Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Lwl8TMevHzQlDXAyx9pl1ayJN_o.roa
File: Lwl8TMevHzQlDXAyx9pl1ayJN_o.roa (raw, json)
Hash identifier: AvZVGZ/gi1h20tY20zMPWwW+9DVbaIgW+FO+/V/FOF4=
Subject key identifier: 2F:09:7C:4C:C7:AF:1F:34:25:0D:70:32:C7:DA:65:D5:AC:89:37:FA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018EDC5F27742D4D145A84BE29C6025F51BD
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Lwl8TMevHzQlDXAyx9pl1ayJN_o.roa
Signing time: Sun 14 Apr 2024 11:30:07 +0000
ROA not before: Sun 14 Apr 2024 11:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.54.0/23 maxlen: 23
81.180.36.0/23 maxlen: 23
81.180.204.0/23 maxlen: 23
85.120.44.0/23 maxlen: 23
217.156.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:5f:27:74:2d:4d:14:5a:84:be:29:c6:02:5f:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 14 11:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f097c4cc7af1f34250d7032c7da65d5ac8937fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:4a:a3:d3:cc:45:b6:7c:e3:8b:48:32:d3:
66:cc:29:f3:51:97:6e:f4:d5:49:d9:c0:5f:4e:de:
f5:18:c4:b4:f6:ad:94:86:fa:a5:10:a7:87:b0:e3:
97:f5:31:11:db:b3:43:97:39:3b:3a:43:2c:29:30:
6b:f8:98:96:94:83:bf:c3:c9:ad:d2:a5:10:5a:be:
6a:9b:f0:86:3f:4c:d5:94:7a:89:66:58:16:86:cb:
7b:46:00:ac:f8:c2:48:27:09:0f:c0:3f:54:2c:45:
c6:51:fe:33:f2:55:37:9c:4e:b1:ed:18:c6:7c:f1:
de:92:2d:6e:d6:01:f5:a0:02:90:76:98:ef:97:0e:
cc:1b:8b:fe:77:93:5e:7a:38:e7:25:79:f2:34:57:
c1:9a:cd:52:2c:cb:6d:21:2f:29:12:e1:b4:1f:a8:
59:f4:1a:7b:99:63:f3:89:06:5e:94:7f:0f:c5:f7:
d5:40:1d:3b:92:17:0d:20:ae:9d:c9:6f:ce:68:cf:
75:eb:8d:30:46:78:7c:ce:02:27:51:96:f3:23:e6:
04:8d:8e:2d:6f:a8:13:42:7a:84:fb:ff:d4:1f:38:
71:68:9d:5a:07:d1:5b:53:a2:30:c1:f4:82:e8:f7:
af:52:4f:e1:4d:e8:ae:43:3b:2b:42:33:6a:c3:96:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:09:7C:4C:C7:AF:1F:34:25:0D:70:32:C7:DA:65:D5:AC:89:37:FA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Lwl8TMevHzQlDXAyx9pl1ayJN_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.54.0/23
81.180.36.0/23
81.180.204.0/23
85.120.44.0/23
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
02:80:82:9c:15:a1:2a:39:d0:80:20:b6:2d:6a:68:6f:7e:2a:
f4:f2:e8:e2:7a:c3:3e:d0:66:17:88:a9:43:59:f6:78:bb:32:
30:98:34:91:fb:96:3b:90:39:71:25:57:99:48:ba:0e:db:13:
65:4a:a7:33:ea:33:ee:ba:8b:ef:e3:ca:ea:00:3a:d6:1e:be:
8f:9a:c9:c6:38:ef:03:da:a4:82:89:55:85:ce:9e:8e:90:5c:
32:f5:65:22:56:02:c2:0f:ec:fe:11:fd:2d:d2:b0:70:cd:02:
2a:5b:4e:b2:b6:51:56:6f:5b:5f:54:d1:a5:c3:28:f6:8a:a4:
41:9d:96:e3:3c:52:46:40:56:86:97:1e:06:61:c4:bb:9d:87:
a0:ef:43:3d:a6:ea:b0:f2:69:70:4c:26:d7:d6:37:f4:e7:d2:
a4:15:50:97:68:10:7a:56:0e:b2:e1:91:e5:94:eb:11:9a:01:
a3:91:47:76:62:c8:db:db:05:82:48:96:b3:2a:c1:0e:d3:bf:
15:30:b4:c1:1d:10:f4:6a:a7:a1:32:a6:b9:45:88:ff:7d:9b:
cb:2e:3d:82:fc:3c:7b:f4:a6:b3:b4:ef:5c:f6:bd:48:0a:a6:
bf:0a:0c:7b:b3:53:37:85:88:79:5e:ab:88:b9:f9:11:c8:49:
bc:4a:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:35 2024 by rpki-client on console-ams.rpki-client.org