Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/iGeeK0hkwasoHbisUYRcsZ9Hutg.roa
File: iGeeK0hkwasoHbisUYRcsZ9Hutg.roa (raw, json)
Hash identifier: 2LEZc5V6LdWNejbF0vr0PC31mIVUQvGe1nZEjZlelew=
Subject key identifier: 88:67:9E:2B:48:64:C1:AB:28:1D:B8:AC:51:84:5C:B1:9F:47:BA:D8
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 018CC794A8698206F7DA95A05507E8C56D9B
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/iGeeK0hkwasoHbisUYRcsZ9Hutg.roa
Signing time: Tue 02 Jan 2024 00:30:57 +0000
ROA not before: Tue 02 Jan 2024 00:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15518
IP address blocks: 212.86.160.0/20 maxlen: 20
213.153.64.0/22 maxlen: 22
212.86.180.0/22 maxlen: 22
212.86.188.0/22 maxlen: 22
213.153.74.0/24 maxlen: 24
213.153.73.0/24 maxlen: 24
213.153.72.0/24 maxlen: 24
213.153.75.0/24 maxlen: 24
213.153.72.0/22 maxlen: 22
2a00:1180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a8:69:82:06:f7:da:95:a0:55:07:e8:c5:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Jan 2 00:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88679e2b4864c1ab281db8ac51845cb19f47bad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:0e:f2:3f:97:89:81:55:f1:29:4f:7a:c9:
cc:4c:36:1a:26:97:19:7e:79:fb:cf:92:1d:d3:e7:
67:6b:ef:d1:65:b5:9a:89:f8:47:a4:b4:16:6b:aa:
61:60:66:b4:f7:cd:01:5b:82:b6:a5:df:1d:2a:0e:
1b:d4:b1:87:71:d9:a6:7d:44:a2:54:5b:49:05:03:
7e:a3:de:c8:2b:2f:fe:a2:a2:e4:cf:8b:23:15:8f:
cb:56:25:90:9a:57:68:06:a6:73:ba:e1:0f:8e:5c:
df:d7:01:7e:65:fb:68:0c:a3:ad:eb:59:12:62:be:
70:82:98:9b:3a:5b:fd:26:6b:13:db:02:4c:56:8f:
92:20:67:43:5d:39:3d:61:e1:d8:26:60:1a:fa:71:
c2:c7:22:7f:70:11:28:6c:15:1a:46:8a:48:39:4d:
f6:0f:61:28:78:e2:93:fc:c1:04:b7:c8:ea:2e:0e:
b6:2c:63:34:be:b0:81:e8:73:17:6c:6f:e7:af:54:
94:eb:37:63:1f:52:32:b4:d6:43:01:29:d6:01:d1:
a9:10:38:22:25:b4:a1:22:70:25:43:d1:28:96:9a:
fb:c9:93:a9:a7:e9:d9:08:4e:42:4e:7e:7b:37:c4:
60:9f:08:07:c4:86:5e:c9:91:51:eb:8d:6d:48:cc:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:9E:2B:48:64:C1:AB:28:1D:B8:AC:51:84:5C:B1:9F:47:BA:D8
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/iGeeK0hkwasoHbisUYRcsZ9Hutg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.160.0/20
212.86.180.0/22
212.86.188.0/22
213.153.64.0/22
213.153.72.0/22
IPv6:
2a00:1180::/32
Signature Algorithm: sha256WithRSAEncryption
16:ef:56:bd:74:4c:f0:66:7a:b2:ae:ea:f2:d9:d0:d8:c2:ca:
8b:73:c7:89:f3:19:e0:76:20:c7:9d:d1:9e:1e:06:b8:12:10:
f1:87:56:5c:ab:a6:a4:f1:ab:05:00:d4:e5:44:45:f8:c4:52:
12:55:36:0f:0c:6b:85:b7:cc:64:71:01:1a:4a:c1:9f:f4:75:
2d:ba:b6:2b:2e:4c:c0:eb:af:0c:d0:b3:7d:fd:11:4b:be:9b:
80:c9:bb:4b:57:97:89:79:67:5f:ee:90:77:52:4d:a5:f1:ae:
7c:bf:18:23:7b:26:7f:70:cc:5e:b3:2e:4c:1f:c4:d4:7d:2a:
c5:96:5b:27:88:89:22:3d:a4:c1:5b:dc:ac:3c:63:85:85:40:
de:90:f1:b7:bd:24:7c:81:b6:7a:0f:a5:8b:cf:d4:81:dd:88:
7c:82:9e:f2:86:34:a5:b4:98:be:5f:99:b1:41:94:fc:d1:4c:
8c:4a:c4:6f:c6:90:61:41:9e:35:11:cc:ea:d6:bc:24:08:1f:
c2:df:84:8f:7a:61:71:4c:b9:88:2f:5a:98:85:2b:b9:07:f8:
99:92:59:b4:f5:d6:b3:20:7f:a1:1f:1c:ea:ad:71:6a:10:0c:
77:33:d7:29:af:33:82:62:b3:87:29:0a:9d:86:d1:95:68:4a:
0d:d1:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:53:20 2024 by rpki-client on console-fra.rpki-client.org