Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/L3lB1VMgrVTWB1ZUynJkhFdVKNA.roa
File: L3lB1VMgrVTWB1ZUynJkhFdVKNA.roa (raw, json)
Hash identifier: 1YTNvaVrdlL91f+z2sVI7phmO4HyK06IozYkRzaada8=
Subject key identifier: 2F:79:41:D5:53:20:AD:54:D6:07:56:54:CA:72:64:84:57:55:28:D0
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 018CC7954E064805BFD10C108CC92EB6E1ED
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/L3lB1VMgrVTWB1ZUynJkhFdVKNA.roa
Signing time: Tue 02 Jan 2024 00:31:39 +0000
ROA not before: Tue 02 Jan 2024 00:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 94.125.226.0/24 maxlen: 24
94.125.224.0/24 maxlen: 24
94.125.225.0/24 maxlen: 24
94.125.227.0/24 maxlen: 24
94.125.228.0/24 maxlen: 24
94.125.229.0/24 maxlen: 24
94.125.230.0/24 maxlen: 24
94.125.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4e:06:48:05:bf:d1:0c:10:8c:c9:2e:b6:e1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f7941d55320ad54d6075654ca726484575528d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:b2:5a:bd:dd:5a:22:4e:41:85:a8:a3:1e:
fa:af:0e:3e:72:60:b6:8d:6c:ea:a1:02:64:7e:8c:
cb:f8:8a:ae:c4:d5:6e:12:75:da:06:88:2b:a8:8d:
b9:bd:cd:84:ed:31:55:9e:fe:15:8a:57:b9:f2:9e:
bb:54:32:ea:63:09:2d:24:02:e1:57:c4:ca:07:44:
f1:f9:dc:9a:c3:4e:a7:c8:68:1d:27:54:99:62:11:
94:67:d3:7c:6b:e8:7d:92:c8:13:3f:09:26:1e:49:
71:51:38:1d:35:5e:21:2b:4b:13:95:dc:2b:ad:62:
75:24:67:64:10:b6:de:45:47:bb:43:3a:db:e5:d7:
f6:69:ee:c4:54:c1:8d:33:66:d3:09:df:be:92:9b:
c5:d7:b1:73:1f:66:a9:60:ce:ea:e9:98:97:8f:fa:
23:ef:a9:d7:f4:64:c1:77:f7:d7:0e:af:9b:c3:0d:
dc:91:3e:01:e7:dc:49:99:d9:9e:8c:7e:f3:5f:3c:
73:ed:85:2b:6e:70:d9:fb:c1:da:d0:2a:18:22:9a:
2f:8e:31:39:31:4b:f4:6c:a5:1e:7b:ae:c4:c4:2d:
19:89:b9:fd:84:70:4f:9d:27:6b:4f:a3:1a:02:3d:
0a:18:6f:b7:86:12:51:fc:6c:21:11:fd:98:b9:78:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:79:41:D5:53:20:AD:54:D6:07:56:54:CA:72:64:84:57:55:28:D0
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/L3lB1VMgrVTWB1ZUynJkhFdVKNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.224.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:29:69:fa:bd:ab:df:6f:11:d1:9a:9f:6a:43:5d:65:8c:16:
a1:28:cd:09:e9:fd:b2:8e:b6:6a:e6:13:06:cd:af:ff:0a:cd:
e8:99:e2:73:e4:bb:d6:55:1a:9a:99:54:a3:7d:cb:dd:c6:50:
73:63:6f:59:26:75:c2:5e:58:80:24:ea:ef:09:65:63:95:17:
36:d3:a6:c5:de:f2:df:33:cb:71:16:a3:9b:56:17:9e:45:b2:
67:3f:5b:c5:b0:84:41:18:93:41:55:0c:4c:35:3e:b2:5a:ce:
d7:e2:57:f6:a1:b3:c0:7b:1c:91:56:33:c0:7e:bc:e6:50:f1:
0e:29:42:17:56:75:a1:84:78:56:5c:98:b3:41:ff:68:fe:a5:
cb:f1:e7:41:a6:2d:7b:23:28:25:55:fe:03:ca:0e:ee:27:b2:
b6:b0:06:fd:19:09:ac:0e:46:f8:77:65:76:f1:c1:ae:31:18:
34:f9:9f:14:00:c1:37:a3:8d:b5:ef:63:0b:e8:43:0e:87:33:
d7:9d:e2:94:95:d5:82:f1:48:e7:b3:8d:25:0a:17:a1:c5:e5:
29:bd:74:44:bc:bd:aa:00:3f:b8:c7:19:f6:09:16:59:cb:2f:
30:88:89:bf:9e:5f:61:9f:d0:39:8b:43:56:ce:ce:06:06:17:
1b:81:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:39:50 2024 by rpki-client on console-ams.rpki-client.org