Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/asEFcA5Am6AbaX_Epik8vjfTiJw.roa
File: asEFcA5Am6AbaX_Epik8vjfTiJw.roa (raw, json)
Hash identifier: H9ObvXA6VBxqfjCXaRA9kiSaq6ZVW+VTptjmLm9rPl4=
Subject key identifier: 6A:C1:05:70:0E:40:9B:A0:1B:69:7F:C4:A6:29:3C:BE:37:D3:88:9C
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01919E6322E84C6DB75FA1B0B037EC8B9D25
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/asEFcA5Am6AbaX_Epik8vjfTiJw.roa
Signing time: Thu 29 Aug 2024 13:46:22 +0000
ROA not before: Thu 29 Aug 2024 13:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208687
IP address blocks: 45.89.4.0/22 maxlen: 24
141.195.128.0/18 maxlen: 24
141.195.160.0/24 maxlen: 24
141.195.161.0/24 maxlen: 24
141.195.162.0/24 maxlen: 24
141.195.179.0/24 maxlen: 24
141.195.181.0/24 maxlen: 24
141.195.182.0/24 maxlen: 24
141.195.184.0/24 maxlen: 24
141.195.188.0/24 maxlen: 24
141.195.189.0/24 maxlen: 24
141.195.190.0/23 maxlen: 24
185.147.244.0/23 maxlen: 24
185.147.244.0/24 maxlen: 24
185.147.245.0/24 maxlen: 24
2a0a:5580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:63:22:e8:4c:6d:b7:5f:a1:b0:b0:37:ec:8b:9d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Aug 29 13:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ac105700e409ba01b697fc4a6293cbe37d3889c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:78:4f:f0:1d:dc:57:fc:6f:af:2e:24:1f:
fe:7a:94:39:fd:19:02:91:66:19:3e:3a:e5:19:14:
05:5a:e5:a6:47:a7:d8:fc:f8:84:29:d2:25:60:62:
f8:8d:33:99:6a:85:e7:89:ec:5a:ee:52:63:58:f3:
7a:90:2e:aa:3a:f9:ed:2c:8a:a4:15:30:c9:f8:ce:
61:02:74:cd:b8:89:b6:08:ac:2b:7a:50:98:fb:b6:
98:f0:33:a0:cc:cc:58:b0:d0:0e:4f:71:69:6a:6a:
49:79:9f:b7:5c:7d:79:6b:a2:70:6e:ba:cc:f9:0d:
6f:f2:c4:fe:5e:7b:c6:f9:d6:48:41:5e:e3:d4:69:
c8:0a:3a:13:3a:d5:96:e7:76:bd:4a:07:c7:a6:79:
ec:2f:bc:19:92:f3:6f:a8:ba:94:53:96:38:0f:e0:
9d:77:d8:56:c4:ae:e4:0a:c4:db:c7:60:33:ad:46:
ca:4e:cc:b7:04:b6:5f:c1:26:18:9f:fe:78:5c:fe:
6c:b1:63:05:f9:a3:98:b9:e6:96:79:41:d0:a2:4d:
cc:98:18:c1:95:e4:2c:64:32:7e:4c:96:29:8e:a1:
a6:c6:fa:f7:94:ba:7a:fa:77:33:8e:b0:af:bb:92:
b7:82:44:71:bb:70:1f:74:8b:a6:4e:4e:83:ca:70:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:05:70:0E:40:9B:A0:1B:69:7F:C4:A6:29:3C:BE:37:D3:88:9C
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/asEFcA5Am6AbaX_Epik8vjfTiJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.4.0/22
141.195.128.0/18
185.147.244.0/23
IPv6:
2a0a:5580::/29
Signature Algorithm: sha256WithRSAEncryption
ad:91:40:d4:a2:6a:8a:54:7e:21:d4:04:9f:22:ca:e8:0e:f1:
51:24:1c:86:e7:d0:b3:20:69:1d:73:9e:37:b4:f6:6e:48:9a:
29:50:e8:27:08:ff:03:dd:28:3e:bd:f4:3d:84:f3:dc:71:d3:
14:b9:16:fb:c6:85:8f:e4:f2:5e:1b:50:13:79:b5:e2:c8:d5:
68:a5:49:7d:6f:d8:ec:2d:e1:31:c3:c3:fa:05:6e:69:bd:15:
22:73:6e:0b:89:fc:ea:73:cc:18:a2:1c:c4:df:10:3e:ac:de:
6e:2c:46:ca:f7:84:81:47:e9:15:5e:da:cc:73:3e:62:13:e2:
c9:ec:2a:83:b8:d5:09:bb:4a:02:74:41:13:fa:82:ff:58:90:
fb:08:ca:31:68:f3:b4:40:0b:12:de:a3:c4:ca:fb:c1:dd:c2:
e8:0b:b4:ac:6c:ee:ea:d2:ad:8c:0c:c0:09:e7:08:a2:00:d3:
b8:d4:07:7c:a6:64:ed:20:ca:6e:bd:25:2a:78:ed:e2:f8:e0:
bb:ab:b3:88:0b:b8:e7:0d:da:90:39:84:56:e9:56:ed:22:7e:
19:ce:ce:3d:50:cb:29:13:0c:ab:95:2e:56:ec:a6:aa:aa:a6:
e9:84:79:33:8f:bf:60:c7:89:c2:4d:26:1f:cf:fa:46:da:ad:
39:24:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:32:02 2024 by rpki-client on console-fra.rpki-client.org