Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1d6n_FM3UCtuaUTWIxlOm4pTXT0.roa
File: 1d6n_FM3UCtuaUTWIxlOm4pTXT0.roa (raw, json)
Hash identifier: 9k9QlSGvoZerMN4yMn1MFfZRX1VBW6LDPA742sO5UmQ=
Subject key identifier: D5:DE:A7:FC:53:37:50:2B:6E:69:44:D6:23:19:4E:9B:8A:53:5D:3D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01900634AFDE37EA8DC347654CF86D870B68
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1d6n_FM3UCtuaUTWIxlOm4pTXT0.roa
Signing time: Tue 11 Jun 2024 07:30:34 +0000
ROA not before: Tue 11 Jun 2024 07:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24877
IP address blocks: 84.55.24.0/21 maxlen: 21
84.55.38.0/23 maxlen: 23
84.55.40.0/21 maxlen: 21
84.55.40.0/22 maxlen: 22
84.55.44.0/23 maxlen: 23
84.55.46.0/23 maxlen: 23
88.222.0.0/17 maxlen: 17
88.222.128.0/18 maxlen: 18
88.222.192.0/20 maxlen: 20
88.222.216.0/24 maxlen: 24
88.222.224.0/20 maxlen: 20
88.222.248.0/22 maxlen: 22
88.223.64.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.223.72.0/21 maxlen: 21
88.223.100.0/22 maxlen: 22
88.223.132.0/22 maxlen: 22
88.223.136.0/23 maxlen: 23
88.223.136.0/24 maxlen: 24
88.223.139.0/24 maxlen: 24
88.223.140.0/22 maxlen: 22
88.223.156.0/22 maxlen: 22
213.164.112.0/22 maxlen: 22
217.147.32.0/23 maxlen: 23
217.147.32.0/24 maxlen: 24
217.147.33.0/24 maxlen: 24
217.147.39.0/24 maxlen: 24
217.147.42.0/23 maxlen: 23
2a01:7c80:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:34:af:de:37:ea:8d:c3:47:65:4c:f8:6d:87:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 11 07:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5dea7fc5337502b6e6944d623194e9b8a535d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:80:eb:2d:30:2a:87:b0:38:28:9d:e4:9d:
52:aa:b2:fe:82:fb:7c:f6:4d:a5:8a:1a:94:4a:c6:
84:f3:c2:87:0f:f8:41:e8:02:ee:71:d1:ff:0e:57:
52:d7:26:3d:9f:cf:bc:2d:50:a2:83:10:0d:f6:e3:
88:66:80:fa:95:37:7d:de:f6:4e:d7:11:39:18:41:
21:c0:5c:9e:54:0d:b9:05:b9:87:75:d3:9b:d0:46:
a3:be:08:01:66:72:e7:bc:f1:91:82:dc:bd:dc:08:
85:97:59:50:f0:d6:3a:da:8e:99:e7:ce:41:64:44:
dc:f2:39:e0:35:b7:bc:86:7c:ec:0a:9f:40:62:ce:
b4:02:bf:38:c1:33:86:b7:36:e8:a6:68:88:e4:e5:
e6:42:74:62:da:9c:42:51:bd:b4:b0:af:ef:6b:91:
89:ae:56:c9:e8:00:7a:b0:f2:0a:57:19:66:7a:06:
a1:a1:1d:f3:64:77:c4:6e:a6:2a:98:4a:74:4d:25:
4d:8b:4b:67:1a:04:bf:92:ae:cf:e7:97:ae:04:46:
1b:d3:65:6e:c2:8a:ce:75:d2:37:24:ab:3e:26:38:
7d:ab:b9:ee:b3:3c:74:50:a7:e0:13:03:4a:1c:38:
2b:eb:5b:97:19:e2:86:e5:33:5a:8b:03:8a:37:6c:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:A7:FC:53:37:50:2B:6E:69:44:D6:23:19:4E:9B:8A:53:5D:3D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1d6n_FM3UCtuaUTWIxlOm4pTXT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.24.0/21
84.55.38.0-84.55.47.255
88.222.0.0-88.222.207.255
88.222.216.0/24
88.222.224.0/20
88.222.248.0/22
88.223.64.0/20
88.223.100.0/22
88.223.132.0-88.223.137.255
88.223.139.0-88.223.143.255
88.223.156.0/22
213.164.112.0/22
217.147.32.0/23
217.147.39.0/24
217.147.42.0/23
IPv6:
2a01:7c80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
68:7d:a0:a8:d6:15:59:af:cb:70:0d:cb:bd:7f:1e:20:be:51:
1d:04:8a:e7:b6:50:5c:4f:52:7d:0f:a0:64:8f:56:15:52:df:
84:e1:6b:83:1e:a5:68:60:5f:d4:e9:a6:de:5c:ec:f9:4f:d2:
8a:be:8a:4d:6e:7e:8b:2e:af:c1:cd:0b:e2:4c:8d:4c:51:55:
0c:0f:90:0a:f7:2e:33:c1:90:cf:32:63:50:0e:c3:69:b3:b7:
52:97:13:4e:db:cd:46:d0:35:46:e2:2a:80:79:de:f1:30:05:
5f:b9:58:ce:d6:76:11:af:48:72:e0:19:9f:0d:9b:c5:f8:0f:
36:4f:1c:8b:2d:85:fe:86:ab:3b:fb:25:25:c9:47:32:d9:bd:
07:87:b7:50:94:9e:5d:c0:e3:64:59:6a:58:24:29:be:89:fe:
07:eb:d1:ff:4a:5c:b7:68:84:1a:84:70:60:66:a4:9f:15:47:
73:cf:8c:6c:fd:92:3a:e8:38:fd:8e:6c:8d:bc:98:ce:b6:7b:
33:96:3d:4b:fa:51:e2:9b:53:77:4e:ea:61:53:d8:9c:23:1b:
e4:c2:7b:cb:e5:bc:33:8d:df:01:92:a1:f8:c7:74:8b:71:ce:
2e:98:95:06:80:e3:01:4b:b3:6d:79:dc:2b:51:23:e3:1c:d7:
31:9b:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:48 2024 by rpki-client on console-fra.rpki-client.org