Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/eeC-TTpD-Z8uN8O6_ztFckWQpfQ.roa
File: eeC-TTpD-Z8uN8O6_ztFckWQpfQ.roa (raw, json)
Hash identifier: TcLFZ4wmrllV7N0QqKLzfZFKhOS4m2lTsgp/PuOQrU8=
Subject key identifier: 79:E0:BE:4D:3A:43:F9:9F:2E:37:C3:BA:FF:3B:45:72:45:90:A5:F4
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0191E4E6FDD5F0AA58EFDAEA69942D69D191
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/eeC-TTpD-Z8uN8O6_ztFckWQpfQ.roa
Signing time: Thu 12 Sep 2024 06:23:49 +0000
ROA not before: Thu 12 Sep 2024 06:23:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 23.252.67.0/24 maxlen: 24
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.75.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
107.150.162.0/23 maxlen: 23
107.150.171.0/24 maxlen: 24
107.150.175.0/24 maxlen: 24
107.150.177.0/24 maxlen: 24
162.222.88.0/23 maxlen: 23
162.222.90.0/24 maxlen: 24
167.160.4.0/24 maxlen: 24
167.160.11.0/24 maxlen: 24
167.160.19.0/24 maxlen: 24
167.160.21.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
167.160.30.0/24 maxlen: 24
185.4.224.0/23 maxlen: 23
185.162.72.0/23 maxlen: 23
185.165.47.0/24 maxlen: 24
185.252.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:e6:fd:d5:f0:aa:58:ef:da:ea:69:94:2d:69:d1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 12 06:23:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79e0be4d3a43f99f2e37c3baff3b45724590a5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:c2:b3:f4:04:d8:f8:4e:a7:d6:a6:6b:ce:
0d:64:18:64:de:ff:ca:31:dc:92:73:1a:7c:8d:f1:
5f:00:5c:de:c6:eb:bd:6f:32:8a:57:94:b5:db:2c:
45:ba:e8:78:98:fe:62:e3:26:e1:52:2d:f8:38:d5:
24:b3:0b:53:e8:45:02:88:20:8d:66:f5:ed:0a:61:
c1:7e:ea:0e:57:60:c3:0e:e5:59:e3:6f:74:01:5e:
30:c7:73:21:94:3c:5a:b8:9d:d4:1d:7e:15:3a:51:
ec:8d:3d:c9:6b:8e:13:78:f2:cb:82:e0:e7:22:49:
12:f3:e2:de:32:d0:86:88:34:d1:f5:60:36:6a:11:
6c:61:7d:aa:2c:c4:c7:ed:82:6a:7b:da:a1:16:6a:
e0:6b:9d:70:7a:ab:da:0a:0e:1e:38:cf:91:1d:05:
66:ea:33:8b:76:a1:d7:5d:77:8c:17:eb:81:a7:98:
5f:c8:b5:92:04:fd:fc:e0:2e:99:2d:8e:53:8b:c4:
d1:6e:d9:fa:8d:0f:37:ec:b7:7d:99:5a:8f:5f:3a:
b1:ae:55:90:c0:a8:93:49:23:02:d2:71:cf:62:2d:
2f:db:c2:32:1c:fc:28:ec:16:5d:cc:d5:88:13:d8:
bf:0b:37:b5:d6:30:ce:13:fe:c1:de:8e:27:e6:c1:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E0:BE:4D:3A:43:F9:9F:2E:37:C3:BA:FF:3B:45:72:45:90:A5:F4
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/eeC-TTpD-Z8uN8O6_ztFckWQpfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.67.0-23.252.68.255
23.252.71.0/24
23.252.75.0-23.252.76.255
23.252.79.0/24
107.150.162.0/23
107.150.171.0/24
