Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/_rgc_7vopaNQsF0WBrxkyMlYlOE.roa
File: _rgc_7vopaNQsF0WBrxkyMlYlOE.roa (raw, json)
Hash identifier: CuhhlEiUC9wp/KeGDao/UNJx5wmZ6Gh8+Vpknqqxveo=
Subject key identifier: FE:B8:1C:FF:BB:E8:A5:A3:50:B0:5D:16:06:BC:64:C8:C9:58:94:E1
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 018CC6B945710A4001CB09B0E62E5563C023
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/_rgc_7vopaNQsF0WBrxkyMlYlOE.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43066
IP address blocks: 93.184.130.0/24 maxlen: 24
93.184.131.0/24 maxlen: 24
93.184.128.0/20 maxlen: 20
93.184.128.0/24 maxlen: 24
93.184.129.0/24 maxlen: 24
93.184.132.0/23 maxlen: 23
93.184.132.0/24 maxlen: 24
93.184.137.0/24 maxlen: 24
93.184.138.0/24 maxlen: 24
93.184.135.0/24 maxlen: 24
93.184.136.0/24 maxlen: 24
93.184.134.0/24 maxlen: 24
93.184.139.0/24 maxlen: 24
93.184.133.0/24 maxlen: 24
93.184.142.0/24 maxlen: 24
93.184.143.0/24 maxlen: 24
93.184.141.0/24 maxlen: 24
93.184.140.0/24 maxlen: 24
2a05:d880::/48 maxlen: 48
2a05:d880::/30 maxlen: 30
2a05:d880:4::/48 maxlen: 48
2a05:d880:2::/48 maxlen: 48
2a05:d880:3::/48 maxlen: 48
2a05:d880:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:45:71:0a:40:01:cb:09:b0:e6:2e:55:63:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feb81cffbbe8a5a350b05d1606bc64c8c95894e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:f6:bd:e1:ad:ba:b6:11:7f:2b:10:9b:45:
ae:de:c4:9f:f5:fd:5b:fa:a7:3a:3c:56:87:49:2d:
4e:15:dc:50:53:ff:8a:72:a0:05:62:cb:ff:32:d1:
86:1e:cd:fe:26:80:0d:dc:53:ab:ea:da:a9:02:a2:
eb:7c:7d:50:c8:8b:15:15:8b:7f:29:8a:ac:d5:8d:
65:27:20:e3:28:bc:44:f2:91:b1:fa:71:16:e3:30:
3d:85:2a:76:cf:db:0b:5a:40:ff:6e:b0:97:79:e7:
20:64:00:17:60:bd:8b:9b:3c:ea:2f:dd:c0:fd:40:
50:94:3c:4b:7b:a6:d2:89:ee:48:df:45:56:89:e3:
13:cb:55:99:35:bc:c6:b4:b1:59:f1:29:83:f7:c5:
e8:27:9b:ae:8d:7f:5e:2c:8c:9a:72:f1:a4:4d:c9:
27:3f:fa:fe:41:3c:c8:16:50:5f:bd:d8:d9:f5:75:
3d:1f:3c:a4:14:00:a0:7d:fd:81:e5:12:93:2d:fd:
24:5e:76:e0:ba:b8:e1:43:39:23:d4:60:b8:7a:f1:
21:3d:a4:73:08:44:b3:b4:d1:66:f5:62:de:f1:73:
c6:da:c1:92:ea:c8:da:5e:57:fa:a7:e9:74:4a:7e:
e9:d1:88:e1:7c:50:4b:61:34:c5:db:c9:01:2b:2a:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B8:1C:FF:BB:E8:A5:A3:50:B0:5D:16:06:BC:64:C8:C9:58:94:E1
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/_rgc_7vopaNQsF0WBrxkyMlYlOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.128.0/20
IPv6:
2a05:d880::/30
Signature Algorithm: sha256WithRSAEncryption
15:b4:a4:ce:99:f4:f7:a2:e3:a4:9e:53:38:04:6b:38:9f:0f:
8b:bd:4d:f5:5c:6b:09:81:ea:af:10:1a:4a:7b:83:64:0d:f1:
74:c4:4c:cb:0e:25:33:e2:7c:c5:1b:d1:04:d6:00:6c:42:65:
8f:ca:b3:7f:10:fa:54:ef:12:47:b1:a7:e6:87:78:49:c6:ea:
82:bd:4c:e9:77:53:ab:b2:e6:53:85:89:35:d2:80:c6:66:e9:
16:43:00:36:f7:72:1f:94:ac:09:c7:b5:15:07:2b:b0:cd:46:
15:ea:d0:c3:0d:27:93:e0:95:f5:de:7f:2d:d8:c0:38:b0:59:
bc:89:84:96:30:b6:01:53:57:31:3b:7a:f3:71:4e:54:ec:c8:
ff:7f:e4:4d:b8:a3:f6:ac:99:70:4b:a5:fd:11:42:fb:2a:cf:
4c:ff:95:59:7c:ef:66:eb:68:ce:0a:a5:e3:ef:6b:da:96:68:
4b:b7:7b:ec:16:c5:ae:6d:80:be:87:9b:c0:c9:d3:f0:01:f7:
6f:cb:d6:7c:56:57:51:e6:5e:be:27:0c:b3:b0:bc:e2:6a:75:
92:a5:84:0b:68:e0:ed:11:69:71:6b:38:cd:bd:54:3b:5f:de:
fc:ae:b4:93:ee:7c:bd:28:c6:d0:0c:41:c6:dd:24:7a:29:1a:
2c:ef:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:18:54 2024 by rpki-client on console-fra.rpki-client.org