Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/AS-dO_s-LEVEagK6Tz2sVI4iVAs.roa
File: AS-dO_s-LEVEagK6Tz2sVI4iVAs.roa (raw, json)
Hash identifier: 4WpGlLubfLH/LCuMzX6b2yFjOt/1n/ALa364DMOdXV0=
Subject key identifier: 01:2F:9D:3B:FB:3E:2C:45:44:6A:02:BA:4F:3D:AC:54:8E:22:54:0B
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 018CC56EF4072E87892A366E870E48C54F71
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/AS-dO_s-LEVEagK6Tz2sVI4iVAs.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12564
IP address blocks: 212.122.187.0/24 maxlen: 24
212.122.188.0/24 maxlen: 24
212.122.189.0/24 maxlen: 24
212.122.190.0/24 maxlen: 24
212.122.191.0/24 maxlen: 24
212.122.162.0/24 maxlen: 24
212.122.160.0/19 maxlen: 19
212.122.160.0/24 maxlen: 24
185.181.148.0/24 maxlen: 24
185.181.148.0/22 maxlen: 22
212.122.161.0/24 maxlen: 24
185.181.149.0/24 maxlen: 24
212.122.163.0/24 maxlen: 24
185.181.150.0/24 maxlen: 24
185.181.151.0/24 maxlen: 24
212.122.167.0/24 maxlen: 24
212.122.168.0/24 maxlen: 24
212.122.169.0/24 maxlen: 24
212.122.170.0/24 maxlen: 24
212.122.171.0/24 maxlen: 24
212.122.172.0/24 maxlen: 24
212.122.173.0/24 maxlen: 24
212.122.174.0/24 maxlen: 24
212.122.175.0/24 maxlen: 24
212.122.176.0/24 maxlen: 24
212.122.177.0/24 maxlen: 24
212.122.178.0/24 maxlen: 24
212.122.179.0/24 maxlen: 24
212.122.180.0/24 maxlen: 24
212.122.181.0/24 maxlen: 24
212.122.182.0/24 maxlen: 24
212.122.183.0/24 maxlen: 24
212.122.184.0/24 maxlen: 24
212.122.185.0/24 maxlen: 24
212.122.186.0/24 maxlen: 24
2a04:43c0::/29 maxlen: 29
2a04:43c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f4:07:2e:87:89:2a:36:6e:87:0e:48:c5:4f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=012f9d3bfb3e2c45446a02ba4f3dac548e22540b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:80:bf:17:5f:f9:b7:89:f1:89:89:2a:ce:83:
a9:ee:fb:ae:98:c2:25:f3:81:e5:08:a9:b8:c0:80:
3c:12:3b:46:ba:56:9d:7c:ee:55:d4:6e:ea:03:6d:
5e:0a:1f:e9:9a:99:72:85:71:44:0d:b7:f8:2a:49:
5c:db:b7:58:51:eb:cd:8f:09:bb:ee:88:0c:95:b1:
3c:93:ff:1a:54:01:b4:fe:71:db:2a:0b:c4:e3:f4:
cf:69:a1:27:c8:07:e6:38:b2:d8:49:60:5e:df:86:
9c:ab:8c:22:da:dd:03:c5:09:0e:59:f8:63:25:45:
05:af:fc:53:38:d1:5f:6f:a0:0f:e1:87:ba:60:9f:
1a:4e:34:a6:24:4a:9b:1d:4f:e7:fb:e2:1e:84:fa:
f8:47:55:88:59:47:c5:e5:9a:b3:ff:97:f3:bf:be:
21:e2:27:7a:04:93:06:26:9c:c4:49:bd:5d:2f:8d:
a5:d7:5d:65:15:30:07:7a:2d:19:6d:7c:49:05:04:
9f:97:55:ea:ab:c4:65:b3:63:cc:5b:55:c8:a9:eb:
ff:49:6c:d8:6f:5a:e4:2b:b6:d0:f3:50:06:32:e5:
27:d8:24:94:4a:b7:4a:50:a7:36:4c:c8:49:9c:11:
29:7a:93:61:80:c8:31:05:90:8b:eb:eb:08:90:ba:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:9D:3B:FB:3E:2C:45:44:6A:02:BA:4F:3D:AC:54:8E:22:54:0B
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/AS-dO_s-LEVEagK6Tz2sVI4iVAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.148.0/22
212.122.160.0/19
IPv6:
2a04:43c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:44:c3:c6:6a:82:ff:b5:2a:af:b3:aa:ef:f6:91:eb:8e:ca:
e3:8f:85:4d:fc:26:93:c5:f8:1c:96:e0:1c:19:e4:f6:04:39:
87:02:86:5e:a7:b5:53:ca:5f:76:9f:ff:c4:91:1d:ca:d5:10:
e5:76:cd:d2:ee:4f:73:e6:c2:74:e5:92:a0:ff:0e:a1:b8:6c:
d1:21:f6:83:41:18:e5:bb:54:8a:54:20:36:bd:ae:88:18:a3:
c8:42:de:90:51:dd:55:ee:5d:23:91:6b:0e:61:5d:1b:a8:87:
10:96:10:19:a4:2f:c5:ff:a5:0b:b1:50:8e:dd:48:50:39:d9:
4d:5a:fb:a1:22:0f:aa:4b:62:58:6c:f9:4b:6f:2e:e9:ac:6a:
66:50:37:3c:83:02:6e:31:b0:a1:51:f0:ac:00:b9:b9:54:25:
ab:aa:3d:dd:96:ad:ea:78:61:a1:e9:95:2e:ea:c4:9d:88:fc:
7c:ed:2e:ea:9c:ff:2f:f3:61:55:63:e9:ad:a6:1f:fc:ac:7d:
90:48:6d:16:7f:69:9c:c6:f3:cd:c9:ea:7e:22:ee:ba:9f:ac:
eb:94:aa:9b:96:4d:18:de:a4:28:8c:b4:ff:aa:1d:ce:e1:43:
42:de:cf:2a:9c:e2:ce:d8:aa:42:1d:b8:24:76:a0:e5:71:a9:
dc:cf:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:22:28 2024 by rpki-client on console-ams.rpki-client.org