Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BXfVa2yvr8d4UgS6BJpOXIOYYnE.roa
File: BXfVa2yvr8d4UgS6BJpOXIOYYnE.roa (raw, json)
Hash identifier: a0UYFro4OxTbS86nE/yM6BZCNHOXyRGvPDdROxCQln0=
Subject key identifier: 05:77:D5:6B:6C:AF:AF:C7:78:52:04:BA:04:9A:4E:5C:83:98:62:71
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018E1B158DA67544AE91B39CAF2783534FCE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BXfVa2yvr8d4UgS6BJpOXIOYYnE.roa
Signing time: Thu 07 Mar 2024 22:43:01 +0000
ROA not before: Thu 07 Mar 2024 22:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50670
IP address blocks: 109.237.192.0/20 maxlen: 24
109.237.192.0/24 maxlen: 24
109.237.193.0/24 maxlen: 24
109.237.194.0/24 maxlen: 24
109.237.195.0/24 maxlen: 24
109.237.196.0/24 maxlen: 24
109.237.197.0/24 maxlen: 24
109.237.198.0/24 maxlen: 24
109.237.199.0/24 maxlen: 24
109.237.200.0/24 maxlen: 24
109.237.201.0/24 maxlen: 24
109.237.202.0/24 maxlen: 24
109.237.203.0/24 maxlen: 24
109.237.204.0/24 maxlen: 24
109.237.205.0/24 maxlen: 24
109.237.206.0/24 maxlen: 24
109.237.207.0/24 maxlen: 24
176.241.64.0/21 maxlen: 24
176.241.64.0/24 maxlen: 24
176.241.66.0/24 maxlen: 24
176.241.67.0/24 maxlen: 24
178.20.184.0/21 maxlen: 24
178.20.184.0/24 maxlen: 24
178.20.185.0/24 maxlen: 24
178.20.186.0/24 maxlen: 24
178.20.187.0/24 maxlen: 24
178.20.188.0/24 maxlen: 24
178.20.189.0/24 maxlen: 24
178.20.190.0/24 maxlen: 24
178.20.191.0/24 maxlen: 24
185.51.212.0/22 maxlen: 22
185.51.212.0/24 maxlen: 24
185.51.213.0/24 maxlen: 24
185.51.214.0/24 maxlen: 24
185.51.215.0/24 maxlen: 24
185.193.176.0/22 maxlen: 22
185.193.176.0/24 maxlen: 24
185.193.177.0/24 maxlen: 24
185.193.178.0/24 maxlen: 24
185.193.179.0/24 maxlen: 24
2a01:1d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1b:15:8d:a6:75:44:ae:91:b3:9c:af:27:83:53:4f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 7 22:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0577d56b6cafafc7785204ba049a4e5c83986271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:e4:4a:ad:8c:8d:ee:36:8b:f6:21:7d:86:
39:88:00:e7:56:e8:71:21:88:1a:64:20:39:d8:11:
94:81:09:7d:cb:1f:5c:41:26:2a:4b:29:0c:1a:92:
e0:cf:93:7f:17:46:1a:27:4e:ff:76:c8:53:ba:18:
be:fe:83:c2:87:fb:3b:fd:6a:60:a1:84:c9:c0:ce:
67:17:3a:8d:7e:c1:37:8f:cf:8b:7f:33:52:be:c8:
2f:4f:30:96:0d:4b:73:5b:e8:d0:34:0b:f6:a5:ad:
81:14:ea:64:9b:92:89:03:b3:a2:60:69:b7:9b:ea:
66:2b:99:ae:6a:d9:bf:75:be:82:05:c8:a3:be:5a:
b5:67:0e:91:69:91:a7:4c:dc:61:ad:9a:88:59:7b:
ba:36:89:8a:a5:3f:cc:e0:87:2c:5d:a5:38:8f:eb:
bc:3a:ad:65:51:e7:93:33:0b:87:de:d7:2f:1e:09:
ad:89:8d:90:fc:69:fa:78:b8:91:3f:17:9a:8d:65:
76:15:c1:76:f9:a7:4b:a8:b6:db:68:ba:35:e9:9a:
59:ce:ad:cb:90:84:29:9f:84:da:c0:45:17:7c:cc:
d3:9c:d5:dd:2f:c7:a8:c2:6f:3b:c4:87:0e:94:f6:
3b:70:36:66:2a:12:79:18:98:c8:00:1e:06:00:52:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:77:D5:6B:6C:AF:AF:C7:78:52:04:BA:04:9A:4E:5C:83:98:62:71
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BXfVa2yvr8d4UgS6BJpOXIOYYnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.192.0/20
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
185.193.176.0/22
IPv6:
2a01:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
59:f8:03:38:57:16:a0:9a:41:08:92:9d:99:50:00:29:ce:5d:
10:78:d2:20:09:30:77:46:1e:fc:ba:5d:ee:59:8d:41:d6:ab:
b2:d2:c8:fc:7f:97:b5:c6:e2:ac:ed:6b:55:c9:b5:dd:df:f9:
b8:2b:9f:c1:f7:da:7d:a9:92:74:79:52:bb:e1:24:50:7d:05:
f9:ff:9f:e2:bf:95:a9:01:9d:64:37:1d:9f:fb:81:a1:6e:f7:
6c:f1:49:fa:d8:27:58:6e:e7:a0:0e:d6:40:0f:8b:8a:0d:bb:
1b:e8:d2:01:be:e6:a4:d1:86:f3:17:5b:2c:ed:ab:4e:b5:22:
d4:34:d3:ed:d8:e8:45:ab:68:ae:3a:35:e4:4f:7b:1d:3d:d4:
fe:d9:81:f1:79:16:f2:75:50:05:7a:5b:d9:7e:0c:10:e0:f6:
64:85:06:8f:74:4a:31:b2:fe:36:c9:b9:67:49:93:59:75:ea:
ca:d2:64:6f:4f:22:9b:be:97:e6:b6:9e:c4:59:42:9c:01:57:
43:6f:16:a2:8e:ab:3b:d9:2f:ca:03:ee:dc:74:be:c8:a9:41:
8c:b1:fe:bc:e0:f0:61:30:06:63:6f:d8:d4:a2:e9:e5:1e:ee:
c1:d1:67:19:cb:c6:a9:4a:65:a9:94:33:6f:7f:9b:8a:08:12:
31:ed:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:19:28 2024 by rpki-client on console-fra.rpki-client.org