Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TlsqDoIJmM20XdcNT_tb7kUKPQQ.roa
File: TlsqDoIJmM20XdcNT_tb7kUKPQQ.roa (raw, json)
Hash identifier: Ihs1duwx+4LcyIiSab9Ke93gM6HLxhLzD9z3K3GuDFk=
Subject key identifier: 4E:5B:2A:0E:82:09:98:CD:B4:5D:D7:0D:4F:FB:5B:EE:45:0A:3D:04
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DACC501EC2361AD997B2DE05648228
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TlsqDoIJmM20XdcNT_tb7kUKPQQ.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202583
IP address blocks: 185.250.92.0/22 maxlen: 24
185.72.0.0/22 maxlen: 24
157.97.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cc:50:1e:c2:36:1a:d9:97:b2:de:05:64:82:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e5b2a0e820998cdb45dd70d4ffb5bee450a3d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:4c:75:b1:47:21:2d:f8:aa:dd:0b:9f:40:
51:94:62:c8:86:ff:8f:85:77:29:35:10:97:0a:fa:
c3:85:d4:de:77:a5:8d:18:e3:bd:44:a4:ac:3f:6d:
1a:f1:3e:2a:53:25:06:e1:86:57:fa:7d:03:2e:78:
16:9b:f4:4c:e3:f5:0b:24:41:a8:8a:2b:30:93:1b:
b1:4f:d4:a7:a5:77:58:79:80:41:19:14:aa:4d:8f:
37:3e:a1:5d:9c:ee:3d:79:fc:fa:7e:0e:5a:6d:b6:
62:d3:60:8b:d2:e7:ef:c7:d5:10:41:18:55:29:04:
f5:43:5d:84:bf:19:d0:dd:22:c3:28:28:fc:7c:03:
cf:bb:0b:94:09:9c:b8:cd:cf:22:a7:f8:a6:2c:42:
5e:c6:61:60:56:9c:a0:58:b5:21:db:0a:81:9b:a8:
54:20:fb:98:07:39:13:72:5a:b0:24:2c:c6:e8:ed:
f9:46:2f:de:23:ae:fa:09:7e:05:85:a3:f2:78:fd:
df:44:9b:c7:5a:be:69:14:b0:14:8c:de:d6:20:ee:
51:d9:27:ea:ff:cf:da:4a:e5:57:5f:6d:64:b5:c6:
bc:2c:c9:fa:a8:01:67:cc:67:cb:c3:2f:de:8a:bc:
b4:48:e9:b6:f0:82:3d:45:61:1e:ae:0c:ba:57:6a:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5B:2A:0E:82:09:98:CD:B4:5D:D7:0D:4F:FB:5B:EE:45:0A:3D:04
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TlsqDoIJmM20XdcNT_tb7kUKPQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.176.0/21
185.72.0.0/22
185.250.92.0/22
Signature Algorithm: sha256WithRSAEncryption
60:3d:b0:8f:e4:ed:d9:e1:0f:ec:09:54:4f:73:47:de:2f:7c:
02:1a:11:c2:9f:99:91:cf:0c:2e:2d:38:26:0f:32:9e:61:bd:
ff:48:e7:5c:62:65:eb:51:a5:4d:f4:7b:ed:44:19:ba:31:9b:
54:6c:f9:f2:b9:4d:68:61:7f:68:02:99:36:a0:b6:fe:62:4e:
cb:b6:36:bb:5c:ea:79:13:4b:c0:bc:d5:50:a5:c5:f1:c0:d6:
53:aa:73:a2:ad:d8:a4:1a:ed:7a:98:42:5b:37:81:f4:9f:6c:
82:ff:af:20:1a:d6:db:e6:a9:df:51:98:67:7c:97:57:21:b9:
fe:cb:80:8c:0d:4d:1e:2a:36:dd:93:3c:45:66:dd:59:77:2e:
ae:fb:c3:3e:94:e4:7b:e3:01:72:f0:a6:a1:a7:35:8c:60:a3:
67:f5:de:ec:52:8b:10:af:ac:a4:84:85:97:5a:a4:43:22:19:
bc:0f:dc:3f:28:dd:b9:8c:f9:26:dc:d9:be:d1:74:76:b3:1f:
eb:3a:6e:d9:32:9e:0e:8d:d0:40:10:51:24:8f:ce:ca:28:43:
25:cd:82:fb:f8:6e:1d:03:7c:cc:b3:f1:9e:d3:f9:37:28:e4:
22:45:6c:4d:2d:ed:92:5e:4e:54:28:f5:da:12:4b:4f:d4:e0:
3d:36:54:14
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzC2sxQHsI2GtmXst4FZIIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjQwMTAxMDIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTViMmEwZTgyMDk5OGNkYjQ1ZGQ3MGQ0ZmZiNWJlZTQ1MGEzZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+FMdbFHIS34qt0Ln0BRlGLIhv+P
hXcpNRCXCvrDhdTed6WNGOO9RKSsP20a8T4qUyUG4YZX+n0DLngWm/RM4/ULJEGo
iiswkxuxT9SnpXdYeYBBGRSqTY83PqFdnO49efz6fg5abbZi02CL0ufvx9UQQRhV
KQT1Q12EvxnQ3SLDKCj8fAPPuwuUCZy4zc8ip/imLEJexmFgVpygWLUh2wqBm6hU
IPuYBzkTclqwJCzG6O35Ri/eI676CX4FhaPyeP3fRJvHWr5pFLAUjN7WIO5R2Sfq
/8/aSuVXX21ktca8LMn6qAFnzGfLwy/eiry0SOm28II9RWEergy6V2qTCwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE5bKg6CCZjNtF3XDU/7W+5FCj0EMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvVGxzcURvSUptTTIwWGRjTlRfdGI3a1VLUFFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDnWGwAwQC
uUgAAwQCufpcMA0GCSqGSIb3DQEBCwUAA4IBAQBgPbCP5O3Z4Q/sCVRPc0feL3wC
GhHCn5mRzwwuLTgmDzKeYb3/SOdcYmXrUaVN9HvtRBm6MZtUbPnyuU1oYX9oApk2
oLb+Yk7Ltja7XOp5E0vAvNVQpcXxwNZTqnOirdikGu16mEJbN4H0n2yC/68gGtbb
5qnfUZhnfJdXIbn+y4CMDU0eKjbdkzxFZt1Zdy6u+8M+lOR74wFy8KahpzWMYKNn
9d7sUosQr6ykhIWXWqRDIhm8D9w/KN25jPkm3Nm+0XR2sx/rOm7ZMp4OjdBAEFEk
j87KKEMlzYL7+G4dA3zMs/Ge0/k3KOQiRWxNLe2SXk5UKPXaEktP1OA9NlQU
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:34 2024 by rpki-client on console-fra.rpki-client.org