Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Zj82kWNz4fk_k8EkLATaV0od58I.roa
File: Zj82kWNz4fk_k8EkLATaV0od58I.roa (raw, json)
Hash identifier: I8BOa0dCUhlsYddLbV0i9SV0MibtFjlKKVH1zxuVw1o=
Subject key identifier: 66:3F:36:91:63:73:E1:F9:3F:93:C1:24:2C:04:DA:57:4A:1D:E7:C2
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 018CC7276583A7F5C3C9EC82FC0A040A5788
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Zj82kWNz4fk_k8EkLATaV0od58I.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208058
IP address blocks: 212.48.98.0/24 maxlen: 24
212.48.99.0/24 maxlen: 24
212.53.174.0/24 maxlen: 24
212.53.195.0/24 maxlen: 24
212.53.196.0/24 maxlen: 24
212.53.194.0/24 maxlen: 24
212.53.204.0/24 maxlen: 24
212.48.106.0/24 maxlen: 24
212.53.139.0/24 maxlen: 24
212.53.143.0/24 maxlen: 24
212.53.141.0/24 maxlen: 24
212.53.152.0/24 maxlen: 24
212.53.146.0/24 maxlen: 24
212.53.154.0/24 maxlen: 24
212.53.164.0/24 maxlen: 24
212.53.162.0/24 maxlen: 24
212.53.163.0/24 maxlen: 24
212.53.161.0/24 maxlen: 24
212.53.172.0/24 maxlen: 24
212.72.172.0/24 maxlen: 24
212.72.174.0/24 maxlen: 24
212.72.179.0/24 maxlen: 24
212.72.190.0/24 maxlen: 24
212.72.191.0/24 maxlen: 24
2a00:1f78:f001::/48 maxlen: 48
2a00:1f78:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:65:83:a7:f5:c3:c9:ec:82:fc:0a:04:0a:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663f36916373e1f93f93c1242c04da574a1de7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:18:86:44:ca:1d:a8:8d:c6:3f:01:5a:54:
23:f6:89:e5:b9:14:e6:69:3c:37:a2:ca:4b:30:6c:
38:5a:05:78:57:ab:4b:8d:0c:2b:fa:7f:85:fc:03:
32:3c:4e:39:d7:98:af:5a:47:fa:4a:07:e6:d4:23:
81:16:20:2e:68:91:54:5d:fb:64:18:a8:75:a0:e7:
3c:26:fe:eb:8e:a8:d0:21:3e:ee:48:87:ad:0b:ed:
e9:de:cd:5f:05:95:70:b7:91:a0:6a:a6:5e:72:3a:
d2:a8:1c:ed:62:87:ac:0e:df:d5:7a:61:7b:d6:9e:
e3:77:a4:50:1e:7a:ed:43:5c:25:7c:9f:86:4b:49:
ad:fa:c1:f7:f5:8d:6b:d9:32:36:82:4b:21:97:83:
6d:13:a5:5a:7a:6e:a3:50:a2:8d:8f:ee:c7:32:22:
fa:9e:84:18:6c:3b:b8:21:6e:70:c8:88:95:ff:ba:
30:d2:38:20:45:ea:c6:42:56:cc:7e:00:ab:0f:c4:
38:a6:89:a9:68:e6:b6:9e:ab:aa:52:77:32:b1:93:
8e:83:15:38:0a:dd:99:b4:d6:2e:cb:e4:f6:29:8a:
cc:17:39:27:a0:f6:71:0c:08:74:c1:11:cf:b6:ba:
37:27:ff:11:d1:cc:e7:dd:70:86:43:95:3a:bc:00:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3F:36:91:63:73:E1:F9:3F:93:C1:24:2C:04:DA:57:4A:1D:E7:C2
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Zj82kWNz4fk_k8EkLATaV0od58I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.98.0/23
212.48.106.0/24
212.53.139.0/24
212.53.141.0/24
212.53.143.0/24
212.53.146.0/24
212.53.152.0/24
212.53.154.0/24
212.53.161.0-212.53.164.255
212.53.172.0/24
212.53.174.0/24
212.53.194.0-212.53.196.255
212.53.204.0/24
212.72.172.0/24
212.72.174.0/24
212.72.179.0/24
212.72.190.0/23
IPv6:
2a00:1f78:f001::/48
2a00:1f78:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d4:b3:86:47:ad:75:8d:0e:d0:5a:8e:58:40:1e:71:e0:a0:
00:c7:d1:88:88:f9:64:ba:00:ed:76:c1:7f:ae:10:b9:80:ab:
22:bd:d8:3e:ea:ff:d4:4e:0d:83:74:e7:29:cc:ae:f9:6b:97:
87:4f:ce:85:c7:e6:94:97:85:6a:a8:82:2c:d9:b4:99:c9:ff:
8b:13:e9:b0:02:5a:8d:3b:43:64:13:86:27:a3:f0:82:56:bb:
b5:79:2a:cd:3d:62:23:01:7d:41:f6:55:ed:63:a6:ee:4c:ec:
9b:61:0e:dc:6b:8d:91:16:0b:eb:26:aa:6e:8b:9e:fc:99:17:
bd:3a:20:48:fc:a6:cb:e3:a0:25:a1:6c:64:6d:60:7a:ea:7f:
b2:9d:32:d8:bc:2e:4e:e6:60:af:11:7e:29:52:47:78:1c:3a:
6e:46:da:2a:17:f9:52:e1:d3:ba:e5:a7:f0:b2:f7:59:80:4b:
dd:21:44:ad:94:f8:c1:7c:91:36:c6:73:e9:ae:69:08:47:c5:
bd:16:8b:2b:05:0c:9d:e7:25:6b:d6:07:29:a1:76:39:2b:91:
ee:b9:90:2c:54:20:11:f0:4b:af:87:b0:3d:13:3c:b7:b5:e4:
a5:5d:6f:56:59:d5:07:cf:e5:80:54:62:49:21:20:5f:fb:aa:
ec:6a:ec:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:15:35 2024 by rpki-client on console-fra.rpki-client.org