Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6xEcEwtPqWz2kW3xWTYztrQBz4o.roa
File: 6xEcEwtPqWz2kW3xWTYztrQBz4o.roa (raw, json)
Hash identifier: RkMv+pA5eUY8o83PWMhj4k3ulwsLMBq6oD0++fk+mXM=
Subject key identifier: EB:11:1C:13:0B:4F:A9:6C:F6:91:6D:F1:59:36:33:B6:B4:01:CF:8A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018F76DF222FF3FA29C7E77175147004343A
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6xEcEwtPqWz2kW3xWTYztrQBz4o.roa
Signing time: Tue 14 May 2024 11:31:25 +0000
ROA not before: Tue 14 May 2024 11:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34569
IP address blocks: 77.78.0.0/18 maxlen: 24
93.152.182.0/24 maxlen: 24
93.152.188.0/22 maxlen: 22
109.120.192.0/18 maxlen: 24
109.120.213.0/24 maxlen: 24
109.120.215.0/24 maxlen: 24
109.120.216.0/23 maxlen: 23
109.120.218.0/23 maxlen: 23
109.120.220.0/22 maxlen: 24
109.120.224.0/22 maxlen: 24
109.120.228.0/23 maxlen: 24
109.120.230.0/23 maxlen: 24
109.120.232.0/23 maxlen: 24
109.120.238.0/23 maxlen: 24
185.211.200.0/23 maxlen: 23
212.25.32.0/19 maxlen: 24
212.25.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:df:22:2f:f3:fa:29:c7:e7:71:75:14:70:04:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: May 14 11:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb111c130b4fa96cf6916df1593633b6b401cf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:ed:24:66:1c:7d:05:97:bc:0d:ac:14:bf:
5a:c3:b5:24:01:a2:95:df:db:50:6e:19:0f:a7:23:
38:fd:94:c1:a6:b2:cd:07:b0:4d:5f:21:b6:98:6e:
3e:a5:67:90:48:1c:17:af:7e:a3:71:d8:db:19:9b:
4e:7b:33:b3:36:d7:a7:c1:a8:4e:bd:2c:29:e5:ef:
52:d3:99:6c:8f:de:f7:5b:0e:f7:d0:01:4d:e9:90:
d9:9e:57:ee:66:a1:be:87:2b:c3:1f:e7:c1:85:83:
34:dc:e1:09:57:35:13:40:51:66:0f:9c:3b:3d:0a:
30:3d:c9:b5:8f:1f:12:8f:8f:73:f6:5a:1f:a5:4b:
1b:5b:91:5a:3b:8c:dc:54:b1:9c:91:be:30:32:93:
e1:4f:ed:eb:c4:82:91:d3:93:e2:4f:c2:c2:b7:6a:
79:44:1d:01:fc:ec:a7:db:b4:80:dc:5c:3c:b8:bc:
0e:cc:ab:38:2b:8c:2d:e3:2f:73:57:87:81:4e:f9:
36:fa:61:b6:2e:d9:06:3e:96:d4:a4:6b:0a:bc:cc:
5d:e6:28:81:5b:14:a7:1b:f1:6f:f0:b4:1a:c7:b9:
5c:27:b0:32:91:fc:65:66:32:58:76:c5:61:05:e9:
69:1d:0d:16:1f:97:1b:1a:f0:3c:86:b8:29:6e:4c:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:1C:13:0B:4F:A9:6C:F6:91:6D:F1:59:36:33:B6:B4:01:CF:8A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6xEcEwtPqWz2kW3xWTYztrQBz4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.0.0/18
93.152.182.0/24
93.152.188.0/22
109.120.192.0/18
185.211.200.0/23
212.25.32.0/19
Signature Algorithm: sha256WithRSAEncryption
30:af:6d:29:7d:a3:03:2f:fb:fb:14:a8:76:5f:57:e5:72:00:
b3:52:df:4f:49:27:fe:4f:02:3b:1f:18:69:e0:a2:df:5c:60:
06:e6:3f:16:4c:42:82:9f:36:d7:3d:75:90:41:f1:63:e2:26:
1d:f9:fe:bc:21:e5:d7:73:86:e4:c9:5f:6e:ef:72:e6:d5:f5:
91:44:c6:09:21:63:2e:28:6c:17:28:c6:54:ac:9c:06:2c:8a:
59:98:5e:e7:fe:a1:d6:d9:d9:16:6f:f0:af:ac:8d:58:68:fc:
68:6d:33:1c:be:15:49:26:68:aa:69:ac:14:52:5a:d5:4d:a2:
a3:ee:12:29:11:0d:bf:e5:34:53:f0:cc:1f:66:59:ad:c9:35:
0a:58:b3:8d:cf:a5:ab:89:5a:22:54:70:3d:58:fb:8a:82:31:
9f:09:ff:f1:3a:d8:a0:53:7c:5f:26:72:e3:6d:50:85:3a:9b:
a4:eb:a8:c6:9a:76:f7:41:41:44:1e:6e:b0:09:23:64:2e:08:
72:8a:48:c0:c8:d9:f0:ec:07:3b:75:ba:13:53:7d:e0:c3:9f:
08:03:e3:b6:fc:68:7d:4a:79:75:4f:3a:fc:49:3b:72:a2:25:
f2:25:8a:2f:1c:e1:70:0b:17:0a:f7:8b:02:40:0c:14:b6:0d:
cd:4a:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:11:17 2024 by rpki-client on console-ams.rpki-client.org