Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/6A6PXaLHDC9nAoMv_92b6o0VNcs.roa
File: 6A6PXaLHDC9nAoMv_92b6o0VNcs.roa (raw, json)
Hash identifier: pteAEucsRWgTryZJ2ongt4hmZcP4CGSk0l1eZlZ/TbM=
Subject key identifier: E8:0E:8F:5D:A2:C7:0C:2F:67:02:83:2F:FF:DD:9B:EA:8D:15:35:CB
Certificate issuer: /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial: 018CC42515D8ECF0F6CC38CAF145A0D36717
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/6A6PXaLHDC9nAoMv_92b6o0VNcs.roa
Signing time: Mon 01 Jan 2024 08:30:13 +0000
ROA not before: Mon 01 Jan 2024 08:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51130
IP address blocks: 78.31.232.0/24 maxlen: 24
78.31.233.0/24 maxlen: 24
78.31.232.0/22 maxlen: 22
78.31.235.0/24 maxlen: 24
78.31.234.0/24 maxlen: 24
212.86.64.0/24 maxlen: 24
185.119.240.0/24 maxlen: 24
212.86.64.0/19 maxlen: 19
185.119.240.0/22 maxlen: 22
212.86.67.0/24 maxlen: 24
185.119.242.0/24 maxlen: 24
185.119.243.0/24 maxlen: 24
212.86.68.0/24 maxlen: 24
212.86.65.0/24 maxlen: 24
212.86.66.0/24 maxlen: 24
185.119.241.0/24 maxlen: 24
212.86.71.0/24 maxlen: 24
212.86.69.0/24 maxlen: 24
212.86.70.0/24 maxlen: 24
212.86.74.0/24 maxlen: 24
212.86.75.0/24 maxlen: 24
212.86.72.0/24 maxlen: 24
212.86.73.0/24 maxlen: 24
212.86.78.0/24 maxlen: 24
212.86.76.0/24 maxlen: 24
212.86.77.0/24 maxlen: 24
212.86.81.0/24 maxlen: 24
212.86.82.0/24 maxlen: 24
212.86.79.0/24 maxlen: 24
212.86.80.0/24 maxlen: 24
212.86.85.0/24 maxlen: 24
212.86.83.0/24 maxlen: 24
212.86.84.0/24 maxlen: 24
212.86.88.0/24 maxlen: 24
212.86.89.0/24 maxlen: 24
212.86.86.0/24 maxlen: 24
212.86.87.0/24 maxlen: 24
212.86.91.0/24 maxlen: 24
212.86.90.0/24 maxlen: 24
212.86.92.0/24 maxlen: 24
212.86.95.0/24 maxlen: 24
212.86.93.0/24 maxlen: 24
212.86.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:15:d8:ec:f0:f6:cc:38:ca:f1:45:a0:d3:67:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
Validity
Not Before: Jan 1 08:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e80e8f5da2c70c2f6702832fffdd9bea8d1535cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:96:8a:ce:76:76:96:68:9c:be:84:5c:4b:
7f:c7:47:90:e2:c9:cc:0b:41:df:62:04:1b:85:26:
8c:26:f0:01:b9:74:fc:cf:9a:fe:f8:b0:44:e5:e6:
fb:5a:3a:f0:ec:35:e8:6e:65:57:92:a9:89:1d:8a:
91:8e:74:2f:a0:ae:ae:71:ae:a1:bd:1d:b9:8b:7f:
04:90:47:d4:5d:77:65:f0:b0:c8:cc:e7:bb:d2:0a:
68:68:60:4e:2f:41:73:f5:48:63:aa:52:9a:98:cc:
b3:e2:85:ca:ec:bb:74:d9:0a:8c:4a:b4:f4:2a:d6:
23:a5:00:33:21:b5:39:ab:47:54:9c:f7:2e:03:d2:
24:b3:e3:91:5a:66:3c:ad:22:cd:4f:ab:27:2e:36:
f2:c8:8f:90:1e:58:07:2d:38:9b:35:35:c4:d2:34:
ce:42:91:04:3b:1b:a9:8b:6f:78:3c:32:a8:8c:d6:
58:84:ae:dc:9c:72:c3:b8:dc:a2:e5:1c:d4:97:77:
44:c1:87:38:f7:a3:16:6b:4e:7c:bc:b1:1c:1c:1b:
5b:56:d6:de:b7:f7:6c:7e:79:27:38:9d:59:49:4e:
91:8d:b3:a4:46:8b:ff:94:cf:9a:46:1c:ff:39:98:
6d:f5:c2:c9:6c:59:90:60:16:ec:53:2c:b7:73:41:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0E:8F:5D:A2:C7:0C:2F:67:02:83:2F:FF:DD:9B:EA:8D:15:35:CB
X509v3 Authority Key Identifier:
keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/6A6PXaLHDC9nAoMv_92b6o0VNcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.232.0/22
185.119.240.0/22
212.86.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:09:4a:9a:f7:19:25:00:22:9a:78:fe:18:52:5c:14:7b:ca:
0a:7d:08:85:64:3b:dc:69:61:14:f9:1d:17:54:d0:5c:c2:dd:
18:b8:16:fb:f9:ce:b0:e9:a6:28:35:cb:b1:21:45:37:7a:ea:
34:3f:e7:3d:e5:c0:95:0f:60:8b:6f:e0:a5:6e:a3:f2:2e:41:
83:b0:ef:a2:d4:8e:c9:35:0a:55:46:99:f9:67:4a:51:f1:06:
0f:57:5c:fe:38:7d:4a:b0:7b:96:c2:f9:51:db:35:7b:c7:3a:
65:a4:a4:cd:b8:a1:c0:55:17:f4:27:a2:41:f4:cb:5a:8f:07:
34:41:5f:5f:90:9c:f6:98:84:67:78:53:d9:e1:5b:69:4c:8c:
eb:5d:c1:de:38:04:8d:28:2c:36:a7:11:22:20:03:55:8b:b8:
f2:55:b3:c6:1a:b3:32:0c:cf:6a:43:5d:cb:0c:b1:2b:32:ed:
61:1f:a4:bd:11:fb:c8:0b:7c:66:43:d9:40:76:bd:65:0b:10:
a4:b5:b8:88:ac:f4:49:49:58:1b:5d:07:7a:90:72:8a:85:ee:
cd:3c:96:db:50:80:39:e2:91:25:49:9f:81:4f:36:75:5e:62:
b9:e6:ce:a7:d7:21:a9:9b:85:b8:28:15:a7:0e:16:5a:da:5a:
7b:23:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:32:44 2024 by rpki-client on console-ams.rpki-client.org