Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/ieZllm8WYTyh54YMhGzTuwRC6mw.roa
File: ieZllm8WYTyh54YMhGzTuwRC6mw.roa (raw, json)
Hash identifier: zxHYWFKInp0rEw/1eNTMKPCPq6ncoipGEcvFrBq8CJU=
Subject key identifier: 89:E6:65:96:6F:16:61:3C:A1:E7:86:0C:84:6C:D3:BB:04:42:EA:6C
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 018CC6B94232FF4E621B537BA5F62CED81D0
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/ieZllm8WYTyh54YMhGzTuwRC6mw.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201502
IP address blocks: 185.25.139.0/24 maxlen: 24
185.25.138.0/24 maxlen: 24
185.25.137.0/24 maxlen: 24
185.25.136.0/24 maxlen: 24
185.13.220.0/22 maxlen: 24
188.208.19.0/24 maxlen: 24
176.124.114.0/24 maxlen: 24
185.253.80.0/22 maxlen: 24
185.203.172.0/24 maxlen: 24
185.203.175.0/24 maxlen: 24
185.203.174.0/24 maxlen: 24
185.203.173.0/24 maxlen: 24
46.255.240.0/24 maxlen: 24
46.255.246.0/24 maxlen: 24
46.255.245.0/24 maxlen: 24
46.255.244.0/24 maxlen: 24
46.255.243.0/24 maxlen: 24
46.255.242.0/24 maxlen: 24
46.255.241.0/24 maxlen: 24
46.255.247.0/24 maxlen: 24
188.214.82.0/24 maxlen: 24
188.214.83.0/24 maxlen: 24
185.220.80.0/24 maxlen: 24
2a03:a6c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:42:32:ff:4e:62:1b:53:7b:a5:f6:2c:ed:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89e665966f16613ca1e7860c846cd3bb0442ea6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:0e:45:3d:38:12:fb:99:7b:ff:b3:e8:86:
9c:0f:0a:4b:87:28:f8:ee:77:bd:d8:af:de:c5:60:
0f:17:00:f5:02:d1:89:92:ec:6b:0a:79:a9:c5:ac:
bc:f8:dd:03:af:da:f7:07:d1:01:71:d0:4a:8a:ab:
0f:e6:4b:2b:62:a2:76:6f:e3:87:f0:f3:d3:fb:c3:
b5:d0:d1:6a:07:f2:b3:88:96:b1:94:69:80:26:db:
f5:1a:4f:b5:ae:3a:ce:08:e2:b8:85:c5:e1:72:ad:
9a:4f:67:3b:54:d8:0a:a6:0f:13:ab:03:1f:f7:89:
cf:6c:7d:bb:3a:60:b3:29:82:9f:9d:bb:bb:c6:1f:
f0:d3:2a:df:99:cc:be:89:1a:3f:92:d6:a6:e9:af:
3d:cf:5a:a2:75:4b:dc:e3:67:ae:d1:08:2f:32:c3:
7c:21:51:64:c7:ab:f1:c6:a0:42:5b:7a:13:78:97:
93:8e:7d:40:27:c4:b6:f8:8b:a3:a6:87:d4:2d:98:
af:ed:06:65:1b:82:32:7a:1a:46:50:9b:4b:74:93:
d9:c0:9c:5e:bc:16:b2:55:b2:f9:78:ff:b2:1f:62:
89:13:58:29:45:32:70:c0:01:0b:fb:8c:5e:47:e0:
3f:cc:cb:30:cd:70:cb:0d:e3:65:6f:71:82:a9:e3:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:65:96:6F:16:61:3C:A1:E7:86:0C:84:6C:D3:BB:04:42:EA:6C
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/ieZllm8WYTyh54YMhGzTuwRC6mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.240.0/21
176.124.114.0/24
185.13.220.0/22
185.25.136.0/22
185.203.172.0/22
185.220.80.0/24
185.253.80.0/22
188.208.19.0/24
188.214.82.0/23
IPv6:
2a03:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
48:19:f4:1e:e9:85:c2:d9:1a:49:67:64:45:29:04:36:d5:dd:
9c:95:e2:e5:a3:90:90:dd:ad:fb:21:0f:cd:fd:8d:c2:7b:02:
23:5e:7a:54:6c:e8:52:2e:00:93:8e:da:c4:4c:b8:53:70:0c:
65:d1:50:68:13:65:41:9f:6e:17:25:af:07:56:8e:ab:5a:6d:
5c:75:6b:83:50:d8:94:af:3c:03:74:26:d1:6f:f7:73:80:eb:
71:3b:06:44:7c:58:5b:dc:6d:9e:72:e0:01:2e:07:cf:40:f3:
ae:15:cc:1a:ba:16:d3:24:d1:e2:a9:63:72:1b:78:6e:80:75:
5f:3e:22:29:1f:ba:74:e7:95:23:72:41:50:c9:f3:e7:77:64:
5b:e8:fd:67:d0:2c:47:c0:05:f9:9c:39:42:42:c3:01:a6:be:
09:0c:36:9d:30:52:26:07:05:6b:94:03:e7:21:33:ee:a5:6e:
08:ef:ed:f7:09:8f:75:3e:05:90:cf:9f:90:93:a6:91:9a:ed:
fc:90:74:d3:d9:5a:d1:1f:fd:95:34:ac:07:de:62:65:7b:bb:
2c:14:6c:43:9c:09:52:0e:dd:03:a0:32:9d:80:51:d9:36:90:
ae:15:55:2b:d8:ed:00:27:d9:83:74:ab:45:9f:5f:66:e4:ab:
59:a6:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:57:43 2024 by rpki-client on console-ams.rpki-client.org