Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/H2zF0ffKDxLdGqFdSqXFX9aGKBc.roa
File: H2zF0ffKDxLdGqFdSqXFX9aGKBc.roa (raw, json)
Hash identifier: S1WscWiPmUAKzIehQtfc9C4/zC2aCmlsWze0RUShMBE=
Subject key identifier: 1F:6C:C5:D1:F7:CA:0F:12:DD:1A:A1:5D:4A:A5:C5:5F:D6:86:28:17
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018CC3B67AEB21AE480F9BAD25EFD2AF0D48
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/H2zF0ffKDxLdGqFdSqXFX9aGKBc.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213388
IP address blocks: 2a05:4144:1600::/40 maxlen: 40
2a05:4144:300::/40 maxlen: 40
2a05:4144:4d00::/40 maxlen: 40
2a05:4144:2800::/40 maxlen: 40
2a05:4144:1700::/40 maxlen: 40
2a05:4144:3c00::/40 maxlen: 40
2a05:4144:3900::/40 maxlen: 40
2a05:4144:1400::/40 maxlen: 40
2a05:4144:600::/40 maxlen: 40
2a05:4144:1a00::/40 maxlen: 40
2a05:4144:900::/40 maxlen: 40
2a05:4144:2b00::/40 maxlen: 40
2a05:4144:5000::/40 maxlen: 40
2a05:4144:2e00::/40 maxlen: 40
2a05:4144:5600::/40 maxlen: 40
2a05:4144:2000::/40 maxlen: 40
2a05:4144:3100::/40 maxlen: 40
2a05:4144:c00::/40 maxlen: 40
2a05:4144:4500::/40 maxlen: 40
2a05:4144:5900::/40 maxlen: 40
2a05:4144:3400::/40 maxlen: 40
2a05:4144:4200::/40 maxlen: 40
2a05:4144:5300::/40 maxlen: 40
2a05:4144:1d00::/40 maxlen: 40
2a05:4144:400::/40 maxlen: 40
2a05:4144:1500::/40 maxlen: 40
2a05:4144:3a00::/40 maxlen: 40
2a05:4144:2900::/40 maxlen: 40
2a05:4144:4e00::/40 maxlen: 40
2a05:4144:4b00::/40 maxlen: 40
2a05:4144:2600::/40 maxlen: 40
2a05:4144:5c00::/40 maxlen: 40
2a05:4144:100::/40 maxlen: 40
2a05:4144:2300::/40 maxlen: 40
2a05:4144:1200::/40 maxlen: 40
2a05:4144:4800::/40 maxlen: 40
2a05:4144:3700::/40 maxlen: 40
2a05:4144:4900::/40 maxlen: 40
2a05:4144:4c00::/40 maxlen: 40
2a05:4144:2700::/40 maxlen: 40
2a05:4144:200::/40 maxlen: 40
2a05:4144:3800::/40 maxlen: 40
2a05:4144:1300::/40 maxlen: 40
2a05:4144:2400::/40 maxlen: 40
2a05:4144:3500::/40 maxlen: 40
2a05:4144:5a00::/40 maxlen: 40
2a05:4144:5700::/40 maxlen: 40
2a05:4144:d00::/40 maxlen: 40
2a05:4144:3200::/40 maxlen: 40
2a05:4144:2100::/40 maxlen: 40
2a05:4144:4600::/40 maxlen: 40
2a05:4144:4300::/40 maxlen: 40
2a05:4144:5400::/40 maxlen: 40
2a05:4144:1e00::/40 maxlen: 40
2a05:4144:a00::/40 maxlen: 40
2a05:4144:1000::/40 maxlen: 40
2a05:4144:1800::/40 maxlen: 40
2a05:4144:2200::/40 maxlen: 40
2a05:4144:2500::/40 maxlen: 40
2a05:4144::/40 maxlen: 40
2a05:4144:5b00::/40 maxlen: 40
2a05:4144:1100::/40 maxlen: 40
2a05:4144:4700::/40 maxlen: 40
2a05:4144:3600::/40 maxlen: 40
2a05:4144:5500::/40 maxlen: 40
2a05:4144:4400::/40 maxlen: 40
2a05:4144:e00::/40 maxlen: 40
2a05:4144:3300::/40 maxlen: 40
2a05:4144:5800::/40 maxlen: 40
2a05:4144:4100::/40 maxlen: 40
2a05:4144:b00::/40 maxlen: 40
2a05:4144:1c00::/40 maxlen: 40
2a05:4144:800::/40 maxlen: 40
2a05:4144:3e00::/40 maxlen: 40
2a05:4144:2d00::/40 maxlen: 40
2a05:4144:5200::/40 maxlen: 40
