Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/6J06Xk3dJrWxuWk2HONwRHGpJpE.roa
File: 6J06Xk3dJrWxuWk2HONwRHGpJpE.roa (raw, json)
Hash identifier: piG1p5dGnY5hHIfGXd9qCq0f73ZY4GcQej6YUrL8QXs=
Subject key identifier: E8:9D:3A:5E:4D:DD:26:B5:B1:B9:69:36:1C:E3:70:44:71:A9:26:91
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 018CCA296D09B36E77EFC4A9578F450F8651
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/6J06Xk3dJrWxuWk2HONwRHGpJpE.roa
Signing time: Tue 02 Jan 2024 12:32:41 +0000
ROA not before: Tue 02 Jan 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50223
IP address blocks: 109.71.226.0/24 maxlen: 24
109.71.224.0/24 maxlen: 24
109.71.229.0/24 maxlen: 24
109.71.231.0/24 maxlen: 24
109.71.230.0/24 maxlen: 24
46.251.206.0/24 maxlen: 24
46.251.205.0/24 maxlen: 24
46.251.204.0/24 maxlen: 24
46.251.202.0/24 maxlen: 24
46.251.201.0/24 maxlen: 24
46.251.200.0/24 maxlen: 24
46.251.213.0/24 maxlen: 24
46.251.212.0/24 maxlen: 24
46.251.211.0/24 maxlen: 24
46.251.210.0/24 maxlen: 24
46.251.209.0/24 maxlen: 24
46.251.208.0/24 maxlen: 24
46.251.207.0/24 maxlen: 24
46.251.218.0/24 maxlen: 24
46.251.217.0/24 maxlen: 24
46.251.216.0/24 maxlen: 24
46.251.215.0/24 maxlen: 24
46.251.214.0/24 maxlen: 24
46.251.221.0/24 maxlen: 24
185.48.136.0/24 maxlen: 24
185.48.139.0/24 maxlen: 24
46.251.192.0/24 maxlen: 24
46.251.199.0/24 maxlen: 24
46.251.198.0/24 maxlen: 24
46.251.197.0/24 maxlen: 24
46.251.196.0/24 maxlen: 24
46.251.195.0/24 maxlen: 24
46.251.194.0/24 maxlen: 24
46.251.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:6d:09:b3:6e:77:ef:c4:a9:57:8f:45:0f:86:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: Jan 2 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89d3a5e4ddd26b5b1b969361ce3704471a92691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:0f:40:4d:21:d4:5e:50:3d:4a:8c:a4:9f:
0a:61:4e:f2:7d:5f:ca:17:e0:0b:bd:52:58:59:84:
1f:8e:be:88:d6:1e:b7:ed:b5:f9:cb:80:7f:26:bd:
6f:11:00:c4:81:49:99:61:33:26:5f:b1:4b:80:0a:
a2:6e:36:72:f8:21:ed:08:e2:c2:2b:cd:be:15:df:
16:1b:8d:2b:f3:eb:40:60:44:0d:85:45:fc:d1:82:
0d:1a:2b:56:6b:37:85:a0:09:19:ff:75:de:12:a1:
fe:21:83:68:3b:f9:b0:fa:2b:34:1a:93:ed:0a:7f:
02:7d:a0:75:c4:c5:4c:56:a4:73:28:87:4e:3a:16:
4f:26:28:fc:3f:1f:c0:f3:08:2b:d3:a8:9a:01:df:
c5:21:ae:ec:0b:ba:26:85:bf:4d:20:6e:d3:c3:fb:
21:0a:eb:41:db:d7:26:33:d4:fb:6b:42:8e:2d:bb:
4d:13:ae:d9:e4:37:ef:a6:d2:d4:0f:be:57:d8:88:
e8:df:e6:93:bd:09:ae:34:21:f3:a2:a3:1f:ee:4a:
1a:d3:eb:f6:14:28:f6:7e:cb:07:15:3d:6f:79:a2:
1d:f8:0e:37:b3:e6:f2:08:d2:72:f8:cf:27:5a:79:
50:b3:00:aa:f4:cb:f8:7b:8e:36:a0:f5:0a:b2:18:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:3A:5E:4D:DD:26:B5:B1:B9:69:36:1C:E3:70:44:71:A9:26:91
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/6J06Xk3dJrWxuWk2HONwRHGpJpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.192.0-46.251.202.255
46.251.204.0-46.251.218.255
46.251.221.0/24
109.71.224.0/24
109.71.226.0/24
109.71.229.0-109.71.231.255
185.48.136.0/24
185.48.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:40:62:de:be:7d:6b:fb:76:c8:dc:c1:f1:fa:bc:fe:3f:e5:
a9:46:6a:2f:22:ca:b4:35:08:f1:36:c0:59:f3:de:95:da:3c:
53:e3:02:dc:b5:66:a4:8d:71:80:88:30:80:9d:40:27:32:da:
17:6d:f9:6f:18:11:d2:b8:19:3f:f2:c2:70:0b:49:bb:bb:28:
f1:d1:90:54:85:51:c6:e0:60:d9:6a:5d:9d:d8:c5:b6:4c:c6:
6c:9d:09:32:c4:e3:78:32:fa:d6:47:90:f8:e2:10:56:ea:ba:
6b:68:0f:a1:f8:b1:63:99:6c:4c:ef:fa:ef:2e:cc:02:6c:eb:
5c:0a:c6:71:0b:31:30:6d:bb:7d:a1:b6:c6:6f:6a:83:33:8c:
1b:9f:77:85:7d:b1:fe:f4:aa:df:0b:44:23:ca:53:8f:28:5d:
47:61:84:a4:55:62:17:03:dd:bc:98:4e:f2:df:dc:bf:1f:59:
33:0f:30:29:63:38:03:de:ec:7d:71:55:f9:e8:5d:01:ce:5b:
16:cd:6d:f4:c5:f7:92:ca:cb:bf:9e:83:c2:1b:a9:f3:5a:89:
eb:3a:25:fa:fc:1a:13:7d:a5:8f:07:74:ca:09:5f:87:8e:98:
8a:8c:81:03:21:36:71:8e:6b:a8:c1:2b:7f:be:f9:7d:cf:47:
58:9e:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:25:23 2024 by rpki-client on console-ams.rpki-client.org