Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/plMn_BiRPB5a11adCB7VuiDteJ0.roa
File: plMn_BiRPB5a11adCB7VuiDteJ0.roa (raw, json)
Hash identifier: g8oYI6SXvyqxUxcKu6WnqMrzFEVZkpWTXtn3qE0IwcY=
Subject key identifier: A6:53:27:FC:18:91:3C:1E:5A:D7:56:9D:08:1E:D5:BA:20:ED:78:9D
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018CC4934E848188DB08F90BC977EEAB8881
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/plMn_BiRPB5a11adCB7VuiDteJ0.roa
Signing time: Mon 01 Jan 2024 10:30:37 +0000
ROA not before: Mon 01 Jan 2024 10:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 185.118.78.0/24 maxlen: 24
213.21.229.0/24 maxlen: 24
213.21.233.0/24 maxlen: 24
213.21.246.0/24 maxlen: 24
213.21.250.0/24 maxlen: 24
213.21.251.0/24 maxlen: 24
213.21.247.0/24 maxlen: 24
193.68.85.0/24 maxlen: 24
213.21.254.0/24 maxlen: 24
193.68.91.0/24 maxlen: 24
193.68.95.0/24 maxlen: 24
193.68.92.0/24 maxlen: 24
213.21.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4e:84:81:88:db:08:f9:0b:c9:77:ee:ab:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a65327fc18913c1e5ad7569d081ed5ba20ed789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dc:6c:d9:fa:d5:84:37:0a:46:53:c6:f7:71:
10:b1:e6:3b:25:49:53:73:b4:2c:1a:ea:dc:00:1a:
d4:6a:22:fc:a7:1c:f8:0b:89:24:27:e2:02:83:42:
4a:58:28:09:bf:38:d8:e7:1d:7d:ad:08:9c:25:d4:
32:a4:b5:dc:49:45:92:b6:6a:13:ae:14:81:77:cf:
a9:6f:fd:5a:74:c8:ef:ac:70:b8:7e:14:b9:3b:f1:
8c:09:e3:f7:5c:b8:27:ac:ed:4c:b5:6e:f6:18:74:
a1:c7:2f:cc:df:b0:3b:91:45:43:cd:43:37:0d:00:
3e:40:9a:0d:ca:9e:97:e3:1b:5f:17:2d:2a:a3:c4:
28:1d:f7:ac:a4:f5:ba:31:1e:53:59:22:81:78:48:
63:a7:4b:b1:77:0d:6b:96:35:2b:4a:c0:03:69:0a:
51:a7:a1:96:25:71:c4:a8:18:91:cf:a1:4c:5a:e6:
03:35:4b:e8:07:e3:71:5e:df:6b:99:0f:6b:c2:61:
6d:f5:09:dc:24:cb:6f:e1:c0:65:9c:56:7d:c2:cd:
ce:a3:b6:95:90:bf:85:01:a8:3a:11:10:16:8e:e1:
dc:05:84:19:4f:a0:b3:27:e7:fd:ac:5f:0a:cb:a4:
36:15:4d:e4:d3:81:fd:be:eb:9d:3a:a3:3d:34:55:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:53:27:FC:18:91:3C:1E:5A:D7:56:9D:08:1E:D5:BA:20:ED:78:9D
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/plMn_BiRPB5a11adCB7VuiDteJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.78.0/24
193.68.85.0/24
193.68.91.0-193.68.92.255
193.68.95.0/24
213.21.226.0/24
213.21.229.0/24
213.21.233.0/24
213.21.246.0/23
213.21.250.0/23
213.21.254.0/24
Signature Algorithm: sha256WithRSAEncryption
97:25:66:a3:12:97:2e:48:b2:01:9c:ca:5b:79:14:a3:c7:67:
e6:1e:fa:d9:cd:8b:9d:20:ad:b3:0e:d0:ca:4b:07:84:e4:cc:
a7:cc:4c:82:fe:5c:d5:54:75:cd:e3:c6:fc:89:c2:71:42:b5:
bb:00:de:c4:ca:16:f1:5b:03:a5:ea:03:75:2f:97:fa:4f:48:
a5:33:fd:eb:55:ab:d0:b5:f3:0e:6d:a6:f5:6a:81:ff:c3:a4:
5e:ff:84:c8:c6:f2:17:aa:cb:58:23:b5:2b:f2:4a:bd:a4:81:
ae:c8:5e:25:88:8d:41:9e:5d:c5:e1:c4:2d:09:20:fd:1d:14:
e9:41:15:37:43:86:bc:82:7c:18:33:0f:15:a4:47:28:6b:03:
ea:04:cb:fc:97:62:db:cc:dd:ae:4a:f4:78:b1:64:e9:05:1a:
72:64:04:94:53:a1:98:52:3b:a8:67:e5:75:44:7e:71:82:8a:
e6:50:f8:ac:6f:4d:d8:e0:89:e1:68:5c:dd:d0:74:e5:ad:cf:
75:0c:d5:af:a0:44:27:c2:ed:d2:dd:b7:bb:13:86:cc:87:3e:
64:83:23:13:e5:7a:64:ab:0f:80:de:f9:32:35:cc:f7:1b:78:
bf:a1:7b:83:8b:a2:e2:56:68:bc:66:24:61:30:3a:b4:39:1b:
4b:99:a1:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 8 05:52:29 2024 by rpki-client on console-fra.rpki-client.org