Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/ten4fFcmXZM6KPrU99BCgE2Lg-k.roa
File: ten4fFcmXZM6KPrU99BCgE2Lg-k.roa (raw, json)
Hash identifier: 1pFF1Qje8HR1vWxIX2kYSOCjzZ0UUviOFA5tsSARfmg=
Subject key identifier: B5:E9:F8:7C:57:26:5D:93:3A:28:FA:D4:F7:D0:42:80:4D:8B:83:E9
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 018CC2DB17A8879748DA493BD4C61275543F
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/ten4fFcmXZM6KPrU99BCgE2Lg-k.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60241
IP address blocks: 198.52.44.0/22 maxlen: 24
198.52.46.0/23 maxlen: 23
185.120.128.0/22 maxlen: 22
185.34.60.0/22 maxlen: 22
2a04:5d00::/29 maxlen: 29
2a06:9a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:17:a8:87:97:48:da:49:3b:d4:c6:12:75:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5e9f87c57265d933a28fad4f7d042804d8b83e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:1d:3f:38:1e:05:45:64:b3:08:97:da:76:
1d:bb:a9:f9:00:dc:cb:47:30:2c:f7:02:f5:f0:17:
9f:93:a8:56:fe:93:f6:f8:ba:e2:0e:2f:5a:aa:8d:
b8:aa:6d:11:83:03:98:48:d1:e2:d7:88:dc:84:0b:
c7:c4:05:62:2f:6c:48:1c:1c:c6:92:d4:c4:23:d7:
bc:02:a0:fe:6e:0d:87:50:dc:d3:52:29:a0:2f:08:
6b:98:36:88:30:dc:b0:b5:9d:13:ed:ae:a4:4e:34:
d1:c9:9b:66:b3:85:f4:63:e6:63:9d:98:fd:29:84:
44:05:2a:4f:5a:77:7c:cd:a4:a3:fa:f6:60:58:de:
6f:b9:84:d3:db:c0:75:97:25:8b:a2:7f:9d:02:89:
d7:1e:47:23:0c:32:bc:00:c1:11:b8:ea:98:43:12:
83:42:f3:ae:f7:bc:bf:56:b3:da:e4:9c:d3:95:07:
d0:f7:e2:01:33:5e:6c:65:10:54:29:f7:91:7e:cd:
52:49:60:5e:e5:6e:70:72:27:c1:b0:1e:c1:95:9f:
ca:03:d4:ad:4f:ef:cd:2a:f6:a8:ca:82:d3:1f:80:
eb:7a:0a:71:9e:f0:e0:11:74:ff:89:b4:e2:5e:c3:
34:b3:9c:19:63:c0:f1:20:cb:f9:51:83:65:a1:f9:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:F8:7C:57:26:5D:93:3A:28:FA:D4:F7:D0:42:80:4D:8B:83:E9
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/ten4fFcmXZM6KPrU99BCgE2Lg-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.60.0/22
185.120.128.0/22
198.52.44.0/22
IPv6:
2a04:5d00::/29
2a06:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
ac:96:94:3e:21:55:97:ab:8d:91:83:27:62:cd:74:06:03:3a:
55:0c:22:ba:ce:a3:59:9b:8b:34:a0:38:eb:23:0f:67:b3:0c:
5a:a3:24:19:de:71:aa:98:b2:9b:b0:ea:5b:53:f8:9f:c7:82:
af:2f:cf:15:fc:ee:66:de:06:53:79:e2:5c:d5:29:d0:a1:f2:
52:8c:99:22:5e:f5:e4:65:a7:d5:56:1f:5d:0f:f4:89:7d:29:
9b:ca:f0:c6:9e:b8:40:de:1f:59:00:c4:d3:97:32:b0:f5:26:
10:37:13:a7:11:8d:d0:43:7a:d0:62:c1:cf:a3:94:1a:5e:a3:
0f:c1:48:e9:3f:34:97:50:7f:a2:9e:af:f0:21:9b:7f:15:18:
c3:d2:14:9e:12:a0:64:b3:6b:c6:b1:7d:6e:9e:c1:3d:15:50:
44:4d:fd:49:fb:75:88:cd:a3:87:e9:08:f0:d2:d2:93:6c:fb:
21:31:ad:8b:8a:6a:76:70:89:49:d1:d9:70:10:3f:15:6f:ba:
42:20:ca:d9:b7:e6:36:6a:b0:e1:8e:7b:2b:03:d6:ff:c4:d1:
ec:4d:97:60:b5:d1:33:26:d5:e8:9a:8f:16:6c:d7:e6:c5:06:
a3:db:5b:57:63:7b:09:30:6b:91:b8:24:0a:12:3e:52:a3:b3:
6a:05:ab:1b
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYzC2xeoh5dI2kk71MYSdVQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2
MjVmMjgwHhcNMjQwMTAxMDIyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWU5Zjg3YzU3MjY1ZDkzM2EyOGZhZDRmN2QwNDI4MDRkOGI4M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mMdPzgeBUVkswiX2nYdu6n5ANzL
RzAs9wL18Befk6hW/pP2+LriDi9aqo24qm0RgwOYSNHi14jchAvHxAViL2xIHBzG
ktTEI9e8AqD+bg2HUNzTUimgLwhrmDaIMNywtZ0T7a6kTjTRyZtms4X0Y+ZjnZj9
KYREBSpPWnd8zaSj+vZgWN5vuYTT28B1lyWLon+dAonXHkcjDDK8AMERuOqYQxKD
QvOu97y/VrPa5JzTlQfQ9+IBM15sZRBUKfeRfs1SSWBe5W5wcifBsB7BlZ/KA9St
T+/NKvaoyoLTH4DregpxnvDgEXT/ibTiXsM0s5wZY8DxIMv5UYNloflLUwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFLXp+HxXJl2TOij61PfQQoBNi4PpMB8GA1UdIwQY
MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvdGVuNGZGY21YWk02S1ByVTk5QkNnRTJMZy1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuSI8AwQC
uXiAAwQCxjQsMBQEAgACMA4DBQMqBF0AAwUDKgaagDANBgkqhkiG9w0BAQsFAAOC
AQEArJaUPiFVl6uNkYMnYs10BgM6VQwius6jWZuLNKA46yMPZ7MMWqMkGd5xqpiy
m7DqW1P4n8eCry/PFfzuZt4GU3niXNUp0KHyUoyZIl715GWn1VYfXQ/0iX0pm8rw
xp64QN4fWQDE05cysPUmEDcTpxGN0EN60GLBz6OUGl6jD8FI6T80l1B/op6v8CGb
fxUYw9IUnhKgZLNrxrF9bp7BPRVQRE39Sft1iM2jh+kI8NLSk2z7ITGti4pqdnCJ
SdHZcBA/FW+6QiDK2bfmNmqw4Y57KwPW/8TR7E2XYLXRMybV6JqPFmzX5sUGo9tb
V2N7CTBrkbgkChI+UqOzagWrGw==
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:31:04 2024 by rpki-client on console-ams.rpki-client.org