Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/rbsUA9K-EEZwBwtdRWQjCai7cvI.roa
File: rbsUA9K-EEZwBwtdRWQjCai7cvI.roa (raw, json)
Hash identifier: +663gKrTurCdDDqMXdNcMf/lLItiiYW8aPTtrZ0HT2Y=
Subject key identifier: AD:BB:14:03:D2:BE:10:46:70:07:0B:5D:45:64:23:09:A8:BB:72:F2
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 018D7D6B700B198B8BE0D8780C94D14B8273
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/rbsUA9K-EEZwBwtdRWQjCai7cvI.roa
Signing time: Tue 06 Feb 2024 07:56:49 +0000
ROA not before: Tue 06 Feb 2024 07:56:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8612
IP address blocks: 82.84.0.0/15 maxlen: 24
82.85.26.128/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.85.53.64/26 maxlen: 26
84.220.0.0/16 maxlen: 24
84.221.0.0/16 maxlen: 24
94.32.0.0/14 maxlen: 14
94.32.115.0/24 maxlen: 24
193.43.2.0/24 maxlen: 24
193.43.3.180/30 maxlen: 30
193.43.3.184/29 maxlen: 29
193.43.3.192/26 maxlen: 26
193.207.24.0/21 maxlen: 24
193.207.48.0/20 maxlen: 24
193.207.64.0/18 maxlen: 24
193.207.96.0/20 maxlen: 21
193.207.128.0/17 maxlen: 22
195.130.224.0/19 maxlen: 19
212.123.64.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
213.205.0.251/32 maxlen: 32
217.133.0.0/16 maxlen: 16
217.133.170.0/24 maxlen: 24
2a01:7d0::/32 maxlen: 32
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0:4811::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:6b:70:0b:19:8b:8b:e0:d8:78:0c:94:d1:4b:82:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Feb 6 07:56:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adbb1403d2be104670070b5d45642309a8bb72f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:79:12:11:e0:8e:3d:7f:4e:2c:10:48:99:
d9:65:7e:d5:2a:df:ff:25:f2:e9:5b:d9:86:2f:c1:
23:bc:80:c2:7a:18:2f:42:3e:4a:09:ff:a6:92:8d:
95:69:05:c0:fd:1b:50:01:91:e4:9b:e4:3d:c4:b1:
d3:12:d8:1f:63:9c:02:87:5e:bd:31:10:c2:7f:f9:
bb:24:b1:b7:36:88:f6:ce:cb:cf:38:da:79:42:94:
e0:e4:e4:0b:fd:48:74:77:de:72:5b:3f:9c:63:e2:
22:7e:22:c0:cf:ed:8c:cb:3f:9d:9a:95:e7:bc:53:
dc:98:45:d9:86:ce:f1:1a:d9:b1:de:17:f0:b0:42:
c1:bb:b1:b1:4c:33:1f:4b:15:17:65:6d:6e:74:19:
c0:31:21:c6:99:8e:27:cb:8f:f9:5b:dc:af:a0:ea:
b7:bf:ef:b8:b5:11:b9:e4:84:cf:81:e5:a7:00:2d:
eb:e9:7f:9a:31:d4:c1:01:5a:82:d3:55:c3:12:3f:
d1:17:b4:d2:3b:45:b4:93:3a:82:72:4b:39:da:30:
71:dc:9b:37:d7:99:68:10:a9:0a:90:03:a8:9d:c8:
ca:18:9b:2c:e2:48:70:45:c2:58:b8:65:cd:42:4b:
fb:30:68:d8:ff:f7:20:fd:9f:c3:97:dc:19:d2:50:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:14:03:D2:BE:10:46:70:07:0B:5D:45:64:23:09:A8:BB:72:F2
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/rbsUA9K-EEZwBwtdRWQjCai7cvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.84.0.0/15
84.220.0.0/15
94.32.0.0/14
193.43.2.0/24
193.43.3.180-193.43.3.255
193.207.24.0/21
193.207.48.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
217.133.0.0/16
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
33:16:31:c3:ea:f1:7f:21:04:e0:78:ea:7b:7e:f8:be:d7:4f:
7c:03:8f:f3:c6:fd:4a:f2:23:99:4a:b0:b3:9e:44:0e:49:54:
3c:9f:cf:fb:ca:57:23:54:13:c8:d1:f6:08:ea:6a:a4:0a:a2:
aa:b1:d0:f4:cd:20:2d:6b:0d:77:ef:15:b8:7c:d3:b5:83:15:
cf:96:f5:e2:25:a8:b9:87:41:93:b8:07:8d:47:7e:42:c2:77:
18:c5:8a:cd:ce:2e:54:58:fa:89:62:ba:3c:ed:2c:22:77:ff:
d5:53:90:e6:ba:6b:71:bf:31:16:47:11:d4:e3:ff:1d:16:72:
ae:e9:4b:32:ef:ce:d0:a6:26:c6:d7:3e:fc:72:28:43:23:78:
22:4e:83:aa:06:72:70:da:41:7e:22:2e:33:8f:8d:e2:0e:2b:
19:ba:a6:92:63:f0:ef:ec:cb:0c:9f:9c:69:cb:84:d2:27:0e:
55:1f:3b:f8:eb:29:e1:fb:c2:ce:50:9f:7a:be:cc:c1:cb:01:
a8:8d:82:17:6c:97:1f:fd:49:b8:2b:2a:32:94:a5:bf:e8:0f:
b9:57:5d:99:14:62:1c:a7:09:30:fd:a0:f3:1a:09:49:36:38:
e3:87:a3:5b:7c:62:0a:bb:1c:1f:3d:45:96:97:be:5a:54:96:
fe:6c:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 12:25:33 2024 by rpki-client on console-ams.rpki-client.org