Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/xxOt3vIgNAZ5sKE5cWcbRmJNp_U.roa
File: xxOt3vIgNAZ5sKE5cWcbRmJNp_U.roa (raw, json)
Hash identifier: iZ91qcmvp/2rj+zalRYI1YfHqgqRE9OEeB4M5WHqE8M=
Subject key identifier: C7:13:AD:DE:F2:20:34:06:79:B0:A1:39:71:67:1B:46:62:4D:A7:F5
Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial: 018CC9BB21617AE1D70427BAE5DDF6D8D87B
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/xxOt3vIgNAZ5sKE5cWcbRmJNp_U.roa
Signing time: Tue 02 Jan 2024 10:32:13 +0000
ROA not before: Tue 02 Jan 2024 10:32:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47123
IP address blocks: 185.44.192.0/24 maxlen: 24
185.44.193.0/24 maxlen: 24
185.44.194.0/24 maxlen: 24
185.44.195.0/24 maxlen: 24
195.155.64.0/24 maxlen: 24
195.155.71.0/24 maxlen: 24
195.155.65.0/24 maxlen: 24
195.155.66.0/24 maxlen: 24
195.155.67.0/24 maxlen: 24
195.155.68.0/24 maxlen: 24
195.155.69.0/24 maxlen: 24
195.155.70.0/24 maxlen: 24
195.155.78.0/24 maxlen: 24
195.155.72.0/24 maxlen: 24
195.155.73.0/24 maxlen: 24
195.155.74.0/24 maxlen: 24
195.155.75.0/24 maxlen: 24
195.155.76.0/24 maxlen: 24
195.155.77.0/24 maxlen: 24
195.155.79.0/24 maxlen: 24
195.155.80.0/24 maxlen: 24
195.155.81.0/24 maxlen: 24
195.155.82.0/24 maxlen: 24
195.155.83.0/24 maxlen: 24
195.155.84.0/24 maxlen: 24
195.155.85.0/24 maxlen: 24
195.155.86.0/24 maxlen: 24
195.155.87.0/24 maxlen: 24
195.155.88.0/24 maxlen: 24
195.155.89.0/24 maxlen: 24
195.155.90.0/24 maxlen: 24
195.155.91.0/24 maxlen: 24
93.94.249.0/24 maxlen: 24
93.94.250.0/24 maxlen: 24
93.94.251.0/24 maxlen: 24
93.94.252.0/23 maxlen: 23
93.94.248.0/24 maxlen: 24
93.94.254.0/24 maxlen: 24
93.94.255.0/24 maxlen: 24
195.155.92.0/24 maxlen: 24
195.155.93.0/24 maxlen: 24
195.155.94.0/24 maxlen: 24
195.155.95.0/24 maxlen: 24
2a04:c5::/32 maxlen: 32
2a04:c2::/32 maxlen: 32
2a04:c3::/32 maxlen: 32
2a04:c1::/32 maxlen: 32
2a04:c4::/32 maxlen: 32
2a04:c0::/32 maxlen: 32
2a04:c6::/32 maxlen: 32
2a04:c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:21:61:7a:e1:d7:04:27:ba:e5:dd:f6:d8:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Validity
Not Before: Jan 2 10:32:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c713addef220340679b0a13971671b46624da7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:0e:45:25:fb:ef:33:02:98:89:9c:09:19:
b6:d6:48:90:22:f8:40:37:61:08:b2:c9:6c:d2:fd:
fc:85:ea:b5:37:1d:95:c8:b7:bb:c0:b6:94:b4:72:
ae:76:bc:e1:f6:00:79:ac:88:dc:ec:19:0b:6b:23:
c9:7f:5f:32:68:cd:d6:7b:af:70:4a:9e:20:08:e4:
6f:4c:b6:af:0f:5d:ca:f2:f6:fc:d0:e0:e1:aa:66:
0f:2d:26:7c:41:86:15:cd:39:e0:b8:ad:47:57:fd:
8b:a9:c4:81:13:64:79:0c:f1:eb:61:f4:7d:65:a9:
5c:10:36:a3:9f:bb:ee:e0:2b:0f:10:0d:88:f0:ac:
47:df:81:80:9f:f4:ff:3f:90:b9:eb:31:e6:a8:7e:
a2:31:f5:b4:5a:06:8f:8b:fc:0d:95:4a:09:95:19:
3c:5a:85:6d:0d:ed:6f:ee:c5:8e:31:a0:68:3b:59:
c3:ba:82:48:54:82:7c:55:de:90:84:f5:21:c3:58:
6e:98:12:48:d4:1b:3f:2d:55:e5:04:7f:8e:69:5f:
31:98:71:d8:60:58:86:4c:43:76:f4:66:34:a6:62:
3b:12:b6:e0:21:d1:86:9d:1e:7f:e3:5c:7f:95:d9:
a8:7b:45:21:49:75:3b:b3:ce:75:3c:5c:d2:73:2f:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:13:AD:DE:F2:20:34:06:79:B0:A1:39:71:67:1B:46:62:4D:A7:F5
X509v3 Authority Key Identifier:
keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/xxOt3vIgNAZ5sKE5cWcbRmJNp_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.248.0/21
185.44.192.0/22
195.155.64.0/19
IPv6:
2a04:c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:1d:8a:74:3a:35:44:c5:19:57:4d:f0:bb:9e:7e:81:6c:f4:
ee:f7:21:66:5d:64:5e:6a:c0:25:49:aa:65:57:6f:c2:6d:5c:
43:3c:30:dc:8c:fc:e3:94:a8:52:46:b8:50:b2:f1:ac:ed:20:
21:2a:e6:f9:e2:1a:b5:32:eb:da:aa:24:0f:1e:f4:92:a3:90:
7b:ec:e4:4f:af:a2:2e:d7:02:92:f4:72:a1:c8:24:39:19:9b:
34:a3:2c:f3:36:a8:51:c2:b3:c0:a1:3e:8e:d4:40:52:3e:23:
36:a7:fe:a1:96:95:aa:7c:43:a0:63:e5:c9:c4:a5:a9:e4:f2:
50:ce:ed:fb:99:b2:92:b9:2a:ed:5b:06:d7:5c:fe:55:b3:51:
e6:04:81:15:dd:d7:00:e0:26:87:f1:ac:78:e4:c7:4d:36:bf:
88:e8:b9:24:76:e7:15:f3:66:8b:64:d3:08:13:40:fd:19:c8:
36:42:12:10:93:5c:e6:ee:c0:b4:04:b7:5e:ba:db:ef:1d:20:
2e:66:56:38:e4:ca:b5:4f:f7:3b:b5:fa:25:00:b7:2c:f4:39:
cd:9a:44:4b:3e:4f:02:37:28:06:8d:03:30:86:82:fb:ab:ae:
0f:68:ac:50:ce:c4:7b:bf:dc:a7:ed:b9:cb:ec:c7:af:d2:51:
99:09:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:39 2024 by rpki-client on console-ams.rpki-client.org