Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/fp8gzEDKtYikspMecjEpcceoR9o.roa
File: fp8gzEDKtYikspMecjEpcceoR9o.roa (raw, json)
Hash identifier: eLE32kkcjJW8BxEnYDQhx1QKNcY+t5lDXzkjKtoc1rI=
Subject key identifier: 7E:9F:20:CC:40:CA:B5:88:A4:B2:93:1E:72:31:29:71:C7:A8:47:DA
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018F5314187300A76B87B467005B563E7063
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/fp8gzEDKtYikspMecjEpcceoR9o.roa
Signing time: Tue 07 May 2024 12:42:56 +0000
ROA not before: Tue 07 May 2024 12:42:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 23
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 23
94.182.244.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 20
151.247.16.0/22 maxlen: 22
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 22
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
217.60.188.0/22 maxlen: 22
217.60.192.0/22 maxlen: 22
217.60.196.0/22 maxlen: 22
217.60.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:14:18:73:00:a7:6b:87:b4:67:00:5b:56:3e:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: May 7 12:42:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e9f20cc40cab588a4b2931e72312971c7a847da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:a0:b5:c6:ac:57:0e:74:38:51:2c:72:ea:
9c:69:d2:78:ab:15:78:9b:f5:29:43:80:ee:64:7a:
58:f6:f3:f7:9c:bf:6c:94:61:ec:0c:b9:f7:b7:3c:
78:08:8a:f4:2a:d7:1a:ad:4c:e2:27:7b:a8:6d:8c:
df:36:34:7d:96:c2:d9:00:e4:fc:4e:a8:23:22:ed:
c0:e7:a4:bd:be:fe:94:0b:ae:f0:b4:75:e5:89:50:
04:c3:fe:e5:f0:29:22:d1:24:7f:21:0c:3e:a6:05:
71:0e:c6:74:88:6d:1e:b1:ef:a1:73:e4:3c:63:e3:
1f:a6:3c:9f:ec:fd:b5:cf:f4:e8:d7:3a:11:fa:a3:
3d:0f:28:ee:b7:60:14:ff:4a:73:37:4f:8e:26:70:
b7:c5:90:61:af:6e:0e:a4:56:97:17:20:be:22:be:
ff:71:2c:54:8a:19:7f:89:35:ca:c0:0f:fd:2f:01:
d8:36:9f:9c:61:e0:33:79:12:28:18:5b:0a:02:38:
e6:82:ca:7e:0d:7c:c9:c0:9f:a7:cc:59:a1:7a:b4:
93:79:ca:cd:39:e2:8b:82:51:7b:3b:fa:bc:b1:0c:
d5:da:b1:4d:e9:ff:c6:c0:4c:cf:37:28:1b:96:5c:
d2:40:29:91:20:bd:81:8c:76:e3:7b:b1:61:fc:70:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9F:20:CC:40:CA:B5:88:A4:B2:93:1E:72:31:29:71:C7:A8:47:DA
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/fp8gzEDKtYikspMecjEpcceoR9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
217.60.188.0-217.60.203.255
Signature Algorithm: sha256WithRSAEncryption
1c:6e:4d:bb:61:6b:10:a5:16:54:0b:98:3e:70:85:66:cd:54:
83:a8:30:7b:54:c6:05:f2:c0:0b:dd:94:86:29:05:59:e7:5f:
03:ba:07:e1:3a:8f:db:61:4a:37:46:49:6f:da:80:1a:13:0d:
17:cb:fb:78:fb:1b:6a:9d:15:80:a5:1c:90:b8:84:39:a8:f8:
78:cf:78:bc:5c:36:7b:cb:4b:b4:7b:5c:f8:bb:b9:6d:2b:95:
d1:18:fe:00:2e:9b:ae:19:fa:25:75:d2:3d:82:02:ee:00:ff:
de:a1:a0:e7:ab:f7:dc:2b:46:53:00:2d:43:07:95:52:12:07:
7e:9d:8c:eb:47:25:db:2b:62:24:41:59:46:02:87:1a:bd:1a:
b0:ec:d9:10:9d:76:c0:04:a7:5c:fa:b3:32:1c:ad:3d:b5:25:
84:d2:5c:d6:eb:3d:e0:de:0b:a6:0a:17:04:c3:09:d0:6a:04:
b3:e6:28:2a:d7:56:d9:f3:7a:da:b7:af:32:f0:43:9f:d4:7e:
2a:05:58:18:d9:ce:d5:c3:6f:c9:f0:3d:ab:9b:77:b7:21:e4:
a7:9b:14:ea:aa:50:7e:d0:0f:3b:1c:24:c1:54:65:35:2a:0d:
47:f3:b9:51:8d:76:55:ad:ea:89:b4:24:97:e3:77:75:5e:84:
b4:13:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 12:35:05 2024 by rpki-client on console-ams.rpki-client.org