Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/LtTFsTu0wvareHYXDGuCaBZdYXI.roa
File: LtTFsTu0wvareHYXDGuCaBZdYXI.roa (raw, json)
Hash identifier: 0F8+SRQQBaAi4QNaZNP81OC2GHjvZn2R8xOeFrqKaXs=
Subject key identifier: 2E:D4:C5:B1:3B:B4:C2:F6:AB:78:76:17:0C:6B:82:68:16:5D:61:72
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 018CC6B7791C0FAA0589FBACAFCD6AC4E4A5
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/LtTFsTu0wvareHYXDGuCaBZdYXI.roa
Signing time: Mon 01 Jan 2024 20:29:21 +0000
ROA not before: Mon 01 Jan 2024 20:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199236
IP address blocks: 194.113.24.0/24 maxlen: 24
185.4.123.0/24 maxlen: 24
185.4.120.0/24 maxlen: 24
185.4.121.0/24 maxlen: 24
185.4.122.0/24 maxlen: 24
45.128.173.0/24 maxlen: 24
195.54.172.0/24 maxlen: 24
195.54.173.0/24 maxlen: 24
91.211.240.0/24 maxlen: 24
91.211.243.0/24 maxlen: 24
91.211.241.0/24 maxlen: 24
91.211.242.0/24 maxlen: 24
2a02:7040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:79:1c:0f:aa:05:89:fb:ac:af:cd:6a:c4:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 1 20:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ed4c5b13bb4c2f6ab7876170c6b8268165d6172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:c4:26:3f:10:1e:03:73:38:09:af:20:7d:
05:95:52:fc:12:8d:3c:f1:10:60:11:f3:74:d2:b8:
0b:bd:20:40:5a:75:41:1b:12:b5:e0:8c:42:a6:b4:
12:fd:f1:2f:9b:da:71:80:97:24:ca:d0:e2:68:1e:
77:69:b6:a7:8a:4c:15:fb:72:84:d8:cb:eb:f7:fb:
7e:de:75:5c:e3:2f:3c:b2:30:90:9c:b9:16:66:46:
ca:c6:cc:35:1f:39:fe:64:ab:08:bf:bd:6d:90:16:
5e:a3:0b:06:d9:1d:2e:35:59:ba:6f:a5:11:b7:47:
31:ee:af:2c:47:ad:0a:a5:ea:e1:1b:be:da:37:90:
37:11:6e:65:08:b3:71:5f:fb:72:26:b0:28:76:fa:
43:2c:1f:1d:f6:f3:72:52:bb:c4:ca:fc:90:27:37:
a8:e1:fa:29:66:0c:a6:1c:2d:08:3d:35:75:8d:c7:
0f:69:1c:2a:07:fe:fb:74:b7:b1:cf:fa:2b:09:29:
d8:b3:b1:9e:2b:b8:79:5a:1d:27:ba:52:20:fc:44:
ce:41:cf:6d:e7:87:b6:48:05:73:cc:99:a6:8e:61:
99:ff:ac:f5:9e:d1:71:a6:b9:12:d3:cd:42:d0:19:
a1:56:a0:63:00:5e:4e:06:2a:c2:a5:fb:67:04:fe:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:C5:B1:3B:B4:C2:F6:AB:78:76:17:0C:6B:82:68:16:5D:61:72
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/LtTFsTu0wvareHYXDGuCaBZdYXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.173.0/24
91.211.240.0/22
185.4.120.0/22
194.113.24.0/24
195.54.172.0/23
IPv6:
2a02:7040::/32
Signature Algorithm: sha256WithRSAEncryption
60:ff:18:c1:bd:95:ca:61:f8:67:d9:b7:3a:36:16:a6:85:f3:
cd:34:42:f6:e3:49:23:8d:0f:58:18:7e:42:4e:8b:54:a7:aa:
6a:82:1c:e0:d0:74:80:77:cd:a5:29:c6:f3:4f:ca:52:28:3f:
74:2d:fa:f2:c6:35:cf:c3:b4:45:02:ba:18:ca:71:6f:11:b7:
92:9c:98:eb:15:43:5b:50:7a:4c:f9:f6:95:98:41:3b:b5:a6:
b0:87:0b:7b:ea:2d:ae:4e:c0:4b:ee:b7:53:be:8f:35:b6:ff:
b1:63:58:ff:54:e7:44:28:47:4d:d9:ec:00:e5:a4:32:61:ab:
82:80:02:64:e0:47:12:05:d7:b3:cc:3d:21:ec:8a:fc:ba:71:
d4:02:e3:e2:23:a3:9b:db:3c:48:23:cd:f3:ba:09:f8:7a:4c:
33:57:ac:dd:d7:7a:31:7c:53:a6:f2:2b:04:77:31:fb:dd:c0:
2f:e3:3a:2a:a9:ec:58:5d:63:ff:aa:ce:ff:a9:ab:8b:9f:c6:
e4:46:4d:39:37:1e:6c:fa:a1:35:ac:13:c9:e9:38:d1:c1:59:
1c:57:bd:7c:e2:73:6c:cd:cd:3c:16:35:2f:99:ec:91:bc:59:
97:8d:22:e2:a9:bc:32:bc:43:cb:26:fd:9a:c7:aa:96:59:50:
8d:25:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:34:01 2024 by rpki-client on console-ams.rpki-client.org