Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/TScQ871AvZFDluovYujHUcoya2A.roa
File: TScQ871AvZFDluovYujHUcoya2A.roa (raw, json)
Hash identifier: XdJ8k0rbHu6wLKeVo+BcGrHiC4Axc2itcpWPF1zlBVU=
Subject key identifier: 4D:27:10:F3:BD:40:BD:91:43:96:EA:2F:62:E8:C7:51:CA:32:6B:60
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 018CC8DCCA8E902B2D50B74BFBFDD63ABCAD
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/TScQ871AvZFDluovYujHUcoya2A.roa
Signing time: Tue 02 Jan 2024 06:29:22 +0000
ROA not before: Tue 02 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29551
IP address blocks: 195.200.80.0/23 maxlen: 24
185.37.16.0/22 maxlen: 22
2a00:f520::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ca:8e:90:2b:2d:50:b7:4b:fb:fd:d6:3a:bc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Jan 2 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d2710f3bd40bd914396ea2f62e8c751ca326b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:6b:57:79:31:fb:dc:b0:cc:b2:79:40:ff:
e0:e3:d1:c5:86:86:83:ec:fa:80:29:0c:f6:d7:0e:
64:05:92:94:ba:43:3f:9c:d6:7b:41:eb:c3:4f:61:
15:cd:1b:ff:fb:47:4d:f4:49:35:4c:6a:9d:94:62:
06:33:bc:ed:3a:bc:25:a2:d7:7f:d5:e1:00:78:9f:
d4:87:d4:76:98:53:4f:32:e3:6c:54:56:55:ea:44:
55:ac:bb:7e:d0:98:cb:86:69:86:30:de:50:35:a9:
99:9e:49:db:5c:62:2c:ba:c3:76:58:2e:8f:0e:21:
75:f7:f4:17:df:ee:c1:ae:5f:59:26:89:75:8b:b9:
21:4e:47:f4:f5:ff:90:46:f4:1e:7c:99:fe:f2:c5:
b0:fb:47:32:9c:80:4f:b9:77:71:ed:ad:f1:7a:58:
a7:d0:74:c7:b4:03:17:64:c4:80:cd:3a:50:5b:cb:
4d:83:e7:01:fa:54:6c:11:a8:6b:bb:47:09:29:0e:
5e:2e:dc:28:52:ac:82:f3:ae:d5:d9:07:6e:55:7f:
2b:6b:c0:ff:40:9d:8f:60:64:dd:60:03:0f:8d:71:
46:21:ce:4b:5c:97:e6:d1:24:ee:7a:00:4e:11:f3:
26:fb:d9:4b:b0:90:af:64:6b:46:36:c6:2a:29:73:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:10:F3:BD:40:BD:91:43:96:EA:2F:62:E8:C7:51:CA:32:6B:60
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/TScQ871AvZFDluovYujHUcoya2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.16.0/22
195.200.80.0/23
IPv6:
2a00:f520::/32
Signature Algorithm: sha256WithRSAEncryption
4e:92:1b:2d:d3:ca:52:36:bc:d6:8a:fb:21:84:16:77:5e:7f:
42:b0:02:6c:bd:9f:ed:31:76:d9:04:f0:68:bd:c6:d1:09:18:
86:9c:01:a5:10:4f:41:4d:f7:d1:fd:70:3b:f6:28:24:49:d1:
eb:f3:71:83:5d:4e:58:12:d5:da:c9:2a:01:30:35:18:28:23:
db:22:1e:23:41:fb:70:da:d0:5f:3f:b8:bf:e0:63:d4:5b:34:
61:59:de:67:06:75:41:f1:6b:c1:51:c8:d0:1f:03:87:82:01:
c1:e3:be:4b:16:a6:dc:13:b2:9d:4d:7f:43:2f:2d:ce:55:65:
30:b2:43:de:a0:de:90:fd:2d:ca:e6:43:43:d5:a0:55:22:54:
11:9f:1d:e8:93:a7:e1:82:cd:cf:32:2e:c4:b0:99:e2:8e:1e:
69:08:74:86:a0:43:3d:0c:a0:b5:32:6e:c9:9d:a5:f9:de:85:
ad:fb:6b:47:02:dc:52:3f:87:1f:31:8f:0a:7e:c4:16:7d:a2:
91:3a:e6:8d:3d:ca:4b:08:9f:a3:f5:df:be:a4:b7:e2:2d:f5:
f7:cf:cd:89:18:25:f6:43:38:22:bd:54:2d:92:f7:d2:82:56:
c0:06:a6:52:c8:1b:c8:b1:c1:f3:2e:8e:1c:54:0e:af:93:41:
31:b5:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:59:13 2024 by rpki-client on console-fra.rpki-client.org