Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/bWRgQJoO4M-qjYeoLnrRFcNvr1Q.roa
File: bWRgQJoO4M-qjYeoLnrRFcNvr1Q.roa (raw, json)
Hash identifier: 8dxQ2ksZGHRv4WZFlwqpDZg+5PvZFf482R6eIJvP0AI=
Subject key identifier: 6D:64:60:40:9A:0E:E0:CF:AA:8D:87:A8:2E:7A:D1:15:C3:6F:AF:54
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 018D2F469758B74D5C669B26E8B489DABE15
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/bWRgQJoO4M-qjYeoLnrRFcNvr1Q.roa
Signing time: Mon 22 Jan 2024 03:46:11 +0000
ROA not before: Mon 22 Jan 2024 03:46:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202958
IP address blocks: 86.107.198.0/24 maxlen: 24
86.107.199.0/24 maxlen: 24
185.98.4.0/24 maxlen: 24
185.100.66.0/24 maxlen: 24
185.113.133.0/24 maxlen: 24
185.116.192.0/24 maxlen: 24
185.116.193.0/24 maxlen: 24
185.116.194.0/24 maxlen: 24
185.116.195.0/24 maxlen: 24
185.121.80.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
185.125.88.0/24 maxlen: 24
185.125.89.0/24 maxlen: 24
185.125.90.0/24 maxlen: 24
185.125.91.0/24 maxlen: 24
194.4.56.0/24 maxlen: 24
194.4.57.0/24 maxlen: 24
194.4.58.0/24 maxlen: 24
194.4.59.0/24 maxlen: 24
194.146.40.0/24 maxlen: 24
194.146.41.0/24 maxlen: 24
194.146.42.0/24 maxlen: 24
194.146.43.0/24 maxlen: 24
2a06:941::/48 maxlen: 48
2a06:941:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2f:46:97:58:b7:4d:5c:66:9b:26:e8:b4:89:da:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 22 03:46:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d6460409a0ee0cfaa8d87a82e7ad115c36faf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:0a:2b:23:fc:0d:90:c1:76:17:39:f7:84:
cf:61:12:c8:cd:12:c8:a5:79:93:be:bf:88:6f:ea:
c4:47:73:8c:6f:45:cd:e7:8c:38:2f:5d:d5:5e:b2:
c6:a9:fc:93:03:8e:e3:8a:44:92:37:db:fc:81:c8:
27:44:bf:1b:47:55:97:ac:e9:ad:a5:92:01:50:6f:
7f:82:47:33:f2:2c:1e:50:d7:8d:ff:7c:cc:47:a0:
22:fe:35:c6:9e:8e:58:4e:15:74:d6:a4:ee:dd:64:
49:a3:65:45:9c:a5:f5:71:84:26:22:a9:ba:0c:8d:
33:73:33:1e:8c:46:e1:10:f2:8d:1d:ec:70:73:13:
f0:4b:8e:8a:b0:92:1a:0b:60:77:19:5b:58:9a:51:
f7:88:1f:cc:22:9f:e6:61:0d:d5:64:23:0a:d5:39:
02:4a:56:1c:21:1e:87:c1:9a:ae:ed:05:54:74:6b:
86:12:3f:a8:5d:52:01:0e:22:75:80:6c:41:8d:34:
53:8d:64:b4:e7:4f:0e:4e:5f:35:16:44:65:10:05:
ea:b5:6c:0d:bc:f4:1e:2c:d0:13:ba:83:ae:81:9a:
34:a0:ed:ff:e8:fa:ae:7d:96:8a:0d:31:e9:96:8a:
99:1a:5d:4c:df:90:d9:6f:9e:3c:85:aa:f9:d7:61:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:64:60:40:9A:0E:E0:CF:AA:8D:87:A8:2E:7A:D1:15:C3:6F:AF:54
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/bWRgQJoO4M-qjYeoLnrRFcNvr1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.198.0/23
185.98.4.0/24
185.100.66.0/24
185.113.133.0/24
185.116.192.0/22
185.121.80.0/22
185.125.88.0/22
194.4.56.0/22
194.146.40.0/22
IPv6:
2a06:941::/48
2a06:941:2::/48
Signature Algorithm: sha256WithRSAEncryption
00:63:40:53:2d:2b:b6:a0:03:2a:6c:dd:48:34:11:56:8b:41:
1b:d5:c5:21:62:72:94:04:b2:c0:54:cc:45:1b:a1:6c:00:ed:
8c:64:fc:b6:ef:d9:4d:1f:17:09:ba:dc:4e:4a:0f:fe:bc:be:
87:8f:0d:69:81:0b:21:e5:0d:fa:74:bf:2e:81:74:88:f1:db:
18:87:50:de:90:1b:80:a9:89:5d:c5:dc:e2:0e:02:a0:e3:f4:
6e:fc:f8:80:f5:48:8b:33:9d:30:c5:6c:60:38:cf:ba:63:40:
d9:5c:6e:df:3a:f9:c0:65:a4:20:96:ae:0d:87:46:d8:9e:54:
b3:d9:9b:25:04:b7:65:94:ec:16:83:1e:bc:b8:13:af:bc:49:
43:28:6c:b8:68:7f:80:e2:09:9a:45:30:d9:a9:0c:40:f1:75:
7f:fc:d6:fa:81:e5:94:49:bf:44:26:b2:00:5d:b2:b4:e1:74:
08:e6:0f:5f:66:51:42:27:39:86:87:5c:2f:99:e0:2d:2b:fb:
5c:12:49:90:9c:24:ba:21:90:17:8c:79:07:d6:38:ac:2e:74:
89:0a:d4:73:65:3c:7f:6c:da:02:5f:6a:05:c9:7b:d5:04:4d:
7b:7c:01:c6:75:2f:ca:31:5d:d2:64:40:4c:77:fc:12:4d:73:
8e:c2:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:55:53 2024 by rpki-client on console-fra.rpki-client.org