Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/aay2zQj--0XzW5DouAaQJTuRwkI.roa
File: aay2zQj--0XzW5DouAaQJTuRwkI.roa (raw, json)
Hash identifier: n/FtB8f5aBMT29aXOqKLC1m3b2ouuAS5PbGq0CbOL2I=
Subject key identifier: 69:AC:B6:CD:08:FE:FB:45:F3:5B:90:E8:B8:06:90:25:3B:91:C2:42
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018CC9BCA8CBA857C9F0B5C5B398BC618C67
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/aay2zQj--0XzW5DouAaQJTuRwkI.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199527
IP address blocks: 213.252.242.0/24 maxlen: 24
213.252.251.0/24 maxlen: 24
213.252.253.0/24 maxlen: 24
213.252.250.0/24 maxlen: 24
185.189.152.0/24 maxlen: 24
213.252.209.0/24 maxlen: 24
213.252.208.0/24 maxlen: 24
2a00:f501:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a8:cb:a8:57:c9:f0:b5:c5:b3:98:bc:61:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69acb6cd08fefb45f35b90e8b80690253b91c242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:85:5a:58:4e:6b:4e:bb:a0:6a:78:1e:96:
09:de:ea:eb:1d:b9:2f:e8:84:3a:51:59:4c:54:cf:
c6:cb:51:e7:1a:d9:f6:00:64:4f:d9:f1:69:ed:2c:
02:15:a3:4b:6f:45:09:54:25:15:6b:7a:3f:41:63:
71:2a:c7:de:fb:11:5d:1f:29:64:bd:45:25:da:a5:
ef:3e:08:2e:ff:7d:e4:ce:06:99:77:1f:03:70:45:
d9:f1:17:ba:3b:aa:f4:14:71:bf:95:03:36:9c:21:
0a:1b:73:fd:6a:94:4e:6a:98:39:52:03:58:ac:7d:
d7:8c:ec:c1:5c:32:db:04:fb:6f:39:e1:0e:a9:d2:
df:c5:34:5e:67:2f:52:a6:f7:e8:e5:24:80:44:5e:
ff:d3:1d:ed:bf:be:9f:dc:43:aa:ae:87:36:2f:3b:
c2:90:91:19:69:4b:f9:9c:91:c6:c5:77:d4:72:04:
f4:38:31:fe:36:3e:37:ae:70:21:94:68:08:2d:24:
92:e9:ab:73:b7:b3:d0:df:4b:c3:06:04:a2:33:ac:
19:c8:00:c3:3e:a9:55:13:ac:fc:4c:cf:aa:a9:fa:
4a:47:4d:95:34:0b:e8:73:b0:cf:78:83:ae:24:a3:
7c:6f:53:b3:0e:e9:56:7f:1f:2c:f8:b6:3d:b8:40:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:B6:CD:08:FE:FB:45:F3:5B:90:E8:B8:06:90:25:3B:91:C2:42
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/aay2zQj--0XzW5DouAaQJTuRwkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.152.0/24
213.252.208.0/23
213.252.242.0/24
213.252.250.0/23
213.252.253.0/24
IPv6:
2a00:f501:a001::/48
Signature Algorithm: sha256WithRSAEncryption
6a:77:b3:8f:8d:be:36:bd:a6:ed:d8:7d:da:03:ff:95:b2:bb:
43:44:c7:ea:95:90:3f:84:7e:81:59:d9:6c:43:c2:bb:5d:93:
1d:0d:82:68:55:c1:ed:39:a5:41:c7:14:99:61:cd:a4:f5:43:
3a:41:a8:35:db:05:ad:86:01:10:79:74:ab:2b:ae:18:fd:35:
4f:05:45:d1:a6:8a:07:c9:8d:b1:be:7d:1a:5d:0d:2a:72:34:
db:8b:a8:05:a2:c6:bf:d7:e2:34:b2:1f:02:97:45:ef:f2:1c:
d8:47:1c:02:41:f1:15:e7:41:d2:71:7d:99:af:9d:3e:5e:75:
b4:ab:38:88:c2:a7:c4:24:b4:39:b8:96:d5:9a:1c:45:1b:37:
96:71:35:69:d3:d5:04:7e:25:09:4c:0b:78:c9:4e:5f:b5:62:
4c:f3:c3:2a:43:43:69:74:53:86:d6:d4:2d:6a:49:cf:84:cf:
c5:ef:de:8a:4d:06:6c:7c:21:ab:76:df:c8:4f:5b:57:53:6c:
92:21:8d:c5:25:60:eb:53:00:55:9a:b7:93:f4:9e:90:54:e0:
a8:65:fc:6e:f0:ae:97:7f:3a:0d:03:24:aa:83:08:41:5b:ec:
92:71:ad:83:62:ec:4c:c4:f6:9c:de:1a:b1:a3:cb:68:d9:ba:
79:a4:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:04:03 2024 by rpki-client on console-fra.rpki-client.org