2a05:4144:3000::/40 maxlen: 40
2a05:4144:2c00::/40 maxlen: 40
2a05:4144:1b00::/40 maxlen: 40
2a05:4144:5100::/40 maxlen: 40
2a05:4144:700::/40 maxlen: 40
2a05:4144:3d00::/40 maxlen: 40
2a05:4144:4000::/40 maxlen: 40
2a05:4144:4a00::/40 maxlen: 40
2a05:4144:500::/40 maxlen: 40
2a05:4144:2a00::/40 maxlen: 40
2a05:4144:3b00::/40 maxlen: 40
2a05:4144:1900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7a:eb:21:ae:48:0f:9b:ad:25:ef:d2:af:0d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f6cc5d1f7ca0f12dd1aa15d4aa5c55fd6862817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:94:6b:5c:a2:98:5e:92:9a:b6:b5:79:d4:
c4:e9:aa:4d:ea:00:44:14:bb:7d:2c:c8:6c:32:0a:
a3:1f:bb:0b:fb:93:b9:68:31:91:77:a9:32:f9:41:
b6:dc:69:6e:d5:06:62:86:00:24:39:aa:54:bb:e3:
03:fa:b9:2c:cb:48:7c:81:17:4c:ff:43:ef:dd:51:
68:4c:9c:de:22:5e:ef:50:0c:1e:28:50:80:8d:51:
42:8f:07:39:08:85:28:72:79:ca:79:26:14:8f:ca:
24:3a:48:12:83:7d:3b:be:a4:49:7d:3e:88:22:82:
f3:31:7a:f3:e0:c1:fb:d1:0d:d0:d1:86:c0:b7:75:
b7:4a:e8:1e:f0:e1:41:45:08:0f:a7:ef:2d:e9:2d:
17:3e:28:88:df:26:fa:3a:60:95:dd:04:31:c7:dc:
e4:33:ed:61:43:59:b2:8f:7d:67:20:97:3a:f5:3c:
db:6c:14:c8:a4:f7:fb:b2:a1:86:c8:9a:1f:bb:80:
19:46:3e:41:aa:4b:28:e5:46:65:b7:6c:0b:7e:d3:
d1:de:47:af:6c:62:69:4d:2e:b5:aa:a5:37:fe:48:
c1:a0:b1:bc:73:10:08:f9:df:3b:1c:2e:51:d4:29:
0c:a5:82:06:55:69:16:a8:7e:26:70:72:23:a1:3b:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:C5:D1:F7:CA:0F:12:DD:1A:A1:5D:4A:A5:C5:5F:D6:86:28:17
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/H2zF0ffKDxLdGqFdSqXFX9aGKBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4144::-2a05:4144:eff:ffff:ffff:ffff:ffff:ffff
2a05:4144:1000::-2a05:4144:1eff:ffff:ffff:ffff:ffff:ffff
2a05:4144:2000::-2a05:4144:2eff:ffff:ffff:ffff:ffff:ffff
2a05:4144:3000::-2a05:4144:3eff:ffff:ffff:ffff:ffff:ffff
2a05:4144:4000::-2a05:4144:4eff:ffff:ffff:ffff:ffff:ffff
2a05:4144:5000::-2a05:4144:5cff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:2a:45:44:31:28:a1:90:67:d9:80:9d:1f:c0:b3:11:be:33:
12:37:b9:44:c1:d5:9c:7e:97:a6:d5:73:67:ab:cd:01:08:82:
c8:39:63:26:b1:cf:28:3e:4a:fb:3a:3a:00:83:7e:03:ad:92:
ee:d0:95:b3:a9:49:5d:85:49:4c:a5:44:d9:2b:c1:ec:fd:77:
75:58:c1:a9:5f:98:c2:89:49:fd:77:e7:01:19:31:93:a0:9c:
8b:31:ba:c1:3c:c9:92:b1:21:b7:bf:7c:ca:15:aa:1e:db:5c:
62:3a:be:05:42:d4:01:cc:bf:1c:ef:f5:e9:a3:6d:87:92:97:
bc:74:1a:99:6f:63:4e:8c:77:62:a6:48:c4:9e:9b:66:29:1d:
38:75:27:89:6c:c1:ca:5b:bd:fc:3f:dc:28:07:85:de:49:57:
ab:02:b6:80:8f:a4:8e:d7:12:5b:9a:c0:5c:b4:72:6e:20:7f:
9f:ee:7e:1a:18:f9:9a:9f:c7:39:f1:8c:b4:cb:67:5f:b4:d0:
8c:5a:7b:2b:1c:4b:16:28:d1:76:a1:ed:1b:ce:3a:b2:88:6b:
86:95:72:d4:c7:d9:f4:f8:cb:88:1e:06:b2:c7:87:b2:54:3a:
e9:a2:c2:5b:e3:0b:64:a2:88:76:64:be:2a:26:c0:05:b5:2d:
4b:fd:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:20 2024 by rpki-client on console-fra.rpki-client.org