Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/pkhHTOz5LIj7mVFQyEIcgJaXrE8.roa
File: pkhHTOz5LIj7mVFQyEIcgJaXrE8.roa (raw, json)
Hash identifier: HhnCd0RSK+1V2RdDynf6C46HdBFm0nr3IpN8V8waYnQ=
Subject key identifier: A6:48:47:4C:EC:F9:2C:88:FB:99:51:50:C8:42:1C:80:96:97:AC:4F
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 0190352D39511C045B1B3C491B59D9FBB963
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/pkhHTOz5LIj7mVFQyEIcgJaXrE8.roa
Signing time: Thu 20 Jun 2024 10:24:34 +0000
ROA not before: Thu 20 Jun 2024 10:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 88.151.11.0/24 maxlen: 24
91.210.71.0/24 maxlen: 24
109.205.62.0/24 maxlen: 24
193.104.177.0/24 maxlen: 24
193.200.61.0/24 maxlen: 24
193.228.131.0/24 maxlen: 24
195.69.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:2d:39:51:1c:04:5b:1b:3c:49:1b:59:d9:fb:b9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Jun 20 10:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a648474cecf92c88fb995150c8421c809697ac4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:a0:63:91:f4:b4:4e:9c:c7:12:1a:5b:06:
cd:bd:b3:7b:42:c3:4a:3f:51:ea:aa:dd:11:aa:a5:
b0:d0:94:b1:f0:fa:aa:4d:6c:a3:7b:17:7d:9f:3b:
82:cd:16:f2:0b:51:da:a0:f7:88:d4:cb:95:cb:74:
d5:f0:75:3b:16:32:b6:40:30:a0:38:05:a3:77:47:
be:54:13:04:31:ac:27:ae:3c:17:91:47:0f:7c:dc:
7f:b6:30:55:03:10:80:a7:b4:57:46:8b:8f:e5:65:
c3:6d:1a:95:a3:00:78:10:8d:6d:5a:97:05:0b:20:
87:a9:e5:85:59:1e:01:ea:d9:89:6d:c5:b7:a9:ef:
5c:1f:32:f2:0f:18:c5:13:14:f6:06:58:d3:f0:ed:
a7:a7:50:0e:65:d4:7f:19:93:f6:0b:6e:5a:6b:39:
94:05:7d:54:91:92:bc:57:2d:81:38:a6:5b:9d:5c:
b6:43:c9:2b:5d:7e:89:46:97:e1:a5:48:94:13:ee:
a7:0f:bc:2d:b4:df:c6:17:fa:d5:03:ce:fb:73:41:
e1:b1:1d:5f:d8:c3:29:75:5c:04:8b:9a:dc:df:6d:
62:cb:f6:fa:e0:02:43:9a:0a:6f:c5:89:8c:b9:e0:
c7:25:52:b8:9e:da:92:91:42:e0:84:c5:b9:fc:34:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:48:47:4C:EC:F9:2C:88:FB:99:51:50:C8:42:1C:80:96:97:AC:4F
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/pkhHTOz5LIj7mVFQyEIcgJaXrE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.11.0/24
91.210.71.0/24
109.205.62.0/24
193.104.177.0/24
193.200.61.0/24
193.228.131.0/24
195.69.162.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4d:f4:04:3a:c9:5a:37:34:ca:52:6f:a9:1d:db:36:30:75:
10:32:e7:3c:95:3e:73:36:66:c9:b6:98:23:c6:71:ea:ee:74:
97:5a:a0:17:c8:73:d2:76:19:ab:e6:11:c7:a5:da:fb:e5:bf:
91:5f:3a:5a:59:52:79:99:c1:bc:f0:d1:3b:4f:1c:e8:8e:43:
a0:14:f9:c2:bf:d6:d1:33:5f:ee:bc:70:67:1e:55:39:56:0d:
5d:04:98:b3:98:b5:72:c5:a8:63:20:18:dd:ac:21:2a:50:af:
45:06:04:c6:df:4c:d6:d0:41:c4:df:91:23:6d:36:24:a5:53:
55:d4:f7:09:05:57:4f:a7:f3:7b:02:16:88:2b:ab:10:df:1b:
5e:b6:82:50:5d:f9:4a:a7:98:c6:57:b3:de:07:da:13:33:51:
e7:5f:a5:22:b3:b1:82:7f:b1:57:6a:29:a6:e6:48:6d:40:73:
48:05:b3:81:6a:f5:a5:57:fc:33:eb:79:11:9d:01:58:30:73:
bf:c0:7b:50:c9:38:95:b2:27:44:35:68:28:ff:c0:13:e4:c9:
f2:bb:6a:e7:48:7d:39:25:7c:76:9a:e2:c5:48:66:1d:5f:a9:
f1:7d:ba:85:d6:75:e9:c2:9e:7d:17:c8:19:39:11:11:4a:32:
89:3a:94:9c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZA1LTlRHARbGzxJG1nZ+7ljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZjYxOWVmMjAwODQwZGZhOGZkNDM1NjdjN2E5NzhjMTUz
MTJkN2YwHhcNMjQwNjIwMTAyNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjQ4NDc0Y2VjZjkyYzg4ZmI5OTUxNTBjODQyMWM4MDk2OTdhYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LagY5H0tE6cxxIaWwbNvbN7QsNK
P1Hqqt0RqqWw0JSx8PqqTWyjexd9nzuCzRbyC1HaoPeI1MuVy3TV8HU7FjK2QDCg
OAWjd0e+VBMEMawnrjwXkUcPfNx/tjBVAxCAp7RXRouP5WXDbRqVowB4EI1tWpcF
CyCHqeWFWR4B6tmJbcW3qe9cHzLyDxjFExT2BljT8O2np1AOZdR/GZP2C25aazmU
BX1UkZK8Vy2BOKZbnVy2Q8krXX6JRpfhpUiUE+6nD7wttN/GF/rVA877c0HhsR1f
2MMpdVwEi5rc321iy/b64AJDmgpvxYmMueDHJVK4ntqSkULghMW5/DRcjwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFKZIR0zs+SyI+5lRUMhCHICWl6xPMB8GA1UdIwQY
MBaAFLD2Ge8gCEDfqP1DVnx6l4wVMS1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYt
MDY5NjYxNjc1MTA2LzEvcGtoSFRPejVMSWo3bVZGUXlFSWNnSmFYckU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYtMDY5NjYxNjc1MTA2
LzEvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAWJcLAwQA
W9JHAwQAbc0+AwQAwWixAwQAwcg9AwQAweSDAwQAw0WiMA0GCSqGSIb3DQEBCwUA
A4IBAQAYTfQEOslaNzTKUm+pHds2MHUQMuc8lT5zNmbJtpgjxnHq7nSXWqAXyHPS
dhmr5hHHpdr75b+RXzpaWVJ5mcG88NE7TxzojkOgFPnCv9bRM1/uvHBnHlU5Vg1d
BJizmLVyxahjIBjdrCEqUK9FBgTG30zW0EHE35EjbTYkpVNV1PcJBVdPp/N7AhaI
K6sQ3xtetoJQXflKp5jGV7PeB9oTM1HnX6Uis7GCf7FXaimm5khtQHNIBbOBavWl
V/wz63kRnQFYMHO/wHtQyTiVsidENWgo/8AT5Mnyu2rnSH05JXx2muLFSGYdX6nx
fbqF1nXpwp59F8gZORERSjKJOpSc
-----END CERTIFICATE-----
Generated at Mon Jul 1 08:52:43 2024 by rpki-client on console-fra.rpki-client.org