Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/vrbQCqqDYrVd6-mowc1kSHtO7CQ.roa
File: vrbQCqqDYrVd6-mowc1kSHtO7CQ.roa (raw, json)
Hash identifier: WTAFn9EJAY2m5+8TaretNvMN7pCjcUsV3MQkjl/+tU4=
Subject key identifier: BE:B6:D0:0A:AA:83:62:B5:5D:EB:E9:A8:C1:CD:64:48:7B:4E:EC:24
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018D36CDA5199BA0B34967FFFFD7079F210D
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/vrbQCqqDYrVd6-mowc1kSHtO7CQ.roa
Signing time: Tue 23 Jan 2024 14:51:03 +0000
ROA not before: Tue 23 Jan 2024 14:51:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43519
IP address blocks: 149.20.120.0/24 maxlen: 24
149.20.121.0/24 maxlen: 24
149.20.122.0/24 maxlen: 24
149.20.123.0/24 maxlen: 24
213.248.200.0/24 maxlen: 24
213.248.201.0/24 maxlen: 24
213.248.202.0/24 maxlen: 24
213.248.203.0/24 maxlen: 24
213.248.204.0/24 maxlen: 24
213.248.205.0/24 maxlen: 24
213.248.206.0/24 maxlen: 24
213.248.207.0/24 maxlen: 24
213.248.216.0/24 maxlen: 24
213.248.217.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.219.0/24 maxlen: 24
213.248.220.0/24 maxlen: 24
213.248.221.0/24 maxlen: 24
213.248.222.0/24 maxlen: 24
213.248.223.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
2a01:618:200::/48 maxlen: 48
2a01:618:2ff::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
2a01:618:405::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:407::/48 maxlen: 48
2a01:61e:1::/48 maxlen: 48
2a01:61e:2::/48 maxlen: 48
2a01:61e:3::/48 maxlen: 48
2a01:61e:4::/48 maxlen: 48
2a01:61e:5::/48 maxlen: 48
2a01:61e:6::/48 maxlen: 48
2a01:61e:fffc::/48 maxlen: 48
2a01:61e:fffd::/48 maxlen: 48
2a01:61e:fffe::/48 maxlen: 48
2a01:61e:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:cd:a5:19:9b:a0:b3:49:67:ff:ff:d7:07:9f:21:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Jan 23 14:51:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beb6d00aaa8362b55debe9a8c1cd64487b4eec24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:6e:a7:5b:ee:04:7d:c0:b8:1f:81:5b:dd:
c1:b9:3a:f9:f4:b0:50:4f:9b:4b:65:e7:8c:97:a9:
d0:64:24:06:12:5e:0f:69:c6:76:a4:51:63:28:de:
64:8e:59:09:ed:f8:87:53:69:6b:00:24:22:c5:cc:
4e:f7:a2:93:fa:c5:3f:d2:15:0c:e6:52:68:14:3d:
9e:d4:e0:1b:ae:11:2f:29:3d:09:6d:53:51:68:c7:
e3:01:52:ae:a8:b3:29:50:1b:ec:95:2a:61:38:4c:
fc:ab:5b:e8:33:3a:ad:fd:f4:d1:be:0a:4a:59:dd:
33:e8:25:8e:9b:01:53:e2:73:0e:85:69:0d:99:a5:
8f:38:44:4d:27:59:da:46:ae:a7:74:96:cd:f2:c2:
02:f3:16:b1:c5:af:f5:e6:9e:06:94:8a:9e:83:d1:
36:29:b3:8f:d4:f5:9d:92:eb:7d:89:11:df:0b:e8:
c4:e0:0f:0e:ac:9a:35:ee:ca:ed:86:4e:03:5e:8d:
7e:8b:db:09:14:fa:27:48:a2:73:03:ca:08:63:e0:
84:6f:71:86:49:ab:63:43:3b:01:e3:e3:ae:46:33:
7d:44:f2:89:c5:ad:10:67:8c:56:d1:fa:cf:20:e7:
ae:5b:68:a1:b0:fe:f8:95:08:d8:f5:ba:bb:00:79:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B6:D0:0A:AA:83:62:B5:5D:EB:E9:A8:C1:CD:64:48:7B:4E:EC:24
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/vrbQCqqDYrVd6-mowc1kSHtO7CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.20.120.0/22
213.248.200.0/21
213.248.216.0/21
213.248.254.0/24
IPv6:
2a01:618:200::/48
2a01:618:2ff::/48
2a01:618:400::/45
2a01:61e:1::-2a01:61e:6:ffff:ffff:ffff:ffff:ffff
2a01:61e:fffc::/46
Signature Algorithm: sha256WithRSAEncryption
57:60:ef:a3:ab:3d:75:ab:27:98:dd:5b:77:5d:87:3b:ca:88:
90:68:6d:5b:bb:25:2a:17:3c:a1:61:ea:1f:c0:e2:79:e7:24:
05:9f:dd:20:ae:89:db:b8:9d:c1:36:56:fb:1b:d0:60:bc:35:
ec:b2:ae:c9:c0:22:0a:7a:ae:23:af:52:bc:c0:d8:31:59:91:
89:0d:3e:4b:54:54:57:a4:f3:0e:3e:6f:8d:bd:03:e6:25:db:
48:28:6e:d9:99:5a:43:a1:e2:ed:24:a7:d2:c8:43:02:43:a2:
b8:d5:f7:3d:bb:ef:22:13:ae:44:0f:d5:72:e4:2e:e3:4d:38:
b7:b5:ba:2e:c9:a3:03:2b:5a:46:29:22:84:a2:6f:4a:86:4d:
8e:8b:5a:58:e5:97:97:b6:89:4c:3b:b1:fe:17:9c:9d:b9:53:
73:ce:1c:1d:d2:2c:56:a2:83:05:b8:f4:98:61:08:1e:5c:f4:
9c:6c:d9:b5:5b:2c:e8:da:f1:a5:9b:8b:59:68:dc:69:0a:7f:
5b:bd:0f:27:c4:25:e8:7e:3b:37:b9:a2:56:d7:01:20:91:a8:
3e:5f:bc:a6:e3:9e:a0:70:a6:ae:52:82:7f:e2:72:36:62:8d:
96:b0:a2:aa:cb:d8:42:89:ef:26:9c:8f:f4:88:b9:d4:2b:cf:
45:bb:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:46:31 2024 by rpki-client on console-ams.rpki-client.org