107.150.175.0/24
107.150.177.0/24
162.222.88.0-162.222.90.255
167.160.4.0/24
167.160.11.0/24
167.160.19.0/24
167.160.21.0/24
167.160.27.0/24
167.160.30.0/24
185.4.224.0/23
185.162.72.0/23
185.165.47.0/24
185.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
39:14:cc:f0:5d:f8:2a:3b:b6:8d:a3:69:29:e0:52:aa:da:7c:
a0:15:f8:11:59:f9:22:70:2d:87:51:e5:f1:58:6d:2a:81:32:
48:27:d6:67:dd:2a:23:1a:b2:15:eb:26:58:75:16:e5:b3:20:
4f:c5:da:d8:1a:eb:1e:dc:6a:db:1d:d8:bf:02:f6:58:3e:ba:
d4:ca:c0:61:c7:be:f4:92:17:d8:ff:ee:dc:86:88:49:82:0b:
f8:b6:0f:9c:ca:f1:e9:8b:c7:ba:22:ea:c1:90:ae:f4:cc:22:
b0:87:92:e3:2f:99:13:d4:b7:85:8a:51:05:3e:20:1f:38:e7:
b7:b5:a1:74:bd:db:41:c7:2b:83:d4:34:29:ef:be:d2:26:40:
dd:92:83:b6:7a:2a:51:70:41:70:f6:70:19:93:02:27:e6:3b:
11:53:b8:82:97:c9:3a:43:73:5f:c9:b3:63:2d:12:60:e0:a0:
4b:d3:f5:67:54:9a:10:4d:fa:76:b9:e5:95:85:5a:52:88:7e:
62:d9:62:3a:90:af:1b:03:4a:07:eb:d2:bc:fc:e6:fa:22:c2:
00:79:ab:63:2d:6e:04:2b:91:3b:4e:bd:75:e4:04:23:23:65:
81:28:49:a6:bc:94:70:bf:32:ea:24:f9:6e:0f:a7:d8:ae:a6:
22:41:a2:8a
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZHk5v3V8KpY79rqaZQtadGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjQwOTEyMDYyMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWUwYmU0ZDNhNDNmOTlmMmUzN2MzYmFmZjNiNDU3MjQ1OTBhNWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGXCs/QE2PhOp9ama84NZBhk3v/K
MdyScxp8jfFfAFzexuu9bzKKV5S12yxFuuh4mP5i4ybhUi34ONUkswtT6EUCiCCN
ZvXtCmHBfuoOV2DDDuVZ4290AV4wx3MhlDxauJ3UHX4VOlHsjT3Ja44TePLLguDn
IkkS8+LeMtCGiDTR9WA2ahFsYX2qLMTH7YJqe9qhFmrga51weqvaCg4eOM+RHQVm
6jOLdqHXXXeMF+uBp5hfyLWSBP384C6ZLY5Ti8TRbtn6jQ837Ld9mVqPXzqxrlWQ
wKiTSSMC0nHPYi0v28IyHPwo7BZdzNWIE9i/Cze11jDOE/7B3o4n5sHtxwIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFHngvk06Q/mfLjfDuv87RXJFkKX0MB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvZWVDLVRUcEQtWjh1TjhPNl96dEZja1dRcGZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYowDAME
ABf8QwMEABf8RAMEABf8RzAMAwQAF/xLAwQAF/xMAwQAF/xPAwQBa5aiAwQAa5ar
AwQAa5avAwQAa5axMAwDBAOi3lgDBACi3loDBACnoAQDBACnoAsDBACnoBMDBACn
oBUDBACnoBsDBACnoB4DBAG5BOADBAG5okgDBAC5pS8DBAC5/NIwDQYJKoZIhvcN
AQELBQADggEBADkUzPBd+Co7to2jaSngUqrafKAV+BFZ+SJwLYdR5fFYbSqBMkgn
1mfdKiMashXrJlh1FuWzIE/F2tga6x7catsd2L8C9lg+utTKwGHHvvSSF9j/7tyG
iEmCC/i2D5zK8emLx7oi6sGQrvTMIrCHkuMvmRPUt4WKUQU+IB8457e1oXS920HH
K4PUNCnvvtImQN2Sg7Z6KlFwQXD2cBmTAifmOxFTuIKXyTpDc1/Js2MtEmDgoEvT
9WdUmhBN+na55ZWFWlKIfmLZYjqQrxsDSgfr0rz85voiwgB5q2MtbgQrkTtOvXXk
BCMjZYEoSaa8lHC/Muok+W4Pp9iupiJBooo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:23 2024 by rpki-client on console-fra.rpki-client.org