Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/sDp_L7zdHTKvX0DBb_H-6r-wVKo.roa
File: sDp_L7zdHTKvX0DBb_H-6r-wVKo.roa (raw, json)
Hash identifier: U9IdxNDRaT7rAxYKUXUpmXUxxACg5mhKys7mG1XNuVM=
Subject key identifier: B0:3A:7F:2F:BC:DD:1D:32:AF:5F:40:C1:6F:F1:FE:EA:BF:B0:54:AA
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F88F3C7ED5EC69CFA7ED49394B43F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/sDp_L7zdHTKvX0DBb_H-6r-wVKo.roa
Signing time: Tue 02 Jan 2024 04:30:01 +0000
ROA not before: Tue 02 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5518
IP address blocks: 80.233.128.0/17 maxlen: 24
80.233.136.0/24 maxlen: 24
80.233.140.0/24 maxlen: 24
80.233.146.0/24 maxlen: 24
62.63.128.0/21 maxlen: 24
62.63.136.0/22 maxlen: 24
80.233.168.0/24 maxlen: 24
62.63.144.0/20 maxlen: 24
78.154.128.0/19 maxlen: 24
80.233.232.0/24 maxlen: 24
80.233.244.0/24 maxlen: 24
62.63.159.0/24 maxlen: 24
62.63.160.0/19 maxlen: 24
194.19.224.0/19 maxlen: 24
194.19.224.0/24 maxlen: 24
80.233.200.0/21 maxlen: 24
62.63.191.0/24 maxlen: 24
62.63.190.0/24 maxlen: 24
194.19.246.0/24 maxlen: 24
185.87.204.0/22 maxlen: 24
185.87.204.0/24 maxlen: 24
78.28.223.0/24 maxlen: 24
78.28.229.0/24 maxlen: 24
78.28.228.0/24 maxlen: 24
78.28.240.0/24 maxlen: 24
213.175.117.0/24 maxlen: 24
78.28.234.0/24 maxlen: 24
78.28.244.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.28.250.0/24 maxlen: 24
213.175.64.0/18 maxlen: 24
78.28.197.0/24 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.192.0/18 maxlen: 24
213.175.75.0/24 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:107::/48 maxlen: 48
2a02:16d8:102::/48 maxlen: 48
2a02:16d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:88:f3:c7:ed:5e:c6:9c:fa:7e:d4:93:94:b4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b03a7f2fbcdd1d32af5f40c16ff1feeabfb054aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:e4:8d:be:2d:e9:06:b6:31:9a:1b:53:6f:
57:43:ea:d5:e2:05:22:6e:ae:9a:f5:d9:e5:f4:e0:
99:7e:4b:25:2d:63:e3:fa:5d:a6:21:1b:2f:d4:fc:
03:cf:f4:71:7b:a9:1f:d8:4a:69:08:03:51:c4:99:
9b:ab:2c:b6:e4:38:ef:fc:14:0b:20:81:f6:e0:ce:
62:fe:73:5f:0f:14:ba:be:b6:77:c5:eb:3a:de:81:
c2:b3:0a:95:97:64:54:9f:d2:44:9d:9a:dc:3d:fc:
6c:8b:e7:f5:fe:ea:b6:ac:85:c8:f0:66:49:cb:a6:
1e:c6:e0:3c:d6:ab:8b:8a:33:19:91:43:84:f8:62:
84:e8:91:7b:b5:fd:83:a8:a6:b4:54:5c:f9:2e:55:
25:9d:3e:23:0d:b1:4b:6e:3c:b6:35:8f:7b:f4:19:
6e:fe:d7:94:44:10:b9:09:95:4e:cc:90:47:64:1c:
b4:81:2b:26:48:08:14:42:39:00:6f:f9:18:01:c6:
09:68:8d:b4:20:13:96:25:15:1e:0f:b5:89:4c:51:
4d:8f:1b:c9:cb:0c:f3:c3:7c:2c:ca:4f:19:63:c3:
c9:ce:84:22:3e:5c:69:ab:ba:5a:67:a5:08:86:71:
96:d2:03:53:59:70:bc:b7:3e:62:52:e8:f8:64:58:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:7F:2F:BC:DD:1D:32:AF:5F:40:C1:6F:F1:FE:EA:BF:B0:54:AA
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/sDp_L7zdHTKvX0DBb_H-6r-wVKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0-62.63.139.255
62.63.144.0-62.63.191.255
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
93:00:33:f9:5b:a4:62:5c:47:f8:f9:f7:54:7d:82:9a:66:81:
cd:ae:c6:b2:56:1e:f5:9a:60:48:4d:ff:a5:52:33:e1:ca:8b:
79:12:65:44:ba:7a:86:f8:74:4a:74:be:a0:32:a9:13:bc:c8:
92:e3:30:02:5e:cd:6e:50:57:ee:c9:85:06:e6:38:16:74:11:
ef:a2:d5:ab:09:ef:34:6f:c2:2b:f0:e0:8e:df:6b:c1:e6:10:
aa:1e:95:45:d2:c8:78:97:48:78:0e:d4:47:4b:97:8a:fa:fb:
f5:10:c6:00:ef:a0:a1:4b:e6:4e:cd:72:a5:f7:65:73:82:19:
ec:88:de:bb:ed:3c:02:f7:8b:48:ea:bb:15:fb:bb:7d:f4:ef:
0c:48:42:28:c0:7e:d9:92:0f:6d:b4:87:f0:9a:f0:41:33:e8:
d4:99:d1:ff:b5:17:65:8c:18:d0:83:76:b2:10:ae:c2:b2:4c:
b1:6f:b8:17:6d:55:79:1a:db:61:6d:42:c6:84:81:a9:43:9d:
16:46:d4:e9:ae:ec:6f:8f:ff:f6:6f:26:b0:88:fd:5e:36:a9:
d7:f1:39:e9:51:33:2e:ea:30:eb:4e:b8:c8:00:63:d8:e5:85:
17:e1:f4:ac:be:ba:36:39:69:69:46:c9:58:2a:47:4a:fb:fa:
7a:dd:19:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:20:16 2024 by rpki-client on console-ams.rpki-client.org