Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/L8CWRxKVWOXDdH8AC3hMfj1b-JU.roa
File: L8CWRxKVWOXDdH8AC3hMfj1b-JU.roa (raw, json)
Hash identifier: 0/toULfCwD4JRl8GJ2EYjNkyqAcr7fretIXSuY0jkls=
Subject key identifier: 2F:C0:96:47:12:95:58:E5:C3:74:7F:00:0B:78:4C:7E:3D:5B:F8:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 018CC86FB5315F087AE73DC13BDBE875D3FC
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/L8CWRxKVWOXDdH8AC3hMfj1b-JU.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 178.239.96.0/20 maxlen: 24
195.12.0.0/19 maxlen: 24
195.74.128.0/19 maxlen: 24
164.40.208.0/20 maxlen: 24
212.58.32.0/19 maxlen: 24
185.13.140.0/22 maxlen: 24
84.252.192.0/18 maxlen: 24
146.255.0.0/20 maxlen: 24
213.83.64.0/18 maxlen: 24
94.250.224.0/20 maxlen: 24
62.8.96.0/19 maxlen: 24
5.102.80.0/20 maxlen: 24
37.152.32.0/20 maxlen: 24
213.246.128.0/18 maxlen: 24
2001:4160::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b5:31:5f:08:7a:e7:3d:c1:3b:db:e8:75:d3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fc09647129558e5c3747f000b784c7e3d5bf895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:82:ff:a7:b6:c9:12:a0:6f:db:40:23:ea:
45:c0:30:45:f7:08:f0:24:e2:4f:f8:ff:a7:82:94:
69:02:72:ed:43:c7:35:e3:3b:70:69:2a:64:2d:5e:
eb:22:82:1a:8f:63:ae:64:12:1a:c0:0c:ca:a7:45:
21:67:0a:66:d9:a4:0c:61:3f:5d:8c:4f:45:5f:a1:
f2:b7:08:73:c8:2a:bb:ca:e0:80:05:3b:f8:d6:3d:
69:bf:b5:bf:fd:40:a7:3e:41:0a:6a:33:7f:fc:ec:
c8:7d:e4:c9:6b:ae:17:06:6a:08:e1:2a:46:6a:2b:
5e:95:1a:5e:00:83:58:a9:29:36:6a:fd:5c:0c:40:
e0:f5:6e:ee:de:4b:46:97:77:64:85:b1:57:96:62:
c2:f5:f0:0c:44:6e:18:e2:1d:a0:77:0d:9c:3b:bb:
a8:a7:9c:45:b2:7a:b9:39:bf:5f:de:72:85:95:6b:
0f:d4:c3:c5:d1:99:8a:3b:d4:24:52:07:e0:8f:0c:
f8:8b:fb:3a:59:b6:90:1d:54:e3:88:16:71:ae:e0:
3b:cc:70:f8:8f:ea:1b:27:b7:9f:ef:4d:b5:83:36:
67:07:63:f8:96:83:8f:1b:6e:56:fc:55:0f:cb:8b:
f0:d0:6a:e3:f5:9a:d0:cb:af:fa:4f:82:85:68:f2:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C0:96:47:12:95:58:E5:C3:74:7F:00:0B:78:4C:7E:3D:5B:F8:95
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/L8CWRxKVWOXDdH8AC3hMfj1b-JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.80.0/20
37.152.32.0/20
62.8.96.0/19
84.252.192.0/18
94.250.224.0/20
146.255.0.0/20
164.40.208.0/20
178.239.96.0/20
185.13.140.0/22
195.12.0.0/19
195.74.128.0/19
212.58.32.0/19
213.83.64.0/18
213.246.128.0/18
IPv6:
2001:4160::/32
Signature Algorithm: sha256WithRSAEncryption
ab:7a:fc:6d:57:aa:50:83:1e:ea:b6:ea:57:24:08:ea:34:07:
ba:fd:dd:7f:17:62:cf:8a:e8:f0:50:12:f8:a8:7f:ff:d8:18:
8f:c7:ea:b6:1b:43:e7:7f:db:6e:7a:3c:d2:d9:28:6a:3f:27:
39:37:fd:92:a7:20:23:f6:3c:3f:3a:f3:3e:2a:a5:ac:67:93:
6d:2d:12:94:29:23:f4:b6:bf:bd:8d:3f:d7:12:26:25:85:7e:
a4:35:94:db:68:59:8f:07:f8:13:63:cc:b4:aa:cc:54:4a:6f:
91:df:c8:67:ff:e0:92:31:49:6d:41:29:b8:c3:29:5c:87:0d:
30:9d:58:ab:16:5d:6c:e4:cc:15:e0:f5:66:26:74:bf:51:c7:
45:0f:41:2f:c0:af:29:41:81:d5:95:18:a4:89:7c:20:30:ca:
30:e2:22:fc:77:2b:f5:06:5f:a6:7a:76:e9:3e:b0:f7:3c:d0:
f5:de:2e:cb:ca:d0:ba:b1:2e:21:42:03:91:5f:3d:77:cd:9a:
37:38:61:81:05:93:fb:88:3d:46:b4:57:e4:b7:80:cc:77:09:
c1:dd:dc:6e:31:e7:66:b4:65:d0:01:5a:78:67:6b:8c:3c:d9:
9a:39:40:7c:cb:dc:30:a1:01:7c:49:a8:75:28:63:fd:88:c9:
30:a4:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:13:04 2024 by rpki-client on console-ams.rpki-client.org