Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/tfSNVcQxQz95SXOktpcpjEeNM9M.roa
File: tfSNVcQxQz95SXOktpcpjEeNM9M.roa (raw, json)
Hash identifier: q8PhCflF6WwEYGSVYTC95/aU6mMmn6XEPwXhBxSyS7Q=
Subject key identifier: B5:F4:8D:55:C4:31:43:3F:79:49:73:A4:B6:97:29:8C:47:8D:33:D3
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 018CC56E2292F8B84220DABF35EA07CB6117
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/tfSNVcQxQz95SXOktpcpjEeNM9M.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205617
IP address blocks: 37.208.112.0/21 maxlen: 21
185.150.208.0/22 maxlen: 22
2a00:c7c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:22:92:f8:b8:42:20:da:bf:35:ea:07:cb:61:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5f48d55c431433f794973a4b697298c478d33d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:50:39:5e:e0:71:74:de:2e:03:e7:9f:55:
0f:c7:06:d1:f6:95:d6:e8:67:49:bf:34:26:3b:97:
8a:4a:4a:3f:1b:2c:c0:1a:15:0b:8e:8f:b7:33:1f:
9e:c4:6c:03:26:48:1d:09:dc:eb:54:6f:77:77:8c:
16:0d:8f:2a:29:63:1c:34:d1:5c:98:1c:91:cd:90:
fe:3b:1f:4d:13:98:b3:67:12:6b:88:9d:20:2c:cc:
62:88:ff:9a:a6:1a:ac:16:f7:fb:be:89:d1:96:bc:
d3:52:e7:a4:83:fb:6c:ec:13:71:c9:27:bb:72:09:
98:97:2d:62:ef:3f:e6:bb:00:3c:de:72:21:2c:10:
b6:84:a2:a5:bf:bf:2e:a6:d0:8a:11:08:9d:bb:a3:
bb:59:a4:94:8d:f2:ba:2e:a4:36:a9:1c:3d:a4:bf:
a3:a7:b2:8b:82:62:00:fe:06:be:cf:3f:05:f8:89:
2e:8a:18:a3:dc:f5:8e:ca:8f:92:4f:45:c4:54:a3:
a4:83:c7:38:82:57:02:af:74:93:40:55:e1:24:d8:
11:2d:b5:6c:f2:59:75:88:74:1f:c2:94:07:94:92:
6b:66:8f:c6:1d:f3:72:64:5e:04:7e:2d:69:cd:5f:
cb:8e:9a:29:90:f7:6f:17:ae:d2:62:a1:d7:8d:1b:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F4:8D:55:C4:31:43:3F:79:49:73:A4:B6:97:29:8C:47:8D:33:D3
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/tfSNVcQxQz95SXOktpcpjEeNM9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.112.0/21
185.150.208.0/22
IPv6:
2a00:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
86:c4:da:e6:e9:ad:b1:f8:3c:dd:c1:1f:65:14:a2:f8:09:cc:
a8:9a:8c:ad:91:9b:7e:16:e2:ec:ef:28:bd:af:7e:c1:d9:cd:
01:f5:02:02:15:74:47:61:1f:9b:4c:30:3e:a8:58:67:5b:db:
06:0b:5b:63:04:b4:f9:93:21:77:ab:29:e0:bb:09:b1:3e:e2:
e6:61:e8:f7:48:5a:70:32:3d:7b:a5:63:7c:9c:14:23:64:55:
6c:63:ef:eb:ae:8a:12:0d:12:d5:1c:36:3a:0f:36:30:05:1e:
42:05:68:9d:46:5b:11:4f:c3:80:03:cf:ab:fc:51:9e:22:51:
db:65:f2:f1:6e:27:b8:02:9e:08:f7:47:3f:fd:41:73:49:c3:
6c:8f:5d:af:9e:f9:97:d6:08:5e:bd:e4:f7:0a:99:13:29:12:
98:38:e7:79:f9:9f:a8:69:cf:bb:42:3f:7c:d5:ad:fe:3c:b1:
f8:56:0a:ee:c5:7a:be:9c:04:77:29:b2:44:5d:6b:ac:18:d0:
56:d4:d4:28:79:95:af:42:fe:91:36:41:5d:04:5d:4a:d1:33:
7b:21:cf:11:ae:11:c4:d9:f3:bb:01:9f:b0:9b:b8:17:1d:c5:
80:44:b0:57:2a:ac:c4:52:ed:7f:fc:b0:30:c4:45:ee:f0:91:
9a:a2:d0:f4
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFbiKS+LhCINq/NeoHy2EXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODBiM2I5ZTA5NjIyMTYyOWZlNDdlMTAyYWM1MjJkYTAz
OTc5YzQwHhcNMjQwMTAxMTQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWY0OGQ1NWM0MzE0MzNmNzk0OTczYTRiNjk3Mjk4YzQ3OGQzM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCNQOV7gcXTeLgPnn1UPxwbR9pXW
6GdJvzQmO5eKSko/GyzAGhULjo+3Mx+exGwDJkgdCdzrVG93d4wWDY8qKWMcNNFc
mByRzZD+Ox9NE5izZxJriJ0gLMxiiP+aphqsFvf7vonRlrzTUuekg/ts7BNxySe7
cgmYly1i7z/muwA83nIhLBC2hKKlv78uptCKEQidu6O7WaSUjfK6LqQ2qRw9pL+j
p7KLgmIA/ga+zz8F+Ikuihij3PWOyo+ST0XEVKOkg8c4glcCr3STQFXhJNgRLbVs
8ll1iHQfwpQHlJJrZo/GHfNyZF4Efi1pzV/LjpopkPdvF67SYqHXjRt+YwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLX0jVXEMUM/eUlzpLaXKYxHjTPTMB8GA1UdIwQY
MBaAFLeAs7ngliIWKf5H4QKsUi2gOXnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2Qt
ZjdlZGIyNjg4NjUyLzEvdGZTTlZjUXhRejk1U1hPa3RwY3BqRWVOTTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2QtZjdlZGIyNjg4NjUy
LzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJdBwAwQC
uZbQMA0EAgACMAcDBQMqAMfAMA0GCSqGSIb3DQEBCwUAA4IBAQCGxNrm6a2x+Dzd
wR9lFKL4CcyomoytkZt+FuLs7yi9r37B2c0B9QICFXRHYR+bTDA+qFhnW9sGC1tj
BLT5kyF3qynguwmxPuLmYej3SFpwMj17pWN8nBQjZFVsY+/rrooSDRLVHDY6DzYw
BR5CBWidRlsRT8OAA8+r/FGeIlHbZfLxbie4Ap4I90c//UFzScNsj12vnvmX1ghe
veT3CpkTKRKYOOd5+Z+oac+7Qj981a3+PLH4VgruxXq+nAR3KbJEXWusGNBW1NQo
eZWvQv6RNkFdBF1K0TN7Ic8RrhHE2fO7AZ+wm7gXHcWARLBXKqzEUu1//LAwxEXu
8JGaotD0
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:18 2024 by rpki-client on console-fra.rpki-client.org