Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/b6GVmdbCYd5GS1Wn4lY3VFOJdUM.roa
File: b6GVmdbCYd5GS1Wn4lY3VFOJdUM.roa (raw, json)
Hash identifier: GwVHHH25fGUNnY9hLIg+aL8fYXQ6cWBivXFh8VWHKnY=
Subject key identifier: 6F:A1:95:99:D6:C2:61:DE:46:4B:55:A7:E2:56:37:54:53:89:75:43
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0190E9D4A249AB40142A4E84524CA90FAA47
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/b6GVmdbCYd5GS1Wn4lY3VFOJdUM.roa
Signing time: Thu 25 Jul 2024 12:19:04 +0000
ROA not before: Thu 25 Jul 2024 12:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 82.140.134.0/24 maxlen: 24
82.140.138.0/24 maxlen: 24
82.140.143.0/24 maxlen: 24
82.140.170.0/24 maxlen: 24
84.46.177.0/24 maxlen: 24
84.46.181.0/24 maxlen: 24
84.46.183.0/24 maxlen: 24
84.46.188.0/24 maxlen: 24
84.46.190.0/24 maxlen: 24
84.46.191.0/24 maxlen: 24
84.46.194.0/24 maxlen: 24
86.38.56.0/24 maxlen: 24
86.38.63.0/24 maxlen: 24
86.38.65.0/24 maxlen: 24
86.38.67.0/24 maxlen: 24
86.38.68.0/24 maxlen: 24
86.38.86.0/24 maxlen: 24
86.38.93.0/24 maxlen: 24
86.38.118.0/24 maxlen: 24
86.38.123.0/24 maxlen: 24
86.38.148.0/24 maxlen: 24
86.38.193.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.244.0/24 maxlen: 24
89.117.183.0/24 maxlen: 24
89.117.198.0/24 maxlen: 24
89.117.203.0/24 maxlen: 24
89.117.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:d4:a2:49:ab:40:14:2a:4e:84:52:4c:a9:0f:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jul 25 12:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fa19599d6c261de464b55a7e256375453897543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:8e:3c:38:b8:73:b3:e6:ae:d4:52:34:23:
82:79:56:59:68:bb:92:69:ea:88:7a:ec:3a:75:1b:
11:f0:a2:bf:72:c7:99:c3:fd:da:fb:97:c0:52:72:
99:88:a6:ac:9d:cd:97:42:fe:44:79:23:96:76:06:
4c:7d:6d:b4:9a:ce:60:39:ac:34:4b:6c:ff:75:2d:
f7:d7:3b:11:a0:75:65:b2:99:4e:12:ce:e1:6b:cc:
1b:eb:13:11:51:c5:b3:f7:4e:92:62:c9:5c:52:14:
ac:af:4c:7b:77:32:c2:31:39:e0:37:63:fa:e5:7e:
13:25:f3:6a:83:c9:4b:96:63:81:7c:6d:7a:9e:88:
5e:a1:f7:f0:d5:8c:19:9a:dc:5e:d2:d1:12:14:06:
5c:31:e4:6b:3d:da:22:05:4c:a5:87:6f:52:dc:c7:
68:e3:25:bc:d3:de:b0:2d:27:ac:0b:3c:bc:02:47:
64:13:ed:0e:76:17:9e:4c:14:5d:3a:07:0c:97:a4:
f9:2f:20:4e:de:0e:61:b1:2b:ba:a8:05:49:38:d4:
56:d8:97:64:4f:8e:da:1a:8a:d8:d0:4f:9f:d2:78:
9a:4f:e9:a6:37:56:d2:53:6c:2a:40:bc:f6:e1:75:
ff:ec:56:ea:bf:c2:40:05:2e:ed:e9:10:f6:2d:58:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:95:99:D6:C2:61:DE:46:4B:55:A7:E2:56:37:54:53:89:75:43
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/b6GVmdbCYd5GS1Wn4lY3VFOJdUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.134.0/24
82.140.138.0/24
82.140.143.0/24
82.140.170.0/24
84.46.177.0/24
84.46.181.0/24
84.46.183.0/24
84.46.188.0/24
84.46.190.0/23
84.46.194.0/24
86.38.56.0/24
86.38.63.0/24
86.38.65.0/24
86.38.67.0-86.38.68.255
86.38.86.0/24
86.38.93.0/24
86.38.118.0/24
86.38.123.0/24
86.38.148.0/24
86.38.193.0/24
86.38.233.0/24
86.38.244.0/24
89.117.183.0/24
89.117.198.0/24
89.117.203.0/24
89.117.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:39:3a:72:62:32:dc:81:8b:80:13:93:bf:76:89:08:f6:e2:
f1:4e:1c:14:e2:6b:dd:8a:58:6e:54:1a:f7:f7:f2:77:57:1a:
46:7e:61:c7:f1:54:06:54:9a:77:05:ad:28:f1:4d:64:12:17:
4a:b1:60:42:65:e8:f2:ec:10:06:2b:ec:d5:a8:3a:87:fa:51:
39:02:30:4b:07:80:f4:82:29:22:f8:4a:6e:41:21:5b:83:8e:
5a:2d:93:9d:1c:84:ee:f4:92:2b:55:53:aa:39:9e:17:5a:ef:
f0:94:5c:6c:75:8a:fa:23:f8:0a:3e:40:d1:4a:05:20:ce:37:
3b:17:d1:c7:ae:5d:bf:9e:0a:c7:b9:70:b1:ce:2d:6d:73:c9:
a9:12:e8:57:47:a6:81:a9:72:2c:a1:35:49:f1:c4:81:0e:93:
1d:c5:fb:5f:7c:1a:91:d8:85:14:35:06:8d:25:da:cf:8c:7a:
b4:0a:ee:09:b7:48:c3:58:06:13:55:18:e2:58:3e:6d:89:3d:
f7:11:f5:b1:fc:ad:73:17:ac:4e:1d:2b:ec:4e:4a:3a:c3:93:
97:dd:5c:39:55:da:ec:4a:5a:5d:52:c8:b9:2c:ae:d9:fb:dd:
6a:01:7b:17:38:b5:bd:94:1f:c8:d8:08:0b:4e:ed:1c:25:ef:
14:f6:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:32 2024 by rpki-client on console-ams.rpki-client.org