Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Lm4XZvAHqpt2zPWbCcM4CXPVy80.roa
File: Lm4XZvAHqpt2zPWbCcM4CXPVy80.roa (raw, json)
Hash identifier: I1AWuJETse1NBf6yf2LA3lPvIR+UPgjCg7nbn0OntPs=
Subject key identifier: 2E:6E:17:66:F0:07:AA:9B:76:CC:F5:9B:09:C3:38:09:73:D5:CB:CD
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC46FD0C4DFC2AF17F5D0310F97D28
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Lm4XZvAHqpt2zPWbCcM4CXPVy80.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49199
IP address blocks: 194.226.137.0/24 maxlen: 24
195.208.220.0/23 maxlen: 24
194.226.34.0/23 maxlen: 24
195.19.10.0/23 maxlen: 24
62.76.74.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:46:fd:0c:4d:fc:2a:f1:7f:5d:03:10:f9:7d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e6e1766f007aa9b76ccf59b09c3380973d5cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:b9:a0:b5:39:53:5d:fd:c6:14:15:64:8c:
ca:87:48:60:22:dc:8b:2d:f6:94:ba:89:06:37:2a:
b0:40:c6:1d:37:67:f3:b3:d4:54:7e:4d:c6:a2:2e:
66:8a:00:6c:57:ed:09:54:b3:2a:24:75:70:f0:a2:
d0:27:74:a0:e0:b1:35:97:01:2e:25:31:52:4f:49:
dd:6d:c6:a6:3d:16:14:1a:4f:62:15:c2:be:05:68:
8b:0a:5b:5d:13:9f:3f:f2:64:bb:c3:bc:26:9d:49:
af:5f:a1:00:e3:74:5c:64:df:a0:02:e2:48:33:c7:
00:18:51:bb:94:f8:ba:a9:f5:17:f6:80:30:d3:c0:
38:c8:81:12:94:64:6a:e6:dd:34:88:4b:45:d9:2d:
a6:21:a7:7d:92:4c:06:57:50:7c:4b:45:38:11:db:
e5:3a:39:33:0c:68:58:58:03:80:fe:12:cf:38:e5:
ac:b5:8c:45:3a:aa:52:87:4a:3d:fe:6b:9f:ed:49:
5a:a2:82:02:54:4b:eb:e8:b7:cf:7f:2e:7d:7f:e9:
ba:c0:cd:ca:f9:e5:45:77:97:06:d9:e7:d7:62:fa:
3e:2e:2b:69:57:72:27:79:52:ee:b0:df:da:d8:81:
ad:36:ce:77:72:d2:bc:68:e3:84:86:92:8c:f5:0d:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:17:66:F0:07:AA:9B:76:CC:F5:9B:09:C3:38:09:73:D5:CB:CD
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Lm4XZvAHqpt2zPWbCcM4CXPVy80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.74.0/23
62.76.96.0/23
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.208.220.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:d4:38:14:1b:90:ad:f5:a8:54:34:dd:88:86:57:72:66:04:
10:cc:70:77:95:44:31:af:5b:fe:7e:97:37:da:9e:e2:51:be:
31:52:e4:93:ce:87:a8:d1:d5:90:3e:36:5b:93:4b:d2:4c:6d:
58:e5:45:3e:34:f3:6f:59:f0:fd:21:92:7c:32:38:d0:c4:27:
ff:15:46:90:45:d0:68:d1:05:ef:98:ff:8a:57:91:47:d8:28:
97:2d:81:3f:a8:7f:a4:24:94:b6:b6:04:8f:f4:1b:fd:40:11:
b2:cb:e0:b1:7e:b8:02:e0:c3:73:45:a3:8d:3c:f4:9a:4d:fc:
31:97:53:bb:09:d4:b4:86:32:a5:73:0f:31:2c:a8:d9:a1:05:
6d:0c:17:9b:f4:c7:62:13:db:0e:a7:7f:fa:3e:4b:a5:56:56:
04:9c:f9:b8:44:e1:9b:89:e7:01:49:9e:46:e0:b5:ae:0d:10:
5d:c2:bb:dc:88:71:a4:52:ca:45:20:90:05:3d:7e:5f:4d:00:
cb:cc:a2:8d:6d:15:4b:6f:49:39:a6:b3:19:07:44:fe:11:71:
25:bc:cb:0e:b9:e8:74:f5:ef:02:3b:6c:ba:f2:df:1b:91:b5:
b6:50:53:b0:f8:67:b7:82:5f:8f:ba:bd:b1:fa:e9:d3:13:f8:
eb:d3:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:03 2024 by rpki-client on console-fra.rpki-client.org