Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/b_D16kReGm_BCAFcnaQ7Cou3xe0.roa
File: b_D16kReGm_BCAFcnaQ7Cou3xe0.roa (raw, json)
Hash identifier: O+Nn4dIyYB8h3QIWTX7YCcHWVFrXDMpB7mt38i8SdeM=
Subject key identifier: 6F:F0:F5:EA:44:5E:1A:6F:C1:08:01:5C:9D:A4:3B:0A:8B:B7:C5:ED
Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial: 018CC8017BE5FD63A5789ED183F73777BE13
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/b_D16kReGm_BCAFcnaQ7Cou3xe0.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15935
IP address blocks: 217.66.188.0/23 maxlen: 23
217.66.191.0/24 maxlen: 24
217.66.190.0/24 maxlen: 24
213.195.192.0/18 maxlen: 18
217.66.160.0/19 maxlen: 19
217.66.160.0/24 maxlen: 24
217.66.166.0/24 maxlen: 24
217.66.179.0/24 maxlen: 24
217.66.178.0/24 maxlen: 24
81.30.246.0/23 maxlen: 23
95.173.68.0/23 maxlen: 23
109.238.32.0/20 maxlen: 20
93.185.48.0/20 maxlen: 20
81.30.224.0/19 maxlen: 19
81.30.229.0/24 maxlen: 24
95.173.64.0/23 maxlen: 23
95.173.64.0/19 maxlen: 19
2a02:570::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7b:e5:fd:63:a5:78:9e:d1:83:f7:37:77:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ff0f5ea445e1a6fc108015c9da43b0a8bb7c5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:dd:5d:97:48:57:8e:fc:e3:f8:37:95:08:
38:3a:22:18:d9:22:cb:d1:16:35:a9:ff:2b:88:90:
f1:bb:7a:7c:2b:46:81:92:8a:29:0e:ed:6c:c8:b6:
4a:1f:15:65:96:2f:74:07:1c:cf:fa:89:d0:19:76:
e7:ac:02:b4:92:78:27:7a:27:00:f1:4e:3f:72:f0:
00:d7:02:a4:0b:ed:b3:57:0a:c1:0b:5b:0b:ce:7a:
90:6a:de:2c:2c:71:5e:24:df:58:97:09:61:9e:b6:
e5:a9:7e:bf:58:cd:a6:8f:a3:62:ec:50:fc:55:b4:
a3:ec:0f:ea:12:ce:dc:fc:24:10:93:f9:9a:7a:1f:
b0:43:b3:7f:a0:8b:01:b8:7e:77:71:79:42:b8:47:
fe:e3:2c:e9:06:5c:38:af:a2:5a:99:7b:fa:3a:53:
bc:5e:da:4a:75:95:81:5a:8a:66:44:1c:f5:2b:a4:
a2:09:97:19:df:cf:92:f3:16:ae:53:72:6e:22:20:
f1:0d:02:0c:3f:46:16:32:a2:13:96:eb:8b:49:e8:
7e:9a:75:48:14:85:22:1d:b8:e2:d2:41:c4:04:c2:
2f:ae:d4:ce:96:69:a8:4e:5c:42:e0:87:44:ed:9b:
8a:e6:f3:e0:2f:28:54:c9:50:49:55:2d:65:03:98:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:F5:EA:44:5E:1A:6F:C1:08:01:5C:9D:A4:3B:0A:8B:B7:C5:ED
X509v3 Authority Key Identifier:
keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/b_D16kReGm_BCAFcnaQ7Cou3xe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.224.0/19
93.185.48.0/20
95.173.64.0/19
109.238.32.0/20
213.195.192.0/18
217.66.160.0/19
IPv6:
2a02:570::/32
Signature Algorithm: sha256WithRSAEncryption
b5:70:6a:5c:00:d3:24:fd:20:53:9c:28:b0:86:01:fc:47:db:
58:a5:eb:52:cb:cf:d8:0c:05:81:4c:77:05:d5:39:a3:0e:50:
c8:f1:ea:6c:0f:ed:53:d3:de:51:38:35:60:d7:b3:ff:b8:8e:
35:22:75:6c:30:63:f3:8d:af:da:ca:a6:71:32:c8:85:5b:c1:
f8:cb:fd:fb:23:fb:e6:ec:f7:ad:ec:37:c9:b1:df:18:7a:cb:
2d:1d:ca:67:ff:51:20:bc:2c:41:05:f1:01:02:a6:93:94:80:
2c:69:81:7c:d3:8a:c7:28:5a:47:60:69:c8:5c:ad:6f:fc:aa:
9c:16:2a:f6:b5:d0:d4:5e:25:ba:7f:7e:38:4c:09:18:88:2e:
fc:86:04:93:ac:39:40:78:b1:e1:6f:06:b1:62:9d:5c:f7:56:
dd:04:fb:ef:88:09:0e:bc:0c:3a:06:ed:8f:33:69:af:c4:2e:
3d:e3:6a:be:86:38:ee:c2:58:ee:6e:fc:dd:e7:9e:5d:67:66:
44:6d:79:7d:9d:33:07:30:73:43:89:d2:d6:13:87:0a:68:d9:
a0:78:0c:09:d1:36:a8:c7:07:89:38:33:29:4c:b5:69:09:57:
0a:17:50:7d:33:5c:97:d5:54:6f:a9:60:af:fe:f6:39:96:3f:
53:58:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:59:23 2024 by rpki-client on console-fra.rpki-client.org