Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/zOTpaHr0ClRTipN9qF4bygILRhg.roa
File: zOTpaHr0ClRTipN9qF4bygILRhg.roa (raw, json)
Hash identifier: bmV1W2GWyPEjkzxfllg7KxpC4x9NdGzGjJZ4+IQp+IM=
Subject key identifier: CC:E4:E9:68:7A:F4:0A:54:53:8A:93:7D:A8:5E:1B:CA:02:0B:46:18
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 01910988C8754A50733FDF6E831563ADE7E3
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/zOTpaHr0ClRTipN9qF4bygILRhg.roa
Signing time: Wed 31 Jul 2024 16:04:04 +0000
ROA not before: Wed 31 Jul 2024 16:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1273
IP address blocks: 62.25.64.0/18 maxlen: 18
62.208.0.0/16 maxlen: 16
62.221.0.0/19 maxlen: 19
141.1.0.0/16 maxlen: 16
185.204.4.0/22 maxlen: 22
193.164.160.0/19 maxlen: 19
194.6.0.0/18 maxlen: 18
194.6.64.0/19 maxlen: 19
194.112.64.0/18 maxlen: 18
194.152.64.0/19 maxlen: 19
194.176.128.0/19 maxlen: 19
194.177.160.0/19 maxlen: 19
194.205.0.0/16 maxlen: 16
194.221.0.0/16 maxlen: 16
195.2.0.0/19 maxlen: 19
195.10.0.0/18 maxlen: 18
195.27.0.0/16 maxlen: 16
195.44.0.0/16 maxlen: 16
195.59.0.0/16 maxlen: 16
195.80.64.0/19 maxlen: 19
195.89.0.0/16 maxlen: 16
195.89.13.0/24 maxlen: 24
195.92.0.0/16 maxlen: 16
195.144.128.0/19 maxlen: 19
212.62.0.0/19 maxlen: 19
212.137.0.0/16 maxlen: 16
212.158.0.0/17 maxlen: 17
212.165.0.0/19 maxlen: 19
213.12.0.0/16 maxlen: 16
213.38.0.0/16 maxlen: 16
213.185.192.0/19 maxlen: 19
213.216.128.0/18 maxlen: 18
217.134.0.0/15 maxlen: 15
217.135.0.0/16 maxlen: 16
217.161.0.0/16 maxlen: 16
2001:5000::/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:88:c8:75:4a:50:73:3f:df:6e:83:15:63:ad:e7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jul 31 16:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cce4e9687af40a54538a937da85e1bca020b4618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:18:1b:44:3d:6d:a6:ed:75:6c:54:6a:75:
a5:59:94:1b:c7:13:30:86:93:7f:b0:6e:f1:89:6b:
06:e1:6d:0a:b9:f2:9f:58:f2:84:93:57:33:9b:fc:
c2:e7:1e:1e:cd:b8:02:4a:e8:69:1d:db:96:07:8c:
88:a1:c9:b2:2f:af:ab:1d:3a:54:c5:10:e8:ce:42:
69:1f:e4:c7:5b:2c:81:cb:e7:25:f8:75:bc:f6:56:
5b:3d:f0:81:76:86:e1:ef:09:2f:5d:7c:68:ee:65:
48:23:c3:cc:e7:9f:a7:79:a1:69:0c:23:4a:92:7f:
10:8a:b5:2e:30:8a:22:11:d8:9d:d3:f8:4c:ff:8c:
f0:64:8c:0b:88:d2:99:be:80:15:72:26:10:ed:be:
9c:79:ad:af:ed:05:bd:28:e9:2b:96:0c:bf:43:a8:
8a:8e:26:7c:7b:4f:21:7e:36:b6:22:c0:b1:33:9f:
64:ea:64:f7:b6:39:8a:76:88:5e:ff:1b:55:88:62:
0c:5b:94:26:50:65:f2:d9:36:99:bc:9b:c4:0f:bb:
c7:c7:f6:67:d5:54:11:49:ec:2a:64:09:a3:3b:85:
80:4e:42:6e:02:ba:41:6c:44:58:1a:4c:80:b3:89:
ad:00:a2:7d:ed:2d:e3:ec:bc:de:81:c3:0c:3b:8c:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E4:E9:68:7A:F4:0A:54:53:8A:93:7D:A8:5E:1B:CA:02:0B:46:18
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/zOTpaHr0ClRTipN9qF4bygILRhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.64.0/18
62.208.0.0/16
62.221.0.0/19
141.1.0.0/16
185.204.4.0/22
193.164.160.0/19
194.6.0.0-194.6.95.255
194.112.64.0/18
194.152.64.0/19
194.176.128.0/19
194.177.160.0/19
194.205.0.0/16
194.221.0.0/16
195.2.0.0/19
195.10.0.0/18
195.27.0.0/16
195.44.0.0/16
195.59.0.0/16
195.80.64.0/19
195.89.0.0/16
195.92.0.0/16
195.144.128.0/19
212.62.0.0/19
212.137.0.0/16
212.158.0.0/17
212.165.0.0/19
213.12.0.0/16
213.38.0.0/16
213.185.192.0/19
213.216.128.0/18
217.134.0.0/15
217.161.0.0/16
IPv6:
2001:5000::/21
Signature Algorithm: sha256WithRSAEncryption
3a:cc:37:d1:08:49:ef:b9:b2:b5:d1:bf:de:35:07:34:ce:7b:
f1:0e:53:10:ae:05:3f:d5:e6:e9:cc:0a:a8:12:e2:d5:da:3d:
bf:2f:23:94:4c:96:73:6d:61:be:bd:04:97:a9:ae:c9:33:2c:
ec:7b:27:39:11:52:2f:79:19:60:b1:83:fc:09:94:94:a4:ff:
8d:13:b0:42:cd:f0:b3:6e:7d:15:ab:46:e9:5a:bd:e4:5a:49:
8c:94:20:04:a3:61:f4:e5:c5:90:ad:2b:c0:3f:42:6e:6d:e5:
22:45:c0:d6:d0:4b:01:bc:28:a9:5c:f2:2b:e2:54:40:c8:5a:
dd:13:ff:6e:56:cb:08:c6:9a:90:51:a2:57:3a:db:09:59:9f:
f1:ca:f9:8c:b7:f9:49:1b:48:6a:3e:f1:36:90:9a:29:0f:36:
46:58:4d:34:42:0c:59:d8:c1:20:6d:eb:da:fb:00:94:df:b8:
1a:57:a7:6f:8c:f3:ae:8e:12:42:6c:50:0b:8b:6a:a7:82:ef:
b1:e2:b4:b0:7e:fa:cc:22:98:73:1f:07:29:c0:b0:0f:71:f3:
58:7b:92:8f:d6:76:a0:0f:7f:3b:b7:cf:be:39:2b:30:d1:f4:
20:d4:e0:04:fb:f5:88:bc:9d:47:ee:d0:29:7c:9e:3c:3b:0f:
58:b6:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:35 2024 by rpki-client on console-ams.rpki-client.org