Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/lr7o-wDe4-DQ3EDBYahsjTpR_So.roa
File: lr7o-wDe4-DQ3EDBYahsjTpR_So.roa (raw, json)
Hash identifier: 3+oufTWsehyJZQNfxpds6hsmLvVLtbFnFA72v/zBhUo=
Subject key identifier: 96:BE:E8:FB:00:DE:E3:E0:D0:DC:40:C1:61:A8:6C:8D:3A:51:FD:2A
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019254331D94058F117FD549F64AF473E015
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/lr7o-wDe4-DQ3EDBYahsjTpR_So.roa
Signing time: Thu 03 Oct 2024 21:04:48 +0000
ROA not before: Thu 03 Oct 2024 21:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 185.115.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:33:1d:94:05:8f:11:7f:d5:49:f6:4a:f4:73:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Oct 3 21:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96bee8fb00dee3e0d0dc40c161a86c8d3a51fd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:2d:59:65:fa:be:b3:15:79:45:7f:1f:ed:
30:26:7c:28:49:bd:81:c6:fc:04:09:42:34:fa:dc:
56:e8:19:73:83:d0:2d:09:e5:94:7c:45:4a:90:3a:
20:be:69:2e:a9:35:70:38:26:d1:e9:ec:33:8a:a2:
0f:e0:30:2a:02:5e:b7:b6:16:f5:c9:2f:20:6b:cf:
aa:a1:98:0e:f9:d0:27:02:d9:4b:63:b0:e1:3f:b7:
c1:9b:1a:3d:30:75:99:ab:0e:6b:01:1a:bd:35:bf:
ff:91:a1:9b:ff:04:d5:13:c7:7e:3b:c4:b6:b5:96:
75:0d:56:95:d5:f8:a0:1a:6e:c5:f9:70:f5:b1:5b:
0a:dd:7b:f0:11:fa:95:2a:6d:bb:03:99:65:09:5b:
ac:dd:55:00:fe:dd:ba:75:13:5f:42:86:83:3c:c1:
48:b7:06:33:10:2f:d3:a7:b0:20:21:4e:e8:6f:c0:
11:4d:9c:5e:b0:8d:17:d9:bb:fb:5b:2b:97:71:7b:
49:22:74:2a:48:3c:2f:ea:e8:0a:85:05:08:76:1a:
08:3f:c2:75:7b:65:2e:1c:7d:90:41:b7:4e:6d:aa:
d3:7d:fe:30:9d:69:54:12:80:a4:5e:75:b7:fc:47:
f6:1e:0e:69:f2:a1:08:f2:09:51:8b:e8:6c:2b:65:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:E8:FB:00:DE:E3:E0:D0:DC:40:C1:61:A8:6C:8D:3A:51:FD:2A
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/lr7o-wDe4-DQ3EDBYahsjTpR_So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.160.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2c:d2:fe:bc:67:30:2c:55:42:e0:f2:40:2a:af:37:51:15:
14:88:1b:80:c9:dc:5d:82:2e:9c:3e:53:31:be:04:ba:1d:ae:
b1:f3:5c:b4:27:4d:58:f0:f4:16:ed:65:ab:7f:1a:6a:69:f2:
26:a3:b7:84:91:3b:2b:4d:66:82:ea:68:31:2b:fc:34:ae:c4:
cf:7e:9d:2e:55:01:cd:59:04:64:f6:6d:44:6c:ff:88:3e:71:
38:02:98:02:a5:2a:5f:d7:71:b0:e4:c5:85:e9:7a:44:cc:16:
f5:5a:f0:ab:a6:a2:06:1b:52:84:5e:35:8d:62:d5:14:11:aa:
49:07:39:82:0f:ae:7e:11:77:6e:b3:7e:33:a9:3c:85:f3:0e:
75:50:a3:56:24:a6:ff:0c:59:b1:68:93:93:dd:3b:9f:d3:d8:
d0:54:3f:4a:15:a1:c1:e0:49:7c:f9:9f:c1:e5:76:44:41:48:
8d:8a:2c:cb:26:d9:07:06:91:d8:f0:eb:b4:6b:18:99:73:42:
25:1b:93:72:d5:66:9c:8c:23:3d:76:b6:c7:d6:54:17:23:44:
ea:6d:d9:76:e7:1a:a5:71:73:53:8f:83:2c:ce:5b:be:42:47:
40:db:15:c5:04:4a:74:8c:e3:3f:15:7e:d5:a9:fe:20:c0:e5:
d4:15:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:16 2024 by rpki-client on console-fra.rpki-client.org