Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/BSF6u3WBy0uR6LKEcZrdKamRWcU.roa
File: BSF6u3WBy0uR6LKEcZrdKamRWcU.roa (raw, json)
Hash identifier: JvJuQy0fOONYxYcIqW+RFw5TQYrsMHKiJrQcxT3i3U0=
Subject key identifier: 05:21:7A:BB:75:81:CB:4B:91:E8:B2:84:71:9A:DD:29:A9:91:59:C5
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 018E614B259907A9634CC1C6B8E310210007
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/BSF6u3WBy0uR6LKEcZrdKamRWcU.roa
Signing time: Thu 21 Mar 2024 13:54:58 +0000
ROA not before: Thu 21 Mar 2024 13:54:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25447
IP address blocks: 62.93.64.0/19 maxlen: 19
62.93.68.0/24 maxlen: 24
62.93.73.0/24 maxlen: 24
62.93.74.0/24 maxlen: 24
62.93.76.0/24 maxlen: 24
62.93.88.0/24 maxlen: 24
62.93.96.0/20 maxlen: 20
62.93.96.0/21 maxlen: 21
62.93.104.0/21 maxlen: 21
62.93.112.0/22 maxlen: 22
62.93.120.0/21 maxlen: 21
82.192.0.0/19 maxlen: 19
82.192.0.0/23 maxlen: 23
82.192.5.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
82.192.18.0/24 maxlen: 24
85.13.0.0/18 maxlen: 18
85.13.2.0/24 maxlen: 24
85.13.8.0/24 maxlen: 24
85.13.14.0/24 maxlen: 24
85.13.16.0/24 maxlen: 24
176.61.160.0/19 maxlen: 24
188.117.192.0/18 maxlen: 18
188.117.200.0/22 maxlen: 22
188.117.208.0/22 maxlen: 22
188.117.220.0/22 maxlen: 22
188.117.240.0/20 maxlen: 20
217.16.112.0/20 maxlen: 20
217.16.113.0/24 maxlen: 24
217.16.114.0/24 maxlen: 24
217.16.124.0/24 maxlen: 24
217.16.127.0/24 maxlen: 24
217.199.80.0/20 maxlen: 20
217.199.83.0/24 maxlen: 24
217.199.90.0/24 maxlen: 24
2a03:4e40::/29 maxlen: 29
2a03:4e40::/32 maxlen: 32
2a03:4e47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:4b:25:99:07:a9:63:4c:c1:c6:b8:e3:10:21:00:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Mar 21 13:54:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05217abb7581cb4b91e8b284719add29a99159c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:93:6e:f4:44:0d:61:a4:c4:6d:9a:74:1c:
72:60:3a:35:53:a1:2e:b1:81:25:19:39:a8:f7:64:
92:81:96:4e:12:48:dd:9f:51:f0:aa:f6:1b:04:34:
b5:21:9e:b3:d3:7c:d0:7a:b8:52:9e:d7:f4:0e:80:
10:b7:ed:19:23:8f:6a:2c:c2:01:6f:1f:66:38:fb:
3f:61:de:ad:12:98:93:c8:9b:ba:d1:f1:7e:f4:81:
04:a2:ca:3b:b9:0c:39:83:29:65:50:14:02:79:f1:
4d:0f:82:7a:8f:3d:33:60:3f:be:c5:31:8f:49:af:
b1:af:b7:a3:89:e0:0e:69:75:f6:2f:a9:21:d6:c3:
9f:1f:d4:16:80:cb:7b:41:43:6f:6a:a1:f9:d2:26:
ba:fa:18:14:69:7d:de:af:b3:21:46:dd:a1:ed:8c:
89:92:0e:5f:75:82:5d:26:7d:34:a4:02:8b:77:c7:
c7:1b:5b:32:17:27:55:40:10:29:e0:d9:7b:9d:bd:
e2:8f:97:c6:cb:a6:c5:5a:3a:dc:8b:bd:41:14:62:
bc:d1:a6:51:49:08:6e:a8:5b:60:92:f1:9f:da:44:
6b:08:13:7f:ae:b3:7a:25:6c:de:72:19:6e:05:0d:
1b:d1:ab:93:a1:e3:58:bf:2d:4c:fa:eb:4a:0d:17:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:7A:BB:75:81:CB:4B:91:E8:B2:84:71:9A:DD:29:A9:91:59:C5
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/BSF6u3WBy0uR6LKEcZrdKamRWcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.64.0-62.93.115.255
62.93.120.0/21
82.192.0.0/19
85.13.0.0/18
176.61.160.0/19
188.117.192.0/18
217.16.112.0/20
217.199.80.0/20
IPv6:
2a03:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
12:ea:78:0a:e7:5d:85:aa:c1:e0:a6:ae:ba:cd:cb:18:04:58:
5e:80:b2:09:f5:f7:7e:4b:7d:e8:49:8a:4c:fa:78:f4:0e:b0:
8b:53:05:72:91:85:66:65:42:7d:5e:c5:3c:29:5a:9d:1b:5a:
72:51:be:e0:66:71:c9:03:37:52:4f:48:5a:b4:c7:14:78:9d:
9f:33:20:41:50:cd:d1:43:fd:20:d5:c6:5c:03:30:b9:d0:29:
94:fe:28:5f:63:64:f5:bf:e6:72:52:c5:04:44:8b:92:6e:f2:
a2:56:0f:51:09:22:b5:7a:34:a7:1b:7f:55:82:4e:38:03:5a:
bd:95:8e:47:b4:b4:49:16:f4:30:40:b2:a5:ef:85:6e:0c:17:
01:bb:f3:c2:5a:86:f3:3d:ce:9f:5d:f9:4b:b6:2b:a1:07:87:
9c:70:bd:43:4e:61:da:29:7a:46:f7:8b:64:07:79:a7:df:60:
5f:ff:e6:43:3c:08:53:0e:62:1c:fa:e2:13:6d:5c:7d:06:1c:
d2:0a:d0:42:f3:aa:ba:d5:96:18:7e:7f:1d:95:dc:80:09:cd:
c1:15:25:7a:01:f1:68:53:59:8c:67:04:bd:8e:9e:21:83:d5:
3c:57:1c:f4:69:7e:d0:b9:4d:83:91:c7:57:77:b6:39:a3:4d:
da:21:e7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:31:42 2024 by rpki-client on console-fra.rpki-client.org