Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/EuHRmOT6BLvuvzFnaniBD1j8kpA.roa
File: EuHRmOT6BLvuvzFnaniBD1j8kpA.roa (raw, json)
Hash identifier: rR6eYgrJMbIGgUVttHT7k5KPvqF4poiSxj3DajmrNGM=
Subject key identifier: 12:E1:D1:98:E4:FA:04:BB:EE:BF:31:67:6A:78:81:0F:58:FC:92:90
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 018DB11A37EEDD22DDF3EA586FF63E9EA8C2
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/EuHRmOT6BLvuvzFnaniBD1j8kpA.roa
Signing time: Fri 16 Feb 2024 08:48:21 +0000
ROA not before: Fri 16 Feb 2024 08:48:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206825
IP address blocks: 5.182.107.0/24 maxlen: 24
31.14.29.0/24 maxlen: 24
31.14.30.0/24 maxlen: 24
46.102.102.0/24 maxlen: 24
80.208.255.0/24 maxlen: 24
85.204.37.0/24 maxlen: 24
94.177.133.0/24 maxlen: 24
103.197.8.0/22 maxlen: 22
103.214.180.0/22 maxlen: 22
178.157.95.0/24 maxlen: 24
185.11.16.0/22 maxlen: 22
185.11.16.0/23 maxlen: 23
185.11.18.0/23 maxlen: 23
185.36.112.0/22 maxlen: 22
185.186.116.0/22 maxlen: 22
185.207.240.0/22 maxlen: 22
195.5.96.0/23 maxlen: 23
195.181.254.0/24 maxlen: 24
195.192.252.0/24 maxlen: 24
212.103.52.0/22 maxlen: 22
212.237.254.0/24 maxlen: 24
217.61.255.0/24 maxlen: 24
2a03:4f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:1a:37:ee:dd:22:dd:f3:ea:58:6f:f6:3e:9e:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Feb 16 08:48:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12e1d198e4fa04bbeebf31676a78810f58fc9290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:ec:3d:71:14:10:4f:ac:44:7a:fb:80:97:
6f:3c:19:79:67:1d:d6:5d:6e:94:3b:15:ed:2b:f7:
37:81:6b:00:0e:cc:b4:bc:4f:f6:8f:66:bf:1f:88:
ff:59:8c:36:c6:a9:76:d6:a8:88:b2:2a:12:8d:1a:
a1:1a:9a:c2:f9:a4:73:08:00:eb:fd:d5:fb:27:0a:
65:c0:7b:57:55:a7:36:97:d6:fb:30:53:de:5e:d5:
48:19:2b:99:6e:4f:d4:6d:71:67:fd:26:4a:61:8c:
d3:1d:bc:30:bf:f4:14:74:cd:55:ad:31:3d:30:29:
34:65:8a:e0:9c:54:95:f2:f6:1d:28:d6:83:1d:35:
3a:91:31:4b:3d:dc:c6:6e:3e:bc:3f:d8:f8:d1:54:
07:62:b0:dc:6d:1f:08:51:cd:cd:a2:68:dd:da:f3:
8b:bb:dd:c3:0c:18:35:40:e4:60:f6:de:65:eb:e3:
93:ca:f8:50:2f:14:f0:2d:fe:a3:3c:92:63:8b:51:
26:ac:66:20:93:93:e2:82:e8:2d:4c:95:84:9c:d2:
83:68:29:9b:73:2b:3b:94:4a:d0:7c:4d:88:c4:f9:
1d:e8:ce:e6:c9:66:64:97:cf:5c:27:66:e5:5a:0f:
e1:02:b7:52:39:fa:61:d8:c9:f6:c5:c9:d5:ce:25:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E1:D1:98:E4:FA:04:BB:EE:BF:31:67:6A:78:81:0F:58:FC:92:90
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/EuHRmOT6BLvuvzFnaniBD1j8kpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.107.0/24
31.14.29.0-31.14.30.255
46.102.102.0/24
80.208.255.0/24
85.204.37.0/24
94.177.133.0/24
103.197.8.0/22
103.214.180.0/22
178.157.95.0/24
185.11.16.0/22
185.36.112.0/22
185.186.116.0/22
185.207.240.0/22
195.5.96.0/23
195.181.254.0/24
195.192.252.0/24
212.103.52.0/22
212.237.254.0/24
217.61.255.0/24
IPv6:
2a03:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
2e:14:4b:29:4c:f8:6d:21:64:8a:e4:1c:f4:d6:cd:10:25:63:
1e:0e:c5:72:0d:9d:1c:de:db:b8:e2:55:75:5e:98:2f:df:79:
49:00:1f:64:f3:fc:e1:bb:34:85:b8:bf:bd:24:e3:cd:7e:18:
ad:8f:33:60:58:bd:74:ab:19:be:c3:02:26:79:2c:7a:65:b4:
37:99:b5:eb:d9:b6:07:cf:6f:70:20:b6:49:34:6b:91:07:64:
31:43:50:19:57:64:8c:96:32:93:3c:2e:2b:d5:c8:c7:95:77:
3b:93:49:d0:b0:7d:00:c6:62:29:58:30:2f:9b:1e:83:ad:81:
8d:01:20:b6:b1:d0:89:88:32:41:90:26:f9:84:f2:7b:08:3a:
b9:9c:c7:7c:55:a9:08:a3:1c:02:d7:37:db:92:3a:84:3c:de:
7e:9e:98:2d:31:4c:d5:28:ec:48:93:9b:df:fe:5e:c8:95:40:
6f:53:2e:57:ee:35:d5:80:c2:a1:1c:be:c9:bc:83:ef:a5:16:
be:dc:f6:1b:bb:b5:74:c9:61:a5:56:69:82:49:7c:d8:51:09:
56:3e:49:60:07:8e:9c:d1:e8:17:3b:af:7c:f1:ee:69:c1:e1:
f6:87:68:7e:05:30:09:08:98:9e:40:95:de:dd:b5:27:4b:17:
9c:cf:4d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:27:15 2024 by rpki-client on console-ams.rpki-client.org