Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/B1142MZmoWC79cU7wc6SpTqGiyI.roa
File: B1142MZmoWC79cU7wc6SpTqGiyI.roa (raw, json)
Hash identifier: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=
Subject key identifier: 07:5D:78:D8:C6:66:A1:60:BB:F5:C5:3B:C1:CE:92:A5:3A:86:8B:22
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B42186D0A7D986C7D2C0DFE124F4CE
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/B1142MZmoWC79cU7wc6SpTqGiyI.roa
Signing time: Thu 02 Jan 2025 15:48:23 +0000
ROA not before: Thu 02 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 82.140.134.0/24 maxlen: 24
82.140.138.0/24 maxlen: 24
82.140.143.0/24 maxlen: 24
82.140.170.0/24 maxlen: 24
84.46.177.0/24 maxlen: 24
84.46.181.0/24 maxlen: 24
84.46.183.0/24 maxlen: 24
84.46.188.0/24 maxlen: 24
84.46.190.0/24 maxlen: 24
84.46.191.0/24 maxlen: 24
84.46.194.0/24 maxlen: 24
86.38.56.0/24 maxlen: 24
86.38.63.0/24 maxlen: 24
86.38.65.0/24 maxlen: 24
86.38.67.0/24 maxlen: 24
86.38.68.0/24 maxlen: 24
86.38.86.0/24 maxlen: 24
86.38.93.0/24 maxlen: 24
86.38.118.0/24 maxlen: 24
86.38.123.0/24 maxlen: 24
86.38.148.0/24 maxlen: 24
86.38.193.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.244.0/24 maxlen: 24
89.117.183.0/24 maxlen: 24
89.117.198.0/24 maxlen: 24
89.117.203.0/24 maxlen: 24
89.117.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:21:86:d0:a7:d9:86:c7:d2:c0:df:e1:24:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=075d78d8c666a160bbf5c53bc1ce92a53a868b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:6a:f2:19:10:57:ed:37:41:33:90:25:de:
bb:89:77:ed:87:29:b4:ee:7e:03:3d:ab:fe:78:a5:
58:b8:72:3e:47:71:f2:38:52:5f:59:fc:05:5d:11:
86:f1:40:0e:41:9d:7f:91:b1:01:94:2a:e5:e5:3c:
35:97:77:f2:02:07:54:08:78:9c:e8:b8:ab:91:db:
92:92:7e:6e:51:dd:1a:7a:c7:cc:04:ca:a2:6e:b2:
d6:0e:7d:d2:8e:8a:45:de:35:99:05:a0:65:8d:c8:
45:41:36:fa:55:0c:07:7c:58:32:39:aa:81:e2:9a:
25:1e:be:01:4d:5c:3c:42:cd:49:c6:7a:df:f2:91:
e6:f0:d0:15:a3:17:84:1e:9c:d5:e4:74:1e:c2:27:
61:b2:e9:03:89:44:13:c8:e9:03:6c:1a:ce:ab:82:
bd:e5:e7:07:f0:46:13:10:2e:b9:12:56:ec:d9:89:
f7:70:af:b8:0f:f2:68:39:98:11:4e:95:f3:6d:cf:
ca:68:d2:f4:83:77:7b:ae:e0:ed:73:f3:f2:5b:67:
b6:0f:f9:7e:33:16:2b:fd:1a:ca:7c:fc:3e:0e:7c:
04:00:ee:37:e8:a8:40:d7:73:9a:bd:1a:a6:b2:c1:
7b:54:a2:63:7d:0f:1c:85:3c:f1:76:46:36:9d:11:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:78:D8:C6:66:A1:60:BB:F5:C5:3B:C1:CE:92:A5:3A:86:8B:22
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/B1142MZmoWC79cU7wc6SpTqGiyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.134.0/24
82.140.138.0/24
82.140.143.0/24
82.140.170.0/24
84.46.177.0/24
84.46.181.0/24
84.46.183.0/24
84.46.188.0/24
84.46.190.0/23
84.46.194.0/24
86.38.56.0/24
86.38.63.0/24
86.38.65.0/24
86.38.67.0-86.38.68.255
86.38.86.0/24
86.38.93.0/24
86.38.118.0/24
86.38.123.0/24
86.38.148.0/24
86.38.193.0/24
86.38.233.0/24
86.38.244.0/24
89.117.183.0/24
89.117.198.0/24
89.117.203.0/24
89.117.235.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d3:62:d0:c8:2d:15:f3:7e:0f:9c:77:65:ce:6e:b1:dd:ac:
8f:5d:e1:45:3d:93:55:74:34:0b:23:fb:e5:21:d4:71:52:40:
48:11:96:9f:11:05:b4:1a:16:0f:40:f9:12:b8:c6:22:98:77:
e4:06:ea:da:2e:dc:ba:15:63:ee:37:20:ea:fe:d5:2a:e6:d7:
59:49:7b:f9:7d:fa:a7:db:34:1b:02:5e:d1:43:9f:f2:73:73:
b7:89:97:46:ac:94:7e:1e:17:39:cf:05:70:e2:f9:f0:a2:bc:
07:bc:16:a2:f5:4f:ce:3f:d4:71:a0:a8:14:d7:b4:3d:ab:33:
51:12:37:df:bb:43:dd:94:94:5c:a1:e4:47:40:b2:cd:6e:c0:
c3:02:91:ea:dd:94:31:cd:63:b8:d9:22:ff:9e:7a:b2:d3:05:
ed:b1:1e:61:c7:47:35:81:5d:a5:18:c9:26:05:3a:f6:cd:3d:
b8:1e:ee:74:09:da:25:97:a1:8c:99:fe:6a:af:c3:3e:49:84:
76:50:bf:ed:2b:ab:a7:10:c0:5e:ee:da:aa:48:aa:09:9d:53:
44:c3:21:44:f9:f4:9f:bb:96:7c:09:e9:e5:69:d0:e2:fe:59:
5b:bc:44:62:38:8a:c8:04:f9:94:69:7a:bb:0f:53:e0:6f:52:
43:ed:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:29 2025 by rpki-client