Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LrQQqvcILFHvixv8UQexPF1hdJk.roa
File: LrQQqvcILFHvixv8UQexPF1hdJk.roa (raw, json)
Hash identifier: eIVBT246BvcKytxP2HTOCapKm+3UeKAug9BpmrjBGYM=
Subject key identifier: 2E:B4:10:AA:F7:08:2C:51:EF:8B:1B:FC:51:07:B1:3C:5D:61:74:99
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018F153125238850CC10223A4368A68EAA9F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LrQQqvcILFHvixv8UQexPF1hdJk.roa
Signing time: Thu 25 Apr 2024 12:18:13 +0000
ROA not before: Thu 25 Apr 2024 12:18:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.30.241.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:31:25:23:88:50:cc:10:22:3a:43:68:a6:8e:aa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 25 12:18:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eb410aaf7082c51ef8b1bfc5107b13c5d617499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:1d:d3:a7:a3:4d:0a:72:a5:bd:d4:d4:47:
94:a3:31:49:82:bd:85:bb:9d:1a:24:92:74:44:26:
c4:6f:35:8d:15:f3:38:4b:ef:9e:b7:c1:5c:d7:9b:
cc:fc:a7:b3:c1:5e:1e:7b:9a:66:a2:cf:97:3a:62:
ea:46:5d:b1:95:d0:03:38:31:f5:ba:4e:68:df:7f:
1a:09:5b:75:28:8b:1c:ac:d4:c3:6b:12:20:63:48:
4e:10:f4:b0:b9:ed:a6:8e:a1:d9:69:43:25:8f:83:
6c:af:ba:7c:49:27:cc:02:b9:a5:d3