Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/12HSIlJtXE4Sv-wT-E1nKba7u_s.roa
File: 12HSIlJtXE4Sv-wT-E1nKba7u_s.roa (raw, json)
Hash identifier: c9Ez/2fc2EnWyMgRFd0CVGszU4vS1b+m+eCEc2mG5jQ=
Subject key identifier: D7:61:D2:22:52:6D:5C:4E:12:BF:EC:13:F8:4D:67:29:B6:BB:BB:FB
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 018CC64B4B2A4C20DE0F514B6C1951883CEE
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/12HSIlJtXE4Sv-wT-E1nKba7u_s.roa
Signing time: Mon 01 Jan 2024 18:31:12 +0000
ROA not before: Mon 01 Jan 2024 18:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13138
IP address blocks: 213.148.64.0/23 maxlen: 23
213.148.64.0/24 maxlen: 24
213.148.64.0/20 maxlen: 20
213.148.64.0/19 maxlen: 19
213.148.64.0/22 maxlen: 22
213.148.64.0/21 maxlen: 21
213.148.65.0/24 maxlen: 24
213.148.68.0/22 maxlen: 22
213.148.66.0/24 maxlen: 24
213.148.66.0/23 maxlen: 23
213.148.67.0/24 maxlen: 24
213.148.68.0/24 maxlen: 24
213.148.68.0/23 maxlen: 23
213.148.69.0/24 maxlen: 24
213.148.70.0/24 maxlen: 24
213.148.70.0/23 maxlen: 23
213.148.71.0/24 maxlen: 24
213.148.77.0/24 maxlen: 24
213.148.72.0/22 maxlen: 22
213.148.73.0/24 maxlen: 24
213.148.72.0/21 maxlen: 21
213.148.72.0/23 maxlen: 23
213.148.74.0/23 maxlen: 23
213.148.74.0/24 maxlen: 24
213.148.75.0/24 maxlen: 24
213.148.72.0/24 maxlen: 24
213.148.76.0/24 maxlen: 24
213.148.76.0/23 maxlen: 23
213.148.76.0/22 maxlen: 22
213.148.78.0/24 maxlen: 24
213.148.78.0/23 maxlen: 23
213.148.80.0/23 maxlen: 23
213.148.80.0/21 maxlen: 21
213.148.84.0/22 maxlen: 22
213.148.84.0/24 maxlen: 24
213.148.84.0/23 maxlen: 23
213.148.85.0/24 maxlen: 24
213.148.80.0/20 maxlen: 20
213.148.80.0/22 maxlen: 22
213.148.80.0/24 maxlen: 24
213.148.81.0/24 maxlen: 24
213.148.79.0/24 maxlen: 24
213.148.82.0/24 maxlen: 24
213.148.83.0/24 maxlen: 24
213.148.82.0/23 maxlen: 23
213.148.86.0/23 maxlen: 23
213.148.87.0/24 maxlen: 24
213.148.88.0/24 maxlen: 24
213.148.88.0/23 maxlen: 23
213.148.88.0/22 maxlen: 22
213.148.89.0/24 maxlen: 24
213.148.90.0/23 maxlen: 23
213.148.90.0/24 maxlen: 24
213.148.91.0/24 maxlen: 24
213.148.88.0/21 maxlen: 21
213.148.86.0/24 maxlen: 24
213.148.92.0/24 maxlen: 24
213.148.92.0/23 maxlen: 23
213.148.92.0/22 maxlen: 22
213.148.93.0/24 maxlen: 24
213.148.94.0/23 maxlen: 23
213.148.94.0/24 maxlen: 24
213.148.95.0/24 maxlen: 24
2a0d:5580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4b:2a:4c:20:de:0f:51:4b:6c:19:51:88:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jan 1 18:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d761d222526d5c4e12bfec13f84d6729b6bbbbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:57:72:ae:d5:55:71:cb:97:09:75:d3:f2:
4e:02:57:84:cc:94:f4:3e:90:de:3d:1b:18:50:91:
81:2a:10:57:76:9a:1e:86:ed:ae:96:25:15:f4:a3:
2f:fe:f0:2b:dc:8c:a8:e4:12:85:ed:9b:dc:a2:09:
fc:78:90:77:b2:ad:26:26:42:9f:9b:25:6a:65:c7:
b5:09:35:15:f0:e5:6a:03:06:1e:22:f2:19:55:22:
6e:e6:c5:e0:0b:7f:3a:98:a3:28:40:cc:a9:7b:26:
3c:21:ab:35:75:c9:8d:2c:0b:fd:a7:95:55:d6:d6:
9a:14:70:ab:a3:11:89:2e:27:98:06:37:91:8a:ef:
4e:ae:9c:e0:84:f3:f3:71:eb:aa:75:ff:71:a7:5e:
82:0d:c9:f8:fd:f9:8a:ac:b5:c5:b7:c5:2e:7f:1a:
4d:d8:37:be:40:2a:d9:5b:54:8c:fa:e2:a3:5a:ab:
f7:1c:19:40:01:45:f7:60:e6:8f:b0:d7:cb:a0:b4:
48:71:da:23:d3:7e:14:81:a2:36:32:16:fb:a0:ca:
0b:9b:86:6f:0e:64:79:89:ec:13:57:cf:49:f4:ac:
6d:09:c3:02:7d:37:53:8a:b4:06:32:a9:ac:2e:08:
25:1d:45:ba:4d:d5:79:26:df:1a:63:63:88:74:f5:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:D2:22:52:6D:5C:4E:12:BF:EC:13:F8:4D:67:29:B6:BB:BB:FB
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/12HSIlJtXE4Sv-wT-E1nKba7u_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.64.0/19
IPv6:
2a0d:5580::/29
Signature Algorithm: sha256WithRSAEncryption
bd:38:87:c5:28:a3:60:6a:a7:05:7e:f9:04:65:5a:cd:c2:6e:
59:37:a3:35:5d:44:f2:cd:d8:8e:bc:4d:99:ca:a8:9c:ad:fe:
e3:a0:04:a3:61:88:50:41:9e:52:cc:ef:b5:c3:a0:6d:05:33:
ec:1f:5f:53:24:c9:ad:ed:54:97:f5:69:0c:34:08:d4:3a:50:
b6:43:23:1b:90:c1:8f:94:9a:72:84:07:08:30:d6:8f:71:02:
e6:9c:3f:6e:9b:32:32:ab:66:42:c8:73:02:4f:a9:6f:fb:84:
6b:e9:15:55:a2:2c:eb:eb:e7:f2:29:be:6d:73:80:64:87:02:
9d:24:99:f4:f1:6a:19:c0:c2:fe:f1:28:2d:ff:35:74:d2:1c:
4e:84:7d:3e:6d:df:ba:f5:f4:5d:78:cd:86:9f:35:bf:a3:52:
2b:50:ca:e2:af:d3:98:58:a0:21:e4:96:2a:af:9d:10:1f:6e:
fa:09:a1:35:5c:56:5e:5a:14:04:65:74:f3:03:9c:27:2c:3a:
05:20:d1:37:ad:c9:b1:5b:01:ba:6c:41:10:2c:d7:60:d5:f3:
78:54:db:99:31:56:7a:97:8b:3a:d2:59:18:9b:d9:05:bf:6b:
51:61:a8:64:58:85:f0:e8:59:0c:71:ab:3f:ab:54:cb:e8:3b:
6b:a6:b7:03
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGS0sqTCDeD1FLbBlRiDzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMmVjNWI0MGM3MTcyNzU0MjU1ZDYyNmJmNmM5MjEzYTNk
YWZlNmYwHhcNMjQwMTAxMTgzMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzYxZDIyMjUyNmQ1YzRlMTJiZmVjMTNmODRkNjcyOWI2YmJiYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwtXcq7VVXHLlwl10/JOAleEzJT0
PpDePRsYUJGBKhBXdpoehu2uliUV9KMv/vAr3Iyo5BKF7Zvcogn8eJB3sq0mJkKf
myVqZce1CTUV8OVqAwYeIvIZVSJu5sXgC386mKMoQMypeyY8Ias1dcmNLAv9p5VV
1taaFHCroxGJLieYBjeRiu9OrpzghPPzceuqdf9xp16CDcn4/fmKrLXFt8UufxpN
2De+QCrZW1SM+uKjWqv3HBlAAUX3YOaPsNfLoLRIcdoj034UgaI2Mhb7oMoLm4Zv
DmR5iewTV89J9KxtCcMCfTdTirQGMqmsLgglHUW6TdV5Jt8aY2OIdPVSlwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNdh0iJSbVxOEr/sE/hNZym2u7v7MB8GA1UdIwQY
MBaAFI0uxbQMcXJ1QlXWJr9skhOj2v5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUt
NDE1Y2I1ZjBiYTdlLzEvMTJIU0lsSnRYRTRTdi13VC1FMW5LYmE3dV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUtNDE1Y2I1ZjBiYTdl
LzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1ZRAMA0E
AgACMAcDBQMqDVWAMA0GCSqGSIb3DQEBCwUAA4IBAQC9OIfFKKNgaqcFfvkEZVrN
wm5ZN6M1XUTyzdiOvE2Zyqicrf7joASjYYhQQZ5SzO+1w6BtBTPsH19TJMmt7VSX
9WkMNAjUOlC2QyMbkMGPlJpyhAcIMNaPcQLmnD9umzIyq2ZCyHMCT6lv+4Rr6RVV
oizr6+fyKb5tc4BkhwKdJJn08WoZwML+8Sgt/zV00hxOhH0+bd+69fRdeM2GnzW/
o1IrUMrir9OYWKAh5JYqr50QH276CaE1XFZeWhQEZXTzA5wnLDoFINE3rcmxWwG6
bEEQLNdg1fN4VNuZMVZ6l4s60lkYm9kFv2tRYahkWIXw6FkMcas/q1TL6DtrprcD
-----END CERTIFICATE-----
Generated at Sat Jun 8 09:38:35 2024 by rpki-client on console-fra.rpki-client.org