Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/oS-fNv5NWYpkhUFvD6uSEw9rpqk.roa
File: oS-fNv5NWYpkhUFvD6uSEw9rpqk.roa (raw, json)
Hash identifier: CX02VG3apaSiekOtp3IPm/ZcfoXEFo9RXura+RII2l8=
Subject key identifier: A1:2F:9F:36:FE:4D:59:8A:64:85:41:6F:0F:AB:92:13:0F:6B:A6:A9
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBC9006CABA77DC5DC5445E67DD976
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/oS-fNv5NWYpkhUFvD6uSEw9rpqk.roa
Signing time: Tue 02 Jan 2024 10:32:56 +0000
ROA not before: Tue 02 Jan 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15555
IP address blocks: 81.182.245.0/24 maxlen: 24
84.1.30.0/23 maxlen: 23
84.1.32.0/23 maxlen: 23
84.2.224.0/21 maxlen: 21
84.2.226.0/24 maxlen: 24
195.228.156.0/23 maxlen: 23
195.228.82.0/23 maxlen: 23
195.228.80.0/23 maxlen: 23
62.201.96.0/21 maxlen: 21
194.149.58.0/24 maxlen: 24
188.36.224.0/23 maxlen: 23
195.228.224.0/23 maxlen: 23
188.36.228.0/24 maxlen: 24
188.36.227.0/24 maxlen: 24
195.228.236.0/24 maxlen: 24
195.228.240.0/24 maxlen: 24
195.228.240.0/20 maxlen: 20
195.228.243.0/24 maxlen: 24
195.228.244.0/24 maxlen: 24
188.6.167.0/24 maxlen: 24
195.228.249.0/24 maxlen: 24
195.228.250.0/24 maxlen: 24
195.228.251.0/24 maxlen: 24
195.228.248.0/24 maxlen: 24
195.228.253.0/24 maxlen: 24
195.228.163.0/24 maxlen: 24
195.228.203.0/24 maxlen: 24
84.1.118.0/23 maxlen: 23
188.6.252.0/23 maxlen: 23
188.6.250.0/23 maxlen: 23
81.183.232.0/23 maxlen: 23
81.183.238.0/23 maxlen: 23
80.249.160.0/20 maxlen: 20
84.2.40.0/23 maxlen: 23
84.2.44.0/23 maxlen: 23
84.2.41.0/24 maxlen: 24
84.2.46.0/23 maxlen: 23
84.2.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c9:00:6c:ab:a7:7d:c5:dc:54:45:e6:7d:d9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a12f9f36fe4d598a6485416f0fab92130f6ba6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:0a:29:08:85:f7:ed:a6:4b:86:a0:bb:73:
f1:51:f8:88:5a:af:9b:af:61:b4:4b:35:6e:19:cf:
8b:a7:ac:b1:c3:8d:6c:89:3e:2d:2c:8b:77:8c:cc:
d5:73:6f:0e:55:94:2a:63:00:29:da:95:84:17:e7:
71:f7:ad:7e:21:0e:69:14:9c:fa:ae:44:65:14:9e:
67:92:2e:87:be:47:3d:e4:94:e9:dd:66:3f:a8:c1:
49:51:49:9d:a3:5d:b3:25:6b:de:36:fc:f4:90:7e:
5b:71:2e:e7:e0:85:7c:21:6a:dd:44:3c:d2:39:22:
f1:f4:08:96:68:2d:f2:0c:34:a4:b5:ae:6b:36:a9:
da:e3:c6:58:9c:11:d7:6e:28:ae:ff:2e:ae:45:3c:
aa:f3:be:fe:d9:e1:27:85:d3:5f:f7:45:4d:57:7e:
53:46:95:ee:bf:5d:b1:53:8b:5b:9c:10:ca:74:a1:
33:d9:63:ba:7a:23:8b:94:84:71:21:e9:a8:a0:a8:
2a:f7:4e:7c:3e:d6:17:ed:35:c9:08:eb:10:ea:04:
fa:1b:3a:20:51:b7:00:6f:4b:0a:8b:e4:e7:ca:49:
59:4a:c4:c8:0f:dd:34:08:09:63:0e:0f:d0:81:44:
29:32:71:a2:d6:86:81:dc:5b:3e:5f:3b:4e:32:cf:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:9F:36:FE:4D:59:8A:64:85:41:6F:0F:AB:92:13:0F:6B:A6:A9
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/oS-fNv5NWYpkhUFvD6uSEw9rpqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.96.0/21
80.249.160.0/20
81.182.245.0/24
81.183.232.0/23
81.183.238.0/23
84.1.30.0-84.1.33.255
84.1.118.0/23
84.2.40.0/23
84.2.44.0/22
84.2.56.0/23
84.2.224.0/21
188.6.167.0/24
188.6.250.0-188.6.253.255
188.36.224.0/23
188.36.227.0-188.36.228.255
194.149.58.0/24
195.228.80.0/22
195.228.156.0/23
195.228.163.0/24
195.228.203.0/24
195.228.224.0/23
195.228.236.0/24
195.228.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:52:0e:e2:d1:ab:83:e7:64:0a:68:77:75:52:86:b0:0e:f4:
57:3a:2e:e0:8b:26:cc:b4:62:42:74:e2:c5:88:33:12:42:75:
ed:f1:3e:33:25:52:8a:6d:f4:28:fe:b0:1b:42:da:80:82:7c:
47:f8:0a:b4:1b:e4:78:90:26:03:d4:f3:dc:d9:3a:de:92:02:
30:d6:e8:57:ca:9e:6e:03:42:17:ec:a0:52:ea:0d:ff:58:84:
5b:1e:88:1b:f8:96:9c:bb:fc:43:ae:51:ac:12:e3:9b:b7:0a:
83:5b:dc:eb:53:09:1d:68:47:6d:e9:50:17:46:e1:34:96:1b:
13:4d:cf:fc:ce:2c:e6:75:24:72:49:8c:c6:56:4d:55:de:8f:
c7:ba:88:d6:99:e9:c2:82:19:b1:8b:51:45:fc:73:77:5d:79:
0e:39:90:a5:62:15:80:d7:78:05:e8:48:42:a2:ec:c1:71:af:
00:e4:53:e2:cf:69:f8:63:b7:12:11:62:22:ef:7f:79:00:e8:
85:a3:1b:27:f3:ff:a1:ed:0f:5f:d8:02:ea:5d:b1:ad:79:23:
c0:81:ae:7a:ef:b0:0a:9d:85:eb:c6:b8:fa:07:84:a4:65:c5:
e2:69:18:04:0a:74:36:01:fd:cd:8d:63:03:c7:60:66:2a:80:
e2:b7:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:27 2024 by rpki-client on console-fra.rpki-client.org