Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/b0cYoccwccQC3zEm4oONDgMWxbg.roa
File: b0cYoccwccQC3zEm4oONDgMWxbg.roa (raw, json)
Hash identifier: nfmyYUFnyAkUIhnVoWF3wcjRNpKcV3qEsYXl80VnEPs=
Subject key identifier: 6F:47:18:A1:C7:30:71:C4:02:DF:31:26:E2:83:8D:0E:03:16:C5:B8
Certificate issuer: /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial: 018CC9BCB27D227E818F2F88295037571F9C
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/b0cYoccwccQC3zEm4oONDgMWxbg.roa
Signing time: Tue 02 Jan 2024 10:33:56 +0000
ROA not before: Tue 02 Jan 2024 10:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9158
IP address blocks: 94.144.0.0/13 maxlen: 13
212.242.0.0/16 maxlen: 16
213.237.0.0/17 maxlen: 17
85.80.0.0/14 maxlen: 14
213.83.128.0/17 maxlen: 17
5.33.0.0/16 maxlen: 16
62.79.0.0/16 maxlen: 16
77.212.0.0/14 maxlen: 14
130.227.0.0/16 maxlen: 16
83.72.0.0/14 maxlen: 14
192.38.128.0/17 maxlen: 17
195.82.192.0/19 maxlen: 19
195.47.128.0/18 maxlen: 18
212.54.64.0/19 maxlen: 19
62.66.0.0/16 maxlen: 16
62.121.160.0/19 maxlen: 19
217.157.0.0/16 maxlen: 16
37.96.0.0/16 maxlen: 16
80.91.0.0/20 maxlen: 20
2.128.0.0/14 maxlen: 14
130.228.0.0/16 maxlen: 16
212.88.64.0/19 maxlen: 19
185.116.184.0/22 maxlen: 22
129.142.0.0/16 maxlen: 16
2001:1580::/32 maxlen: 32
2a02:2a30::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b2:7d:22:7e:81:8f:2f:88:29:50:37:57:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Validity
Not Before: Jan 2 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f4718a1c73071c402df3126e2838d0e0316c5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:b2:f0:3d:13:19:0a:c5:c1:8b:dd:16:5f:
ee:54:cd:2a:f6:b4:52:02:38:9d:45:98:02:af:05:
da:d1:42:c3:86:ff:9a:e5:a6:db:45:38:e2:d6:11:
6f:64:46:c1:65:a1:b2:28:10:d1:a3:13:90:19:6d:
38:76:cd:74:b3:3e:10:37:0a:87:88:77:28:54:4b:
aa:50:1f:0e:d5:c6:f4:12:42:8a:29:d8:f9:82:5c:
d4:63:c6:8c:8e:02:d2:8d:b7:95:43:5b:5d:aa:5d:
35:5a:24:17:00:44:6d:13:6e:8e:3c:dd:a0:8b:a7:
a8:3c:7f:44:18:18:f8:3a:e6:ff:82:d8:a4:55:9f:
45:44:f1:f1:77:01:ed:0f:4d:7d:cb:a5:30:4a:d5:
cc:c0:64:5e:71:de:ef:0c:0b:07:8c:60:8c:3a:2c:
7a:39:81:17:b5:a3:c7:a0:bf:23:ad:d8:19:94:97:
3d:d5:88:4f:36:d8:02:2f:85:29:3b:05:8e:de:4b:
76:7c:a5:d6:4d:22:63:69:40:e9:48:b7:67:5b:88:
d1:79:13:cc:74:3a:1e:b8:ee:49:da:12:3f:66:41:
06:1d:74:90:f6:05:0b:2b:66:ae:02:b6:7e:55:5d:
0a:9a:cb:7e:1f:0d:a8:7d:0e:2f:24:11:ae:0c:73:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:18:A1:C7:30:71:C4:02:DF:31:26:E2:83:8D:0E:03:16:C5:B8
X509v3 Authority Key Identifier:
keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/b0cYoccwccQC3zEm4oONDgMWxbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.128.0.0/14
5.33.0.0/16
37.96.0.0/16
62.66.0.0/16
62.79.0.0/16
62.121.160.0/19
77.212.0.0/14
80.91.0.0/20
83.72.0.0/14
85.80.0.0/14
94.144.0.0/13
129.142.0.0/16
130.227.0.0-130.228.255.255
185.116.184.0/22
192.38.128.0/17
195.47.128.0/18
195.82.192.0/19
212.54.64.0/19
212.88.64.0/19
212.242.0.0/16
213.83.128.0/17
213.237.0.0/17
217.157.0.0/16
IPv6:
2001:1580::/32
2a02:2a30::/29
Signature Algorithm: sha256WithRSAEncryption
cd:a8:4c:e7:23:09:76:a9:78:e3:e5:14:90:f1:20:a4:47:50:
62:c0:2d:81:e4:88:d7:66:01:ab:46:48:a4:73:df:8e:b3:95:
68:03:5b:d1:b9:2e:86:9e:dd:5a:57:4e:38:10:8a:a9:26:4a:
06:58:b5:78:a8:17:d6:2e:e2:86:2d:cf:43:de:5b:cd:fd:84:
d4:15:e4:65:04:71:d7:0c:61:5d:65:0f:2d:aa:3f:aa:9e:a6:
af:c7:33:fa:78:a6:31:d0:fb:91:e5:12:b7:7d:f5:0f:6c:f4:
ec:5c:17:01:66:1e:10:0a:67:07:44:36:8a:15:19:14:14:1c:
1b:0b:54:c3:fe:71:d8:6b:7e:2c:1a:a0:4b:28:7c:f8:d0:2d:
39:0f:96:fa:24:2d:21:27:1c:28:1a:a1:b2:1c:f4:3d:ef:34:
05:11:f7:ae:f3:7a:d1:dd:60:e8:0a:8e:0f:61:aa:27:9e:a0:
6e:24:87:f0:2d:d7:fe:2b:2e:89:c1:6d:ea:56:64:00:fa:64:
8d:9f:12:c3:d7:b6:0a:d3:b5:7f:6e:fe:1f:57:6a:0f:41:c5:
26:f9:1c:1c:fd:08:50:f4:9c:df:68:1a:40:14:e9:de:b1:a9:
a3:d6:c2:a6:c2:6a:f6:70:3b:62:f8:18:9c:7d:84:1e:9b:4a:
33:58:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:48:43 2024 by rpki-client on console-fra.rpki-client.org