Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/OQox06pLEnt26UlmGrenSGeUMIA.roa
File: OQox06pLEnt26UlmGrenSGeUMIA.roa (raw, json)
Hash identifier: 4TxjDBu4uNcMFs69ruR4d+ZDhugDepjqGfNk7s7fsgc=
Subject key identifier: 39:0A:31:D3:AA:4B:12:7B:76:E9:49:66:1A:B7:A7:48:67:94:30:80
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 018CC64B4ABD814690BAEDEB7F22F9A4A0D0
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/OQox06pLEnt26UlmGrenSGeUMIA.roa
Signing time: Mon 01 Jan 2024 18:31:12 +0000
ROA not before: Mon 01 Jan 2024 18:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 213.148.64.0/24 maxlen: 24
213.148.71.0/24 maxlen: 24
213.148.68.0/24 maxlen: 24
213.148.69.0/24 maxlen: 24
213.148.70.0/24 maxlen: 24
213.148.65.0/24 maxlen: 24
213.148.66.0/24 maxlen: 24
213.148.67.0/24 maxlen: 24
213.148.75.0/24 maxlen: 24
213.148.76.0/24 maxlen: 24
213.148.77.0/24 maxlen: 24
213.148.72.0/24 maxlen: 24
213.148.73.0/24 maxlen: 24
213.148.74.0/24 maxlen: 24
213.148.78.0/24 maxlen: 24
213.148.85.0/24 maxlen: 24
213.148.82.0/24 maxlen: 24
213.148.83.0/24 maxlen: 24
213.148.84.0/24 maxlen: 24
213.148.79.0/24 maxlen: 24
213.148.80.0/24 maxlen: 24
213.148.81.0/24 maxlen: 24
213.148.89.0/24 maxlen: 24
213.148.90.0/24 maxlen: 24
213.148.91.0/24 maxlen: 24
213.148.86.0/24 maxlen: 24
213.148.87.0/24 maxlen: 24
213.148.88.0/24 maxlen: 24
213.148.92.0/24 maxlen: 24
213.148.93.0/24 maxlen: 24
213.148.94.0/24 maxlen: 24
213.148.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4a:bd:81:46:90:ba:ed:eb:7f:22:f9:a4:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jan 1 18:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=390a31d3aa4b127b76e949661ab7a74867943080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f8:5d:3d:63:d9:49:c0:ee:17:ee:ea:3b:84:
cf:f2:48:bd:15:bb:04:65:50:00:f1:dd:0c:cd:73:
11:8d:da:6f:a4:68:fd:0d:3c:cd:49:61:30:76:62:
8b:1d:bf:65:dd:18:40:d4:eb:de:85:60:b9:90:73:
13:e7:b9:72:2a:e0:b1:41:23:9a:8f:b5:6d:af:bf:
ae:0b:40:ba:f1:a2:5b:0f:cb:da:1b:72:9b:32:e7:
e9:c4:83:11:83:72:25:0b:96:90:b8:84:e5:cd:2b:
5b:c4:68:07:d6:68:2e:1c:d2:67:2e:d6:98:e9:08:
be:7e:22:27:2e:97:d6:81:fc:84:57:18:1c:6b:4a:
02:86:e6:f4:97:21:09:8d:f7:8d:d4:20:92:91:57:
19:a9:6b:87:6f:97:be:f5:91:e4:60:f5:0b:ed:81:
36:35:b5:4e:c8:2a:fc:82:5c:6d:4b:e4:32:78:cd:
9d:9c:a0:ef:c7:e3:ac:e1:83:61:ef:3e:31:77:cf:
cd:75:18:c1:79:82:c1:4a:0d:bf:5e:fb:cc:53:40:
43:ad:ed:2e:75:52:16:b1:ed:4d:fa:df:a0:8b:fe:
86:d8:93:9f:61:4a:38:14:b5:3a:10:87:48:28:b9:
1b:b6:c3:8c:16:09:53:e4:b0:97:90:56:8e:5b:c9:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0A:31:D3:AA:4B:12:7B:76:E9:49:66:1A:B7:A7:48:67:94:30:80
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/OQox06pLEnt26UlmGrenSGeUMIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.64.0/19
Signature Algorithm: sha256WithRSAEncryption
53:6f:54:15:8e:84:52:d1:f0:aa:16:98:7b:98:d2:0f:c3:d9:
e9:8f:a4:db:29:c1:07:ad:37:c9:09:4c:50:c3:c4:23:2a:e3:
13:ee:a0:86:83:89:6a:8d:a5:ec:24:01:0e:7e:57:2c:a8:4e:
d9:70:b1:69:34:01:17:d9:f3:d9:23:51:ce:46:df:17:73:20:
93:2f:7a:53:fb:f9:97:30:ea:7d:b3:9f:b6:84:09:e6:7d:86:
cf:c1:27:ec:01:15:ae:7f:70:df:6e:92:ac:75:f0:dc:e5:e0:
d9:75:cc:82:98:53:3f:3b:81:68:b0:40:84:96:29:28:23:cf:
f6:77:cd:af:18:44:15:10:67:09:83:01:c8:24:e7:ad:2f:b8:
35:4c:dd:5b:72:de:e3:33:ae:d9:b4:14:90:0b:29:11:60:7a:
e3:da:0e:e6:a6:aa:33:f5:d6:eb:71:09:33:4d:08:9a:52:f3:
04:1a:91:ed:e5:ec:ce:4e:59:94:e3:6d:76:4e:1c:e8:f4:dd:
50:b7:a5:8e:45:f3:35:c0:3e:20:5b:a3:3f:c0:f9:5f:f3:6a:
74:01:8d:75:7e:a0:d0:0b:3b:71:76:74:5f:44:ed:5c:0c:21:
81:ff:26:58:b9:e3:4a:0a:dd:e5:bb:44:32:82:e2:39:2f:8e:
4e:1a:c5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:45:50 2024 by rpki-client on console-fra.rpki-client.org