Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/phdiRt5wzlmItknKioDvX6sBvhM.roa
File: phdiRt5wzlmItknKioDvX6sBvhM.roa (raw, json)
Hash identifier: lapeyC+QZnj1L4l3Pg6hRgS95sZ3eA+Qt8Hfi0BEOkQ=
Subject key identifier: A6:17:62:46:DE:70:CE:59:88:B6:49:CA:8A:80:EF:5F:AB:01:BE:13
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 018CC2DAEB338F817126964D1250558FD263
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/phdiRt5wzlmItknKioDvX6sBvhM.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16246
IP address blocks: 77.87.232.0/21 maxlen: 21
95.143.128.0/20 maxlen: 20
91.197.116.0/22 maxlen: 22
92.240.160.0/19 maxlen: 19
94.74.192.0/18 maxlen: 18
176.98.96.0/20 maxlen: 20
188.175.0.0/16 maxlen: 16
82.150.160.0/19 maxlen: 19
78.108.144.0/21 maxlen: 21
213.180.32.0/19 maxlen: 19
78.108.152.0/21 maxlen: 21
185.15.252.0/22 maxlen: 22
178.17.96.0/20 maxlen: 20
86.63.192.0/19 maxlen: 19
2a03:b4c0::/32 maxlen: 32
2a02:350::/29 maxlen: 29
2a00:d480::/32 maxlen: 32
2a00:1e60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:eb:33:8f:81:71:26:96:4d:12:50:55:8f:d2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6176246de70ce5988b649ca8a80ef5fab01be13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:cd:7a:ff:4b:c9:98:c6:7c:dd:4b:71:92:
35:d0:1a:83:28:80:93:d9:55:a4:32:ef:31:00:53:
79:e7:33:5f:ab:13:c3:77:e4:df:a8:84:79:15:fe:
6e:c7:4a:61:42:f2:28:ba:8a:fe:dc:b5:8f:83:bd:
eb:80:70:d9:aa:72:f2:78:fc:89:63:44:83:97:3e:
b3:f0:37:e4:ff:a9:70:40:b6:0c:21:0d:02:b6:26:
92:d3:9d:51:34:60:7f:fc:22:95:d9:ce:14:05:78:
86:ab:58:24:c6:bb:00:b5:1f:87:27:bb:31:07:ae:
60:f0:c4:80:7e:d4:b8:ef:86:5c:77:54:8f:47:22:
5e:9d:5f:92:dc:43:c8:a2:27:22:db:21:98:d6:82:
92:44:ea:ed:28:b9:28:ee:ae:3e:9f:8c:d5:01:04:
79:db:db:9f:c9:27:f2:1d:1e:0f:13:a8:4d:70:0b:
65:7d:3b:0e:98:e2:b1:2d:0c:f5:25:86:a5:14:5a:
bd:b1:05:f2:9f:45:c3:83:51:21:59:9a:00:39:3a:
06:b5:06:b0:4a:74:5d:46:38:9b:7c:b1:3e:12:93:
dc:76:59:50:f5:77:82:c6:fa:02:d0:5c:67:e3:15:
17:aa:c9:60:08:e0:1d:7f:a5:dd:74:48:79:c2:65:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:17:62:46:DE:70:CE:59:88:B6:49:CA:8A:80:EF:5F:AB:01:BE:13
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/phdiRt5wzlmItknKioDvX6sBvhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.232.0/21
78.108.144.0/20
82.150.160.0/19
86.63.192.0/19
91.197.116.0/22
92.240.160.0/19
94.74.192.0/18
95.143.128.0/20
176.98.96.0/20
178.17.96.0/20
185.15.252.0/22
188.175.0.0/16
213.180.32.0/19
IPv6:
2a00:1e60::/32
2a00:d480::/32
2a02:350::/29
2a03:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
bf:bf:6a:0d:eb:e6:70:27:26:74:0f:97:e6:c6:29:25:a8:fb:
59:49:73:a1:fa:a0:c9:c9:39:0a:38:82:78:d9:00:cc:a6:c2:
af:21:8b:70:f6:e5:6a:dc:37:f6:00:50:20:82:0f:d2:69:8b:
60:df:a8:85:38:25:70:3a:75:88:5a:a1:df:04:c8:a3:3b:0b:
79:1c:fc:94:91:8e:c3:12:97:ae:3a:cf:1b:26:5f:1c:c2:b7:
21:68:fd:90:6c:9a:92:80:c0:0c:27:09:bf:35:4a:30:c1:81:
90:6e:88:49:9a:95:58:9b:58:69:93:59:5b:d2:08:6b:37:36:
43:57:af:d7:13:53:8e:84:18:9a:11:6a:f6:db:10:2d:df:0d:
36:ea:85:c3:32:b1:22:fb:1c:ef:43:72:2b:b2:75:a6:26:d5:
71:9f:41:e8:78:07:c4:29:9d:59:b4:0d:d3:1d:39:be:a8:d7:
46:de:8a:6b:cb:7e:ab:a3:5e:01:b3:d3:13:5d:1a:0f:57:b8:
05:3a:6a:c3:01:41:5a:94:2a:07:55:06:66:ec:42:6d:8d:96:
39:35:38:a0:65:8e:c1:a6:fc:e1:49:da:56:a3:26:4f:ed:6e:
ca:83:f6:25:2a:a9:b1:54:80:5d:20:1a:91:78:50:e9:c8:7d:
41:e0:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:37:24 2024 by rpki-client on console-fra.rpki-client.org