:ab:ae:fc:02:1d:5b:30:e1:6b:b0:8d:42:65:0e:
d3:13:a8:62:18:28:9a:da:77:22:ce:ae:21:b8:de:
46:72:9e:6b:f6:82:4b:42:8b:7f:db:e7:b1:b6:30:
1d:c1:01:9f:3e:4b:4d:29:6b:1c:1c:63:ab:7e:a2:
4f:c2:55:b3:a6:55:23:59:dd:e1:77:bf:f9:0e:ce:
d7:ce:d0:57:eb:f3:32:7a:55:39:46:d0:cd:b5:c2:
2d:9d:b1:63:58:5a:5d:c5:8f:b1:7f:71:29:64:61:
70:f7:9c:d2:59:8c:6c:08:7c:f4:f5:25:75:57:ac:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:69:FE:2C:17:19:B9:B6:16:D0:7F:7F:41:59:54:C7:EA:37:75:AE
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/Tmn-LBcZubYW0H9_QVlUx-o3da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.224.0/22
185.212.105.0-185.212.107.255
185.221.68.0/22
IPv6:
2a06:bcc0:1::-2a06:bcc0:5:ffff:ffff:ffff:ffff:ffff
2a06:bcc0:9::/48
2a06:bcc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
a4:18:f4:b7:0d:a1:ad:00:fd:fe:9f:d2:63:7d:31:9e:28:e6:
63:e1:82:7a:cc:e0:42:bf:a9:c2:d7:7f:bc:8d:03:5a:c5:c9:
30:0b:06:ac:37:e4:2e:b8:c4:18:95:56:bd:00:70:67:51:fb:
e8:02:01:7b:22:8b:39:07:c7:de:8a:7d:64:e8:2e:55:50:40:
fd:38:35:00:9a:7a:62:cf:7c:1f:7d:4f:07:01:0e:f8:36:fe:
87:16:26:14:6c:17:61:61:55:3e:71:be:11:98:34:3e:48:7d:
1e:d6:8a:0f:af:aa:d5:7d:72:8e:e0:f0:f3:da:38:82:30:5e:
4d:bc:ad:df:5b:7b:63:78:e5:05:f3:8c:d4:ae:a7:ee:a9:08:
58:5e:a6:e7:b7:bd:a8:46:cf:10:52:a2:d6:56:9f:d3:c4:4b:
3e:1c:36:79:7c:25:90:66:40:88:92:70:b9:3c:48:19:dc:a3:
74:37:57:3f:a0:3c:bb:d9:d2:e0:af:9b:c7:db:86:a8:4f:18:
db:eb:1e:3d:9a:2e:16:80:3d:14:85:34:7f:db:81:44:5d:56:
66:9a:ca:5d:85:c3:06:9f:a6:72:66:c4:e3:60:11:da:4c:81:
3d:05:62:91:d4:4e:c8:d5:ff:98:e8:f1:b3:ce:ae:5d:2f:01:
6a:f5:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:54:50 2024 by rpki-client on console-ams.rpki-client.org