Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YS5JfFX_lOPAi05W_5SpwD5X1Kw.roa
File: YS5JfFX_lOPAi05W_5SpwD5X1Kw.roa (raw, json)
Hash identifier: RBIFbvx2yrmr5UKXLDemCQhe54g51v2jUVTLtstu+VU=
Subject key identifier: 61:2E:49:7C:55:FF:94:E3:C0:8B:4E:56:FF:94:A9:C0:3E:57:D4:AC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 018F2F1136CE019AA8C2B9DCAA7BCA1ECD18
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YS5JfFX_lOPAi05W_5SpwD5X1Kw.roa
Signing time: Tue 30 Apr 2024 12:53:28 +0000
ROA not before: Tue 30 Apr 2024 12:53:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7342
IP address blocks: 81.19.192.0/24 maxlen: 24
81.19.193.0/24 maxlen: 24
81.19.196.0/24 maxlen: 24
81.19.197.0/24 maxlen: 24
81.19.198.0/24 maxlen: 24
81.19.199.0/24 maxlen: 24
81.19.200.0/24 maxlen: 24
81.19.201.0/24 maxlen: 24
81.19.202.0/24 maxlen: 24
81.19.203.0/24 maxlen: 24
81.19.204.0/24 maxlen: 24
81.19.205.0/24 maxlen: 24
81.19.206.0/24 maxlen: 24
81.19.207.0/24 maxlen: 24
185.100.3.0/24 maxlen: 24
193.109.220.0/24 maxlen: 24
194.110.75.0/24 maxlen: 24
217.30.80.0/24 maxlen: 24
217.30.81.0/24 maxlen: 24
217.30.82.0/24 maxlen: 24
217.30.83.0/24 maxlen: 24
217.30.84.0/24 maxlen: 24
217.30.85.0/24 maxlen: 24
217.30.87.0/24 maxlen: 24
217.30.92.0/24 maxlen: 24
217.30.94.0/24 maxlen: 24
217.30.95.0/24 maxlen: 24
2a10:eec0::/48 maxlen: 48
2a10:eec0:1::/48 maxlen: 48
2a10:eec0:2::/48 maxlen: 48
2a10:eec0:3::/48 maxlen: 48
2a10:eec0:4::/48 maxlen: 48
2a10:eec0:5::/48 maxlen: 48
2a10:eec0:6::/48 maxlen: 48
2a10:eec0:7::/48 maxlen: 48
2a10:eec0:8::/48 maxlen: 48
2a10:eec0:9::/48 maxlen: 48
2a10:eec0:a::/48 maxlen: 48
2a10:eec0:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:11:36:ce:01:9a:a8:c2:b9:dc:aa:7b:ca:1e:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 30 12:53:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=612e497c55ff94e3c08b4e56ff94a9c03e57d4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:a6:12:a2:37:43:1e:f8:1d:d1:f2:a3:ac:
be:17:ac:4a:e6:56:44:15:52:ed:11:95:24:6a:bc:
99:a6:24:30:ce:a4:04:d3:8a:0d:82:22:9a:62:27:
aa:88:82:04:9e:09:5c:46:c7:e4:ae:fc:ca:b8:29:
01:6e:d9:df:d1:37:01:e4:10:94:f6:64:d9:ca:9e:
09:e9:bf:65:3c:0e:c4:9b:bf:2c:7c:02:6e:ab:8e:
cc:bb:86:29:73:6a:2e:29:29:5b:5c:8f:ca:21:3e:
f7:50:01:ad:63:69:8c:43:77:d1:9d:fc:ce:26:9a:
71:52:47:ff:c3:c3:78:b3:c7:e5:bb:d0:38:df:e1:
1f:96:33:d3:d8:d5:10:36:4d:97:72:ac:d6:3a:fd:
e8:66:5a:28:18:53:48:27:fe:69:51:8d:f7:a4:bc:
17:47:b3:03:8f:9a:31:cb:03:5a:22:a8:b9:a4:d1:
cd:14:f2:74:e3:9c:b3:1b:ab:22:d1:74:75:e2:9f:
6d:6c:1e:4f:23:36:f6:2a:f4:a1:d4:f5:84:ac:bd:
57:cd:98:61:31:7d:0b:9a:14:30:89:c1:a4:79:bf:
9b:2c:46:42:20:c9:4b:e1:61:9c:94:80:91:9a:1d:
ec:ee:81:84:65:4b:21:57:ae:cd:b3:2c:c6:c3:88:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:49:7C:55:FF:94:E3:C0:8B:4E:56:FF:94:A9:C0:3E:57:D4:AC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YS5JfFX_lOPAi05W_5SpwD5X1Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.192.0/23
81.19.196.0-81.19.207.255
185.100.3.0/24
193.109.220.0/24
194.110.75.0/24
217.30.80.0-217.30.85.255
217.30.87.0/24
217.30.92.0/24
217.30.94.0/23
IPv6:
2a10:eec0::-2a10:eec0:a:ffff:ffff:ffff:ffff:ffff
2a10:eec0:c::/48
Signature Algorithm: sha256WithRSAEncryption
56:93:a3:f8:a4:14:20:6b:ba:dd:a6:da:17:40:ae:9e:e7:5c:
52:15:c0:78:d8:b0:29:ec:e3:d6:b2:d5:41:c4:de:69:02:01:
7d:2d:c7:6d:c7:59:71:41:10:98:da:70:ae:33:7c:28:6a:eb:
cc:f6:de:78:ed:22:47:b0:db:d7:37:36:54:35:e9:47:1e:48:
fb:89:dc:20:06:a6:6d:29:a8:41:4c:1d:fd:97:1d:99:f2:9d:
62:94:06:93:fd:12:19:c8:c7:b3:72:ee:57:7d:f0:59:42:a9:
4f:59:4b:22:4d:d4:55:0f:a7:90:68:b9:76:99:b1:aa:23:ee:
97:55:9d:c2:f1:2b:83:08:ec:68:90:e9:41:cd:b1:94:bc:82:
88:b6:12:64:ee:b6:2c:db:ef:b5:17:2f:ba:70:8c:f6:8a:2b:
a2:11:9d:42:7f:d3:b9:da:76:19:7b:b7:35:a8:56:f9:9a:6d:
40:ac:67:d8:e6:8c:a4:80:3b:e9:62:98:41:17:d6:4d:11:d8:
4a:37:23:02:94:91:13:1e:a6:c4:12:e1:1b:24:b5:b1:85:f1:
85:ce:99:c3:84:3d:06:ec:9e:c3:ce:8b:20:26:91:e6:1d:40:
22:32:53:91:8d:3f:e9:70:8a:83:03:2e:aa:82:bc:bc:e2:ec:
c3:7c:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:38 2024 by rpki-client on console-fra.rpki-client.org