Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ahadHws_eaZ251IXukfw1a-_kBs.roa
File: ahadHws_eaZ251IXukfw1a-_kBs.roa (raw, json)
Hash identifier: vXXfgxDuz5N+rlvbE6Hf5Dz/l5W+DeZUV/OyDmanJK8=
Subject key identifier: 6A:16:9D:1F:0B:3F:79:A6:76:E7:52:17:BA:47:F0:D5:AF:BF:90:1B
Certificate issuer: /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial: 018CC425152240659E24CDFED2413ABD4F10
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ahadHws_eaZ251IXukfw1a-_kBs.roa
Signing time: Mon 01 Jan 2024 08:30:13 +0000
ROA not before: Mon 01 Jan 2024 08:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9147
IP address blocks: 185.119.240.0/22 maxlen: 22
212.86.64.0/20 maxlen: 20
185.119.240.0/23 maxlen: 23
185.119.240.0/24 maxlen: 24
212.86.64.0/19 maxlen: 19
212.86.64.0/24 maxlen: 24
212.86.67.0/24 maxlen: 24
212.86.69.0/24 maxlen: 24
212.86.70.0/24 maxlen: 24
185.119.242.0/23 maxlen: 23
185.119.242.0/24 maxlen: 24
212.86.68.0/24 maxlen: 24
185.119.241.0/24 maxlen: 24
185.119.243.0/24 maxlen: 24
212.86.71.0/24 maxlen: 24
212.86.65.0/24 maxlen: 24
212.86.66.0/24 maxlen: 24
212.86.72.0/24 maxlen: 24
212.86.73.0/24 maxlen: 24
212.86.76.0/24 maxlen: 24
212.86.74.0/24 maxlen: 24
212.86.75.0/24 maxlen: 24
212.86.77.0/24 maxlen: 24
212.86.78.0/24 maxlen: 24
212.86.79.0/24 maxlen: 24
212.86.80.0/24 maxlen: 24
212.86.80.0/20 maxlen: 20
212.86.83.0/24 maxlen: 24
212.86.81.0/24 maxlen: 24
212.86.82.0/24 maxlen: 24
212.86.84.0/24 maxlen: 24
212.86.85.0/24 maxlen: 24
212.86.86.0/24 maxlen: 24
212.86.87.0/24 maxlen: 24
212.86.90.0/24 maxlen: 24
212.86.88.0/24 maxlen: 24
212.86.89.0/24 maxlen: 24
212.86.91.0/24 maxlen: 24
212.86.93.0/24 maxlen: 24
212.86.94.0/24 maxlen: 24
212.86.92.0/24 maxlen: 24
212.86.95.0/24 maxlen: 24
185.176.57.0/24 maxlen: 24
185.176.58.0/24 maxlen: 24
185.176.56.0/24 maxlen: 24
185.176.56.0/22 maxlen: 22
185.176.59.0/24 maxlen: 24
78.31.232.0/24 maxlen: 24
78.31.232.0/23 maxlen: 23
78.31.232.0/22 maxlen: 22
78.31.233.0/24 maxlen: 24
78.31.234.0/23 maxlen: 23
78.31.234.0/24 maxlen: 24
78.31.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:15:22:40:65:9e:24:cd:fe:d2:41:3a:bd:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
Validity
Not Before: Jan 1 08:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a169d1f0b3f79a676e75217ba47f0d5afbf901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:f8:e0:27:b4:f1:d2:1b:55:a1:fe:c0:5d:
72:57:1a:40:d6:ad:db:35:38:3e:ca:53:ec:d5:87:
39:95:a5:96:aa:95:5f:4c:88:0a:82:46:c9:2d:70:
11:4f:a4:7b:08:4c:e6:35:0b:ec:5c:c7:33:f7:58:
0a:cc:f6:72:c8:34:47:0b:e2:d0:f2:c7:a6:a0:42:
19:a2:de:2d:2e:dd:ab:4c:07:c4:25:13:be:cb:80:
81:e1:4c:30:f0:f3:5a:b9:93:9e:bd:ef:6c:a8:fc:
11:0f:dc:4d:ff:9e:dd:b8:9e:d1:06:e7:0e:fc:39:
8d:60:8c:4a:39:8a:dc:96:84:42:b4:d1:cf:73:09:
a7:3d:d5:05:08:dd:3d:74:df:e4:0c:4e:45:89:5f:
8d:6a:c4:b7:d1:1c:fb:28:ca:21:43:c7:e8:0d:bd:
e0:96:f7:3c:a5:44:d6:87:37:f9:6a:1c:4d:7d:5a:
e7:db:23:5b:04:ab:c0:51:6d:0a:7a:52:a7:fc:1c:
1e:d0:2f:01:2f:df:65:4e:42:69:fb:48:a1:75:ac:
14:da:75:39:77:e6:f2:29:73:b8:49:f6:9b:7f:61:
0a:3a:65:05:b3:9c:b9:ed:70:b4:5e:53:24:e4:b7:
4a:13:35:58:7c:e4:d1:4c:63:65:c4:ce:3d:c1:45:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:9D:1F:0B:3F:79:A6:76:E7:52:17:BA:47:F0:D5:AF:BF:90:1B
X509v3 Authority Key Identifier:
keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ahadHws_eaZ251IXukfw1a-_kBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.232.0/22
185.119.240.0/22
185.176.56.0/22
212.86.64.0/19
Signature Algorithm: sha256WithRSAEncryption
98:0e:99:fa:c3:4b:47:38:08:f4:5d:53:78:35:9a:0e:69:72:
86:2d:f0:4b:b5:2c:d2:b4:da:c2:32:29:2e:c0:34:c6:79:60:
5b:4b:c2:0a:57:19:de:e8:1c:25:69:c7:a0:94:a2:5f:6f:38:
f6:e8:99:8f:cb:62:3b:48:ac:c0:e8:59:bb:24:c6:22:07:b7:
3e:00:7e:a7:61:48:8a:fd:bd:35:21:50:93:e8:03:5d:41:af:
ff:89:bf:61:99:02:ee:fb:39:89:78:92:c4:05:5e:d7:45:83:
45:70:b4:97:b2:72:fc:bf:ee:07:6e:19:b9:42:d6:0c:ca:f9:
15:64:2c:8d:99:4e:d5:02:af:5c:94:76:9b:de:4d:7a:3d:5c:
98:d9:d1:df:94:33:e2:76:b9:e6:90:33:1f:73:01:d7:0e:d8:
2e:e6:00:04:6e:aa:cb:d5:8e:da:de:36:89:9f:b8:2e:57:50:
ce:5f:6d:b4:17:03:cf:ea:93:dc:01:f7:a6:a5:ce:b7:cc:a6:
17:b0:58:27:db:6d:af:1a:88:6e:1d:2c:ad:f3:1c:f1:24:8a:
2b:08:5d:79:84:15:25:07:06:a5:57:e3:60:01:b1:ab:fa:da:
74:5b:7a:ee:0b:24:0e:72:25:7c:33:90:a2:17:fb:e4:ca:9f:
bd:19:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:39 2024 by rpki-client on console-fra.rpki-client.org