Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/AtVtCl9vB6uN6cQB1TWrzAy5cds.roa
File: AtVtCl9vB6uN6cQB1TWrzAy5cds.roa (raw, json)
Hash identifier: Q+mexfMHg2/TGsxgf1hSGJ+Y2O6t3u/T5/nKRnJggqc=
Subject key identifier: 02:D5:6D:0A:5F:6F:07:AB:8D:E9:C4:01:D5:35:AB:CC:0C:B9:71:DB
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 018CC348A445047E809376B19E7E54DA4967
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/AtVtCl9vB6uN6cQB1TWrzAy5cds.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43950
IP address blocks: 193.239.8.0/22 maxlen: 22
5.252.156.0/22 maxlen: 22
79.98.32.0/21 maxlen: 21
79.98.33.0/24 maxlen: 24
79.98.32.0/24 maxlen: 24
79.98.35.0/24 maxlen: 24
79.98.39.0/24 maxlen: 24
2a01:568::/32 maxlen: 32
2a01:568::/36 maxlen: 36
2a01:568:3000::/36 maxlen: 36
2a01:568:4000::/36 maxlen: 36
2a01:568:5000::/36 maxlen: 36
2a01:568:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a4:45:04:7e:80:93:76:b1:9e:7e:54:da:49:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02d56d0a5f6f07ab8de9c401d535abcc0cb971db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:21:14:85:e9:06:ae:c8:b6:33:18:8d:7c:
61:42:ab:fa:6d:27:24:ab:5d:c6:21:ed:94:75:fc:
15:1f:11:0f:fa:1a:a5:7e:13:26:97:1d:13:d3:de:
81:9c:4a:24:ba:94:64:33:ee:c5:0a:b8:ce:0a:55:
15:2d:09:a9:1d:04:2a:b2:0c:56:20:10:1c:9d:da:
e5:10:00:7e:a5:af:00:dd:45:bf:80:1e:f8:df:12:
a9:49:27:e3:5c:23:9a:9f:3e:d3:2b:e6:5a:66:85:
c2:26:e7:15:54:af:cc:25:16:7c:b9:62:81:56:78:
1a:0a:92:b5:35:b2:ba:f9:b0:16:ec:c4:27:66:21:
f1:27:e2:05:e1:99:4c:a7:eb:8a:64:54:da:98:60:
08:9b:be:fa:c3:05:ba:7d:ca:7b:9b:f4:30:17:a5:
68:56:95:8f:68:d5:7c:3c:ce:6d:04:a5:6a:44:51:
db:e7:8c:39:6d:ce:b6:a8:55:2e:17:f6:82:01:ce:
87:43:2e:76:e7:fb:fb:85:6f:19:0d:59:34:46:86:
8e:3b:e3:21:db:be:71:68:b1:88:0a:37:52:8d:e9:
42:d4:a2:62:e1:9d:99:d3:eb:ca:d0:72:2d:8a:30:
59:53:b0:12:0e:a2:33:c2:af:06:58:8a:af:fe:2d:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D5:6D:0A:5F:6F:07:AB:8D:E9:C4:01:D5:35:AB:CC:0C:B9:71:DB
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/AtVtCl9vB6uN6cQB1TWrzAy5cds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.156.0/22
79.98.32.0/21
193.239.8.0/22
IPv6:
2a01:568::/32
Signature Algorithm: sha256WithRSAEncryption
a5:9f:02:8b:24:16:73:94:fc:2d:33:ae:f0:60:8c:4d:fc:6b:
c7:0f:30:73:04:dc:8e:04:a7:f4:4b:51:13:4b:1c:ae:9a:db:
89:f8:ff:14:18:6b:12:1e:a3:05:64:a8:f2:bf:06:91:7e:3f:
01:65:ce:c0:35:5f:35:3e:b4:16:30:51:8d:12:36:e5:a7:91:
b0:f7:3f:81:84:23:6f:58:9a:8e:d9:71:1e:77:23:6b:3e:a9:
a4:1e:ca:3b:56:72:c7:41:95:81:23:a2:f7:1d:11:7f:1b:8e:
75:28:4c:e2:8f:8b:db:8b:08:26:4d:31:e1:c5:9e:63:b1:f0:
89:49:a3:f5:16:a8:15:8c:49:65:c1:d8:8c:7e:96:7f:09:2b:
b1:1e:8d:7d:94:4b:07:ed:7a:90:28:0b:63:5e:2d:cb:81:d2:
3d:70:b3:0d:3c:40:fe:e1:9b:3c:d1:5c:0a:ec:26:7b:e6:0b:
f3:d5:fa:7a:8b:b0:06:cc:93:59:b6:15:f4:ac:2a:a5:11:5d:
c4:0f:eb:95:1a:4f:d4:f9:d0:ad:66:95:88:be:f3:05:0f:26:
02:60:66:f3:8d:f2:9e:f8:bd:dc:50:ef:bb:b3:6f:90:25:62:
5b:c4:0c:82:fa:9c:00:aa:5e:c2:09:f4:d7:42:e8:3b:cf:8a:
bb:c4:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:51:53 2024 by rpki-client on console-ams.rpki-client.org