Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/tsnnOSEMh_MCpiy9e-V-Tin9P8A.roa
File: tsnnOSEMh_MCpiy9e-V-Tin9P8A.roa (raw, json)
Hash identifier: IjRlZzfq0MNDM34c1p0Qg9kAWuaUVV1v2SMq1osJYX8=
Subject key identifier: B6:C9:E7:39:21:0C:87:F3:02:A6:2C:BD:7B:E5:7E:4E:29:FD:3F:C0
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 0191697E7D0E4FBEA2D4A47407830709F746
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/tsnnOSEMh_MCpiy9e-V-Tin9P8A.roa
Signing time: Mon 19 Aug 2024 07:16:22 +0000
ROA not before: Mon 19 Aug 2024 07:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206841
IP address blocks: 45.152.80.0/24 maxlen: 24
45.152.81.0/24 maxlen: 24
45.152.82.0/24 maxlen: 24
45.152.83.0/24 maxlen: 24
193.35.84.0/24 maxlen: 24
193.35.85.0/24 maxlen: 24
193.35.86.0/24 maxlen: 24
193.35.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:7e:7d:0e:4f:be:a2:d4:a4:74:07:83:07:09:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Aug 19 07:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c9e739210c87f302a62cbd7be57e4e29fd3fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:48:87:20:35:ad:52:96:e0:49:22:50:c0:
7e:65:23:8d:cc:8e:e8:50:92:fc:29:d1:c9:bb:56:
8f:2f:7e:c6:ca:c3:aa:54:8b:56:3a:3a:67:dd:59:
d7:6b:6d:c9:4b:8a:c2:f1:ba:e3:66:6d:32:5e:02:
4e:ad:c4:c1:21:7b:90:d0:42:22:e4:f8:a6:fe:20:
d0:a7:cc:62:17:fe:ce:ba:2b:93:99:19:4b:e6:e0:
47:ca:c1:d2:21:f2:fc:f7:ce:3b:0a:93:e1:52:82:
85:32:67:98:20:df:a0:06:c8:4c:c8:28:44:68:2a:
be:7f:70:b2:a4:de:6c:a0:d5:d3:b4:b5:36:45:73:
2d:f6:e3:a6:81:67:af:81:55:00:3f:da:be:3e:1e:
66:5a:8c:6b:db:73:f2:2f:bd:22:32:d0:f2:1c:0f:
12:26:04:7f:01:1b:f4:ea:5f:b7:f7:23:73:81:45:
63:d6:c9:33:ba:79:3c:79:23:bf:2a:48:83:71:d2:
9f:cd:fa:f5:53:cd:1f:1b:ba:0f:9c:c9:1b:e4:b4:
6d:96:e9:8d:1d:ae:4e:45:78:26:63:7d:9d:12:bc:
47:f6:ba:7a:38:ae:43:88:ea:ca:f8:7a:a9:91:f7:
72:93:b4:3b:a2:46:20:a5:bb:05:5f:7d:10:71:b5:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C9:E7:39:21:0C:87:F3:02:A6:2C:BD:7B:E5:7E:4E:29:FD:3F:C0
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/tsnnOSEMh_MCpiy9e-V-Tin9P8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.80.0/22
193.35.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:37:1c:25:b8:c5:e7:7e:98:1c:ab:72:4f:27:cd:7d:32:73:
49:8f:d6:9a:cc:10:88:e1:de:49:e2:56:9d:15:dc:f8:98:b8:
00:1c:73:20:e5:13:16:59:db:66:d1:57:61:0e:d6:68:6d:2f:
07:a6:8f:bb:de:6f:01:7f:b1:01:0b:80:c0:f5:74:5d:5e:bc:
0c:79:46:9f:bd:f3:e0:c9:45:3b:28:66:63:79:01:75:4e:ab:
81:18:f2:89:48:07:c6:5d:e0:9e:28:81:32:5a:d5:36:91:b5:
e5:f4:fc:38:7f:74:b6:9b:b4:d5:af:ee:22:d4:8b:47:ce:e9:
a5:60:44:55:20:e1:bb:93:1a:b0:36:97:dc:79:be:ed:8e:20:
9f:dc:32:d4:be:23:da:60:5f:d3:1e:d9:39:d7:38:0d:47:b3:
d2:5b:f6:d8:99:f1:39:f9:74:21:48:68:9b:59:15:e5:06:f2:
9d:c9:bc:c1:a0:49:c4:c5:69:75:30:e9:59:6b:37:63:33:5a:
4a:e3:c7:45:e6:bb:8a:b2:3d:e6:a1:8c:b1:f8:3a:97:5d:9e:
a5:e8:63:9c:a8:89:fd:bc:96:56:ed:0f:a5:78:44:aa:98:42:
b4:9d:a5:4c:31:ae:15:d4:23:e6:41:c1:c0:ed:cd:3d:9f:7d:
ec:c1:db:0c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFpfn0OT76i1KR0B4MHCfdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjE0N2Y2N2U4Nzk1ZDk1OWVkMzUzMDM5NmQxMjU2MDU1
YjEyNmUwHhcNMjQwODE5MDcxNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmM5ZTczOTIxMGM4N2YzMDJhNjJjYmQ3YmU1N2U0ZTI5ZmQzZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsClIhyA1rVKW4EkiUMB+ZSONzI7o
UJL8KdHJu1aPL37GysOqVItWOjpn3VnXa23JS4rC8brjZm0yXgJOrcTBIXuQ0EIi
5Pim/iDQp8xiF/7OuiuTmRlL5uBHysHSIfL89847CpPhUoKFMmeYIN+gBshMyChE
aCq+f3CypN5soNXTtLU2RXMt9uOmgWevgVUAP9q+Ph5mWoxr23PyL70iMtDyHA8S
JgR/ARv06l+39yNzgUVj1skzunk8eSO/KkiDcdKfzfr1U80fG7oPnMkb5LRtlumN
Ha5ORXgmY32dErxH9rp6OK5DiOrK+Hqpkfdyk7Q7okYgpbsFX30QcbUN3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLbJ5zkhDIfzAqYsvXvlfk4p/T/AMB8GA1UdIwQY
MBaAFGOxR/Z+h5XZWe01MDltElYFWxJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYt
MGYyYzMzNGU1ZTA1LzEvdHNubk9TRU1oX01DcGl5OWUtVi1UaW45UDhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYtMGYyYzMzNGU1ZTA1
LzEvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZhQAwQC
wSNUMA0GCSqGSIb3DQEBCwUAA4IBAQAuNxwluMXnfpgcq3JPJ819MnNJj9aazBCI
4d5J4ladFdz4mLgAHHMg5RMWWdtm0VdhDtZobS8Hpo+73m8Bf7EBC4DA9XRdXrwM
eUafvfPgyUU7KGZjeQF1TquBGPKJSAfGXeCeKIEyWtU2kbXl9Pw4f3S2m7TVr+4i
1ItHzumlYERVIOG7kxqwNpfceb7tjiCf3DLUviPaYF/THtk51zgNR7PSW/bYmfE5
+XQhSGibWRXlBvKdybzBoEnExWl1MOlZazdjM1pK48dF5ruKsj3moYyx+DqXXZ6l
6GOcqIn9vJZW7Q+leESqmEK0naVMMa4V1CPmQcHA7c09n33swdsM
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:13 2024 by rpki-client on console-fra.rpki-client.org