Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6gYItvxVepe493Rd2iOC12xgZvg.roa
File: 6gYItvxVepe493Rd2iOC12xgZvg.roa (raw, json)
Hash identifier: +P5eNPdXbSo80vz31RVGSvV05o59RwHCO9fd3nr+was=
Subject key identifier: EA:06:08:B6:FC:55:7A:97:B8:F7:74:5D:DA:23:82:D7:6C:60:66:F8
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018E18E62B6C08E503B75CE4DE4A853A821F
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6gYItvxVepe493Rd2iOC12xgZvg.roa
Signing time: Thu 07 Mar 2024 12:32:01 +0000
ROA not before: Thu 07 Mar 2024 12:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205132
IP address blocks: 46.10.156.0/24 maxlen: 24
46.10.179.0/24 maxlen: 24
77.85.170.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
83.228.61.0/24 maxlen: 24
83.228.86.0/24 maxlen: 24
83.228.87.0/24 maxlen: 24
83.228.89.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.192.0/24 maxlen: 24
84.238.193.0/24 maxlen: 24
84.238.194.0/24 maxlen: 24
87.126.134.0/24 maxlen: 24
94.236.169.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.91.157.0/24 maxlen: 24
213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:e6:2b:6c:08:e5:03:b7:5c:e4:de:4a:85:3a:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Mar 7 12:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea0608b6fc557a97b8f7745dda2382d76c6066f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:79:b9:3c:9b:1d:a5:c1:c7:3f:a1:28:4d:
9c:cd:c7:2d:31:c1:94:d8:65:39:12:ad:fc:3d:de:
cb:4f:3a:13:f9:e6:06:99:bd:3e:e4:75:7e:59:f0:
21:40:41:f9:27:39:64:10:5f:0a:dc:a1:26:58:b1:
9b:05:c3:7e:b5:41:94:47:b6:6d:6d:68:bd:bf:c2:
7d:b5:0b:93:70:e6:f1:6f:ac:3f:75:5a:4d:6b:9a:
10:18:59:64:b0:0f:24:28:eb:1c:77:66:18:69:d0:
05:54:2c:9d:13:4a:92:43:15:a7:3b:ed:68:9b:4a:
18:2a:d9:21:6e:3e:42:fe:dd:3a:a3:69:36:f0:87:
5b:45:e3:14:77:34:fc:43:bb:7f:34:6b:49:af:33:
1c:4a:be:43:a6:10:e9:a2:28:82:0e:16:fb:c2:66:
9f:d1:fa:46:d7:46:59:6e:7b:77:20:61:e7:7a:46:
cb:53:64:0a:bf:a2:fc:aa:8e:ae:67:63:af:ce:83:
2b:e8:14:6d:7c:18:1a:37:9f:34:cc:83:4f:ed:4f:
32:ab:9d:75:62:17:f3:11:df:50:89:41:b0:c1:0b:
e6:e5:c5:1a:e5:49:a8:1d:63:8d:ba:b0:3f:1b:47:
38:42:e9:cd:3e:43:02:53:2d:d5:7c:2d:22:10:c2:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:08:B6:FC:55:7A:97:B8:F7:74:5D:DA:23:82:D7:6C:60:66:F8
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6gYItvxVepe493Rd2iOC12xgZvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.156.0/24
46.10.179.0/24
77.85.170.0/24
77.85.198.0/24
83.228.61.0/24
83.228.86.0/23
83.228.89.0/24
84.238.167.0/24
84.238.192.0-84.238.194.255
87.126.134.0/24
94.236.169.0/24
212.72.199.0/24
212.72.221.0/24
213.91.157.0/24
213.91.173.0/24
213.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3a:28:e4:46:6f:73:81:b2:57:36:e2:37:64:3b:ee:5b:4e:
c1:99:d7:c5:9a:ee:e2:80:29:25:b8:0c:00:c5:5f:a9:b8:45:
70:9b:96:70:7d:e1:90:5e:d3:d8:01:c5:c9:f1:df:5d:f6:fc:
a6:58:84:e6:1d:aa:a1:b3:a7:ef:99:ca:d8:6f:60:5c:26:2b:
66:ec:82:dc:87:96:d4:d2:85:74:28:b2:ec:39:7b:75:79:73:
41:8b:af:80:6f:45:de:d7:4f:21:ad:b0:8b:21:19:47:34:f0:
13:4e:5d:16:95:9d:49:c5:35:aa:1c:ad:a2:a0:1d:4f:e3:5d:
5b:4d:df:ae:3f:95:fc:d4:9c:76:9f:c2:35:59:ff:1f:2f:a9:
65:2b:a7:80:05:d7:8e:a7:0a:58:60:0f:8a:fc:87:48:ec:f7:
75:36:3d:de:10:7d:fc:3d:ae:7f:12:97:5d:fd:51:18:da:ee:
ce:f2:d9:8e:6a:7a:b4:b4:6b:8c:22:ae:b5:d8:01:04:9c:58:
df:6e:da:13:49:4b:56:54:ce:dd:6d:3c:d0:f9:03:b5:9d:f1:
3b:80:6c:5c:9c:2c:3e:60:27:2f:e5:a9:06:b7:cb:f3:c6:f5:
3d:61:12:ed:1a:e6:cd:0f:bf:12:78:a6:81:c3:e6:72:29:f3:
d5:aa:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:31:54 2024 by rpki-client on console-fra.rpki-client.org