Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/OKt6SiPAVimHo4m2NPKP2ZxQdWQ.roa
File: OKt6SiPAVimHo4m2NPKP2ZxQdWQ.roa (raw, json)
Hash identifier: mqpS+6wxpg/zc5UDen6uUfzEcJxOO1psiDVgFTkI1/M=
Subject key identifier: 38:AB:7A:4A:23:C0:56:29:87:A3:89:B6:34:F2:8F:D9:9C:50:75:64
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 018CC500D05BF0C3B156E6A220153690FA17
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/OKt6SiPAVimHo4m2NPKP2ZxQdWQ.roa
Signing time: Mon 01 Jan 2024 12:30:14 +0000
ROA not before: Mon 01 Jan 2024 12:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 194.213.24.0/24 maxlen: 24
185.142.34.0/23 maxlen: 23
185.15.209.0/24 maxlen: 24
185.15.208.0/24 maxlen: 24
185.142.32.0/24 maxlen: 24
185.15.211.0/24 maxlen: 24
185.142.35.0/24 maxlen: 24
185.15.210.0/24 maxlen: 24
194.242.38.0/24 maxlen: 24
194.242.33.0/24 maxlen: 24
2a03:afc0:5::/48 maxlen: 48
2a03:afc0:3::/48 maxlen: 48
2a03:afc0:4::/48 maxlen: 48
2a03:afc0:7::/48 maxlen: 48
2a03:afc0:2::/48 maxlen: 48
2a03:afc0:8::/48 maxlen: 48
2a03:afc0:6::/48 maxlen: 48
2a03:afc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d0:5b:f0:c3:b1:56:e6:a2:20:15:36:90:fa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Jan 1 12:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38ab7a4a23c0562987a389b634f28fd99c507564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:36:72:22:b7:e6:a6:02:0a:05:59:de:1c:51:
88:95:93:eb:9a:ba:83:2f:f3:ee:0a:46:6f:29:b3:
8d:ac:06:2e:db:4a:f0:67:2e:c9:c3:2a:46:55:cc:
9b:89:74:9e:b4:8b:c6:33:ec:13:c5:fe:b0:20:21:
38:1d:e4:b7:53:69:de:a9:df:e4:68:43:16:f5:ac:
b8:60:70:55:a2:a8:42:c9:eb:55:38:8c:81:ab:21:
d4:0b:36:24:6b:0b:4d:3d:07:b2:be:3e:5d:be:ef:
83:da:ec:47:56:ca:70:df:e8:13:3f:60:d2:78:b3:
16:d2:b4:b5:2c:08:f0:41:26:3f:24:66:ea:73:5e:
60:b7:ec:fa:e8:85:bd:1e:c8:74:c6:77:26:64:8e:
2b:ba:cc:52:eb:74:f8:aa:63:77:62:74:54:04:01:
0d:df:39:22:11:65:b3:89:bf:76:b5:d1:92:85:57:
42:fe:09:17:b8:51:91:13:71:4c:e9:c4:54:e2:6b:
49:77:4c:c7:00:40:83:88:eb:d5:2b:4b:35:b4:28:
1b:e7:7e:01:02:93:03:8b:7e:b4:47:8a:82:06:74:
49:fc:fe:3c:3e:54:b4:01:45:7a:8e:27:3a:92:46:
2e:68:b7:ab:0d:d9:b7:7d:2d:bd:9f:ac:c6:05:aa:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:7A:4A:23:C0:56:29:87:A3:89:B6:34:F2:8F:D9:9C:50:75:64
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/OKt6SiPAVimHo4m2NPKP2ZxQdWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.208.0/22
185.142.32.0/24
185.142.34.0/23
194.213.24.0/24
194.242.33.0/24
194.242.38.0/24
IPv6:
2a03:afc0:1::-2a03:afc0:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:5f:2d:ba:d4:b9:6c:ea:f2:4f:3a:26:2b:57:d7:ed:57:9c:
b4:f4:28:bb:81:04:0d:96:a2:15:a1:13:ab:fe:07:5e:69:95:
85:d6:95:16:55:9d:49:ea:60:37:49:c5:4c:e3:b2:47:35:bb:
78:bc:5e:61:38:36:2c:c0:a8:29:03:d1:b4:d6:56:1f:16:60:
b9:a8:78:c6:73:f3:0a:8a:76:05:d4:72:7e:c3:d3:9b:0b:35:
a8:81:6f:f1:b9:16:84:b8:f9:27:eb:27:03:4d:08:94:b5:3c:
13:b7:b3:50:b9:78:20:bf:3c:7e:80:79:74:9b:a1:77:b9:a6:
fb:12:9d:fd:9e:6e:8f:ed:dd:85:3d:4f:09:b4:d1:5c:77:3f:
68:49:12:b6:45:1f:5a:97:f0:54:57:22:fb:75:80:73:ac:ee:
22:30:02:19:77:e5:e5:6b:93:06:0d:e0:93:59:54:60:35:a2:
f3:5b:c1:91:dd:8f:55:f2:c4:66:b9:d6:f8:08:59:52:eb:15:
f4:2d:6c:7f:b5:00:e4:f8:81:28:9f:07:70:fe:ed:f8:a3:4e:
47:45:4e:b5:f9:1f:44:7d:82:ea:d6:38:aa:f5:ea:1b:dc:b6:
f3:3b:1a:5b:c2:6d:63:b1:05:dd:83:50:9b:ba:89:38:ce:e9:
77:37:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:34:46 2024 by rpki-client on console-fra.rpki-client.org