Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rirChDF6r25Jw6astHtI6VHUw8Y.roa
File: rirChDF6r25Jw6astHtI6VHUw8Y.roa (raw, json)
Hash identifier: aBlSv/kV+HKq66CLKR2mAzZ7ff7GCZlkcfWb0sUhpm8=
Subject key identifier: AE:2A:C2:84:31:7A:AF:6E:49:C3:A6:AC:B4:7B:48:E9:51:D4:C3:C6
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 018CC64A750E9A00873B38C5D28ABBCF57A1
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rirChDF6r25Jw6astHtI6VHUw8Y.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29551
IP address blocks: 80.66.204.0/22 maxlen: 22
109.71.24.0/21 maxlen: 21
83.141.0.0/18 maxlen: 18
109.71.31.0/24 maxlen: 24
83.141.10.0/24 maxlen: 24
82.149.233.0/24 maxlen: 24
82.149.232.0/24 maxlen: 24
82.149.235.0/24 maxlen: 24
82.149.234.0/24 maxlen: 24
195.225.196.0/22 maxlen: 22
178.19.64.0/20 maxlen: 20
46.253.112.0/20 maxlen: 20
82.149.224.0/19 maxlen: 19
83.141.16.0/24 maxlen: 24
83.141.15.0/24 maxlen: 24
83.141.29.0/24 maxlen: 24
83.141.28.0/24 maxlen: 24
83.141.27.0/24 maxlen: 24
83.141.26.0/24 maxlen: 24
83.141.57.0/24 maxlen: 24
83.141.62.0/24 maxlen: 24
83.141.60.0/24 maxlen: 24
83.141.60.0/22 maxlen: 22
2a01:440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:75:0e:9a:00:87:3b:38:c5:d2:8a:bb:cf:57:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae2ac284317aaf6e49c3a6acb47b48e951d4c3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:42:f3:95:0b:4b:be:fc:b3:50:1b:f0:e6:
9f:7a:f3:4f:a3:26:5e:db:55:f8:cc:b7:a2:50:96:
ca:77:6f:cf:e9:ce:f1:06:a9:08:4d:44:fa:0f:73:
2a:ae:99:91:30:e5:8d:8b:ee:c9:71:d9:3c:f5:3a:
fa:df:5d:84:50:8e:2f:aa:11:71:7d:25:63:e9:a6:
ec:15:16:21:f6:6a:fb:06:91:da:8f:f7:a5:f0:d9:
3e:7b:44:b0:8b:bb:c9:6b:23:f5:69:dd:1b:fd:8d:
9e:4c:27:5f:ff:64:85:1b:0a:95:7d:e0:d1:76:52:
43:5c:6f:85:02:92:f3:00:e5:7e:5f:23:ec:8e:6b:
77:cf:7d:18:22:1d:4d:77:01:e9:ea:0f:d9:74:67:
48:d1:a5:24:12:cc:b4:92:49:c7:c9:7e:5a:af:18:
a9:89:21:61:f0:d3:25:83:95:b8:90:d2:67:6f:52:
14:47:59:74:77:22:cd:d5:bd:fc:f7:2f:71:71:6f:
14:91:5d:95:72:10:61:9d:48:f0:fa:ce:9d:7f:f8:
a4:a3:1b:08:d9:c8:25:79:7a:5a:ae:ea:12:97:80:
22:3b:81:0d:33:ce:f1:3a:79:be:e3:ef:86:9a:d3:
9c:54:a6:8d:9e:06:92:ee:6f:68:09:3b:92:de:90:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:C2:84:31:7A:AF:6E:49:C3:A6:AC:B4:7B:48:E9:51:D4:C3:C6
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rirChDF6r25Jw6astHtI6VHUw8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.112.0/20
80.66.204.0/22
82.149.224.0/19
83.141.0.0/18
109.71.24.0/21
178.19.64.0/20
195.225.196.0/22
IPv6:
2a01:440::/29
Signature Algorithm: sha256WithRSAEncryption
4e:62:45:6a:04:80:cc:4d:53:31:c6:00:29:d3:a0:39:cc:c1:
17:65:fa:db:fc:d6:77:6a:c0:5b:1f:52:1a:3e:b8:44:8d:b5:
10:9d:6e:f0:af:f3:0f:f2:3f:c8:42:d8:1a:47:8c:39:21:ca:
fe:93:d1:3f:e2:14:97:9e:68:96:62:85:a7:1c:9b:fd:eb:b8:
2d:39:44:16:83:f0:1b:80:75:52:2b:04:19:ae:d2:d5:b2:34:
82:36:b2:f1:65:5b:36:47:e9:f2:b6:c4:aa:60:df:7a:9a:f2:
1f:56:e9:73:1a:80:6a:4b:a1:3c:3f:35:e0:73:3a:44:c8:68:
e2:56:11:f0:9a:f3:ee:eb:59:bb:ef:2c:51:71:40:0f:15:7d:
87:b0:59:17:88:7d:7b:3e:92:0a:ec:ed:92:df:a7:ac:5a:9a:
6a:a5:d6:02:88:e3:6d:77:ae:03:4b:b1:23:b7:0f:eb:45:5b:
40:de:08:cf:28:e0:5e:70:da:a9:11:7d:02:60:4b:20:85:fd:
ad:47:6b:0a:17:60:f5:c9:83:14:e4:2c:7e:87:be:0c:51:f6:
b4:20:4d:56:40:39:59:b0:48:38:a1:7e:f9:bd:fc:57:15:ef:
94:4c:fb:43:cf:25:cf:62:62:65:86:ff:5a:9c:82:ae:f7:fb:
35:a6:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:47:12 2024 by rpki-client on console-ams.rpki-client.org