Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lmQ3t63Rui9-FJAqbZKVUOrlABM.roa
File: lmQ3t63Rui9-FJAqbZKVUOrlABM.roa (raw, json)
Hash identifier: x7qDztQSUKP1JzBmUEXs5owRrv7ciy6nqgun6TZQlY4=
Subject key identifier: 96:64:37:B7:AD:D1:BA:2F:7E:14:90:2A:6D:92:95:50:EA:E5:00:13
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019113EA90166A5A9F119710A3A5F12B49AB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lmQ3t63Rui9-FJAqbZKVUOrlABM.roa
Signing time: Fri 02 Aug 2024 16:27:04 +0000
ROA not before: Fri 02 Aug 2024 16:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 87.121.3.0/24 maxlen: 24
93.123.112.0/24 maxlen: 24
93.123.115.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:ea:90:16:6a:5a:9f:11:97:10:a3:a5:f1:2b:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 2 16:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=966437b7add1ba2f7e14902a6d929550eae50013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:17:7a:12:01:b4:4a:ba:ff:86:09:f0:62:
33:fb:6f:6f:80:0a:70:ff:64:62:b1:ca:21:f5:5d:
ac:7d:59:d0:79:81:46:f9:4e:c6:f5:db:ce:3c:42:
2e:af:a0:f5:f8:44:77:21:53:94:b5:22:50:63:ab:
6a:f0:10:ef:9b:f4:c5:7f:25:fd:af:09:23:66:0a:
4f:93:2f:42:da:f7:61:c0:94:2e:17:94:a8:95:9e:
55:5f:b2:6f:91:d2:76:e5:6d:c3:14:fd:40:30:8c:
39:42:ed:f8:d2:fa:d3:8f:1d:ec:aa:c0:d0:ea:12:
82:87:2d:27:d1:b5:78:d3:be:8d:65:33:5f:f9:3e:
ae:73:be:2e:4c:44:81:78:a6:b9:60:6e:12:0a:52:
98:13:f0:66:d0:91:7d:e5:c0:79:07:75:ed:71:35:
5b:c7:6c:51:97:ed:4a:d8:0b:e9:52:76:ac:ad:9f:
52:54:da:90:39:ff:69:4c:26:f1:f8:35:5c:18:e8:
62:ed:cf:cb:45:c0:af:8a:fd:7c:55:94:62:4e:95:
e8:ec:e0:56:da:fe:e3:f8:e7:05:32:a4:dc:f8:e8:
a9:71:b4:0f:8b:9c:3e:26:39:0a:00:92:28:d6:0d:
e4:c8:26:f2:e7:f7:48:1a:77:23:77:a0:ed:ee:4c:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:37:B7:AD:D1:BA:2F:7E:14:90:2A:6D:92:95:50:EA:E5:00:13
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lmQ3t63Rui9-FJAqbZKVUOrlABM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.3.0/24
93.123.112.0/24
93.123.115.0/24
141.98.5.0/24
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cc:87:1b:0a:39:91:fa:e1:a3:c5:6b:6f:59:bd:5e:b5:6a:
ea:c7:b4:9e:d4:c8:54:54:62:6c:c3:bc:ee:c8:b7:46:a8:72:
70:85:73:95:63:4e:d8:bc:8f:33:50:0a:91:b7:db:05:d6:7e:
2c:0f:2f:38:49:1d:c1:5b:d6:19:95:99:0c:7f:bb:d6:b5:c7:
c1:f6:98:82:ad:e5:e1:4b:a7:a8:1f:da:81:b9:64:6b:48:00:
b6:f8:71:2f:a4:98:ce:38:57:ad:97:7a:10:3f:ca:31:25:21:
4c:97:e1:1f:56:72:6e:1c:71:0c:61:d0:f8:05:34:ed:35:78:
08:ee:68:68:0f:0a:26:84:a4:a2:a6:1e:e1:f2:c5:4b:ae:5e:
b6:e6:61:98:8f:42:7f:bf:eb:b0:47:36:a0:3e:51:f1:41:a3:
ff:30:d8:b3:45:0b:1e:56:6f:55:4e:39:29:cc:f1:a3:d2:b6:
4c:b5:33:ef:80:28:06:e1:8b:dc:5b:16:17:cb:94:ff:f8:53:
d8:0c:e2:36:b2:7a:b1:8d:fc:eb:58:98:6e:35:2c:2f:ef:75:
5c:85:fb:92:6f:f7:eb:8e:91:41:a7:b7:da:e7:69:e4:78:04:
c0:f4:1e:b0:86:c0:ee:e5:fb:4c:fe:2b:5d:4d:2b:f3:97:d7:
7d:04:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:07 2024 by rpki-client on console-fra.rpki-client.org