Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/L2jKN4M48FRHgwL2GnGunQJlnUI.roa
File: L2jKN4M48FRHgwL2GnGunQJlnUI.roa (raw, json)
Hash identifier: lkhTW+JFByLy2NzcT0SfAHEJexunDtm+6I5bUTAwXjQ=
Subject key identifier: 2F:68:CA:37:83:38:F0:54:47:83:02:F6:1A:71:AE:9D:02:65:9D:42
Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial: 018CC49247AD473DEFC04C12C58E01FB780E
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/L2jKN4M48FRHgwL2GnGunQJlnUI.roa
Signing time: Mon 01 Jan 2024 10:29:30 +0000
ROA not before: Mon 01 Jan 2024 10:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43366
IP address blocks: 192.145.24.0/22 maxlen: 24
5.133.84.0/22 maxlen: 24
185.197.188.0/22 maxlen: 24
185.205.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:47:ad:47:3d:ef:c0:4c:12:c5:8e:01:fb:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
Validity
Not Before: Jan 1 10:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f68ca378338f054478302f61a71ae9d02659d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4f:f8:5c:fe:a1:82:aa:9b:d2:9a:de:ef:06:
a2:ec:92:b3:fc:8b:be:fe:b7:c0:f4:87:ae:d2:03:
4d:9b:f8:d5:97:9f:d2:82:45:76:72:28:01:52:c9:
5e:ed:b2:ee:55:84:dd:25:25:6a:c1:b8:45:75:0a:
b7:79:f3:0b:81:f1:63:70:00:b4:d4:11:c1:27:13:
9c:de:b8:3d:1a:6b:9e:31:51:7c:f9:63:15:9a:8d:
63:16:c0:35:2e:28:8a:40:04:63:5b:e7:83:5c:24:
f5:7d:b0:04:87:eb:af:49:d1:eb:b3:73:02:03:d0:
54:ac:b5:45:2e:09:6f:21:7a:26:0b:53:7c:fb:3b:
85:c1:1a:95:bf:22:ad:86:a2:e6:5b:61:54:37:9d:
6d:62:7a:52:17:9c:e4:55:cb:92:a4:ae:a5:30:b5:
64:8d:77:0f:c0:1e:f0:a0:bb:b1:f5:8b:f2:f8:12:
6b:a1:78:1d:d5:5a:fc:64:76:9c:51:e9:a8:a2:7d:
de:ae:77:8d:f3:43:6c:8f:85:d2:c5:d7:04:6c:56:
c4:9b:0f:d4:f6:eb:cc:d1:df:59:e1:df:ed:e0:75:
6a:0d:87:ca:05:4d:c3:9f:5a:44:44:04:ca:38:a9:
d4:5a:30:a5:35:7d:5e:85:77:09:74:16:5a:85:40:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:CA:37:83:38:F0:54:47:83:02:F6:1A:71:AE:9D:02:65:9D:42
X509v3 Authority Key Identifier:
keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/L2jKN4M48FRHgwL2GnGunQJlnUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.84.0/22
185.197.188.0/22
185.205.240.0/22
192.145.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:fa:08:b8:3f:a8:62:a8:97:90:9b:72:31:de:18:18:16:60:
d5:e8:a2:6b:28:e6:8e:fa:fd:ae:07:17:f7:13:a2:9d:5f:56:
eb:12:59:95:87:c3:ef:dc:c3:8b:03:d6:1f:9f:16:50:a9:92:
24:18:07:ba:d1:c5:09:c1:ff:65:a6:67:c8:0b:2d:42:71:6e:
a0:cd:92:14:7a:01:e0:9f:85:f8:18:c7:9d:01:ba:19:91:47:
a4:68:9e:5f:c4:d8:74:2a:f8:dd:06:5f:14:d3:83:a1:13:a8:
82:08:2f:bc:aa:30:39:60:a9:0b:65:50:aa:d4:ca:73:95:56:
c6:3c:f1:c6:66:8d:fb:65:9e:8a:fb:d8:12:a4:8a:ef:7f:f1:
6f:f0:8e:c1:30:f1:6c:08:9f:11:2a:fe:c7:c6:7d:5b:98:db:
be:4d:85:33:28:be:61:44:67:84:f5:be:40:aa:4b:4f:c2:0f:
35:e6:a2:73:45:7a:8d:8c:67:c5:47:d1:4b:f0:fa:ec:31:ff:
bb:84:ac:d7:8e:1b:ee:82:69:55:a0:c4:9c:c0:7a:ac:19:1b:
f4:11:2b:a8:83:47:89:b2:b6:1f:e9:f9:5e:aa:0e:c5:b2:a2:
e2:28:cc:ce:c3:5a:60:34:35:59:f6:18:37:44:71:f4:df:a0:
dd:e3:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:26:17 2024 by rpki-client on console-fra.rpki-client.org