Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/oo_21kiHDkyaDN3rDUk-9qhM7eQ.roa
File: oo_21kiHDkyaDN3rDUk-9qhM7eQ.roa (raw, json)
Hash identifier: 8mdQqvEbB1xYwxyQ7gPwecZNwIvpmsM0JVMUS5YUye4=
Subject key identifier: A2:8F:F6:D6:48:87:0E:4C:9A:0C:DD:EB:0D:49:3E:F6:A8:4C:ED:E4
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 018CC9BCFA23383DE7C5130B089FB3F472AF
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/oo_21kiHDkyaDN3rDUk-9qhM7eQ.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12996
IP address blocks: 185.201.125.0/24 maxlen: 24
185.201.124.0/22 maxlen: 24
185.201.124.0/24 maxlen: 24
185.201.126.0/24 maxlen: 24
185.201.127.0/24 maxlen: 24
193.57.14.0/23 maxlen: 23
193.57.22.0/23 maxlen: 23
194.63.251.0/24 maxlen: 24
194.63.252.0/24 maxlen: 24
194.63.253.0/24 maxlen: 24
194.63.248.0/21 maxlen: 24
194.63.248.0/23 maxlen: 24
194.63.248.0/24 maxlen: 24
194.63.249.0/24 maxlen: 24
194.63.250.0/24 maxlen: 24
151.249.125.0/24 maxlen: 24
151.249.121.0/24 maxlen: 24
151.249.122.0/24 maxlen: 24
185.134.244.0/22 maxlen: 22
151.249.123.0/24 maxlen: 24
151.249.124.0/24 maxlen: 24
151.249.120.0/21 maxlen: 24
151.249.120.0/24 maxlen: 24
151.249.127.0/24 maxlen: 24
194.63.254.0/24 maxlen: 24
194.63.255.0/24 maxlen: 24
2a01:5b40::/48 maxlen: 48
2a01:5b40:5::/48 maxlen: 48
2a01:5b40::/32 maxlen: 48
2a0f:c180::/29 maxlen: 29
2a01:5b40:c::/48 maxlen: 48
2a01:5b40:ac2::/48 maxlen: 48
2a0a:c340::/32 maxlen: 32
2a01:5b40:ac1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fa:23:38:3d:e7:c5:13:0b:08:9f:b3:f4:72:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a28ff6d648870e4c9a0cddeb0d493ef6a84cede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:a4:ed:1d:36:6b:8d:3f:9d:12:22:5c:96:
77:a2:fb:1d:b5:07:5d:3f:0a:38:3f:98:c0:2a:ee:
58:86:58:ad:48:d1:5c:78:79:84:80:f3:44:2c:87:
f6:5b:15:8a:9c:47:4e:92:18:32:90:d2:d2:54:4f:
bb:f9:1a:2b:64:05:7c:c4:cb:d8:14:36:7f:a5:1e:
46:94:84:45:08:29:d9:26:4b:14:f4:ef:97:57:00:
39:6f:84:c7:e2:92:9d:2d:e6:f6:0b:38:91:2a:0b:
ea:00:87:10:d8:10:61:d9:fe:15:ff:65:a1:89:45:
fc:c5:37:d7:e1:a7:38:6a:fb:93:d2:52:f1:88:49:
6f:3b:57:84:aa:a4:2c:1e:1a:f7:d5:d1:0d:c0:6f:
40:80:90:fb:c2:1a:22:a2:b8:e3:2d:a3:06:d2:03:
38:32:6f:64:1d:a8:55:c9:e6:e5:2d:5f:e3:94:09:
b1:c1:81:61:30:7a:0e:94:e3:0b:fd:76:5e:8d:b6:
9b:3d:37:37:64:fd:dd:df:2c:1d:37:a9:b6:7a:2a:
1b:3a:a6:74:0d:81:8c:21:62:6a:18:4a:aa:da:6c:
22:1b:fb:bb:15:a6:e0:1e:fc:7b:30:63:b7:a1:c9:
57:51:51:40:54:f6:11:2a:c1:71:5b:ea:c3:84:54:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:F6:D6:48:87:0E:4C:9A:0C:DD:EB:0D:49:3E:F6:A8:4C:ED:E4
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/oo_21kiHDkyaDN3rDUk-9qhM7eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.249.120.0/21
185.134.244.0/22
185.201.124.0/22
193.57.14.0/23
193.57.22.0/23
194.63.248.0/21
IPv6:
2a01:5b40::/32
2a0a:c340::/32
2a0f:c180::/29
Signature Algorithm: sha256WithRSAEncryption
2d:d7:c4:cb:f0:94:44:05:61:25:7b:f8:73:3f:eb:44:a1:3c:
13:ca:1d:d8:a9:d9:fe:7a:78:67:0a:9c:7a:44:7a:83:b5:77:
2b:17:f4:28:91:3b:fb:b6:f7:95:77:1d:f5:df:be:33:15:91:
44:2d:06:c2:53:82:c3:a5:6a:2a:b9:41:53:08:9e:a2:86:09:
6e:bb:52:3d:6f:49:91:de:41:5c:32:5b:21:c8:e5:75:a6:44:
d6:98:30:71:c3:cb:95:6d:0f:d6:b5:16:00:22:7f:54:c6:32:
ed:aa:77:a0:68:68:ec:f6:69:21:bf:cb:6a:a6:6d:ba:55:52:
cb:cb:82:2a:19:15:bb:c7:ff:27:76:52:3b:34:cc:a2:7c:10:
fd:72:94:66:bc:fc:da:54:62:b3:d8:e4:46:dd:7f:2e:12:49:
71:61:dd:50:b9:6e:28:9f:3e:f9:df:6e:fa:d8:63:be:7a:cb:
4b:bd:1b:7f:00:2b:30:fe:d9:2b:20:3e:f9:87:24:ec:a1:0c:
33:60:76:09:82:f1:12:47:85:64:a3:6f:97:83:61:29:63:66:
94:9b:61:92:ee:c1:cc:c5:53:0d:2c:02:de:b8:a4:76:e6:d2:
9c:b0:f9:8b:3e:f5:e4:7e:8e:4d:1e:cb:69:de:da:35:74:da:
5c:1f:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:47 2024 by rpki-client on console-fra.rpki-client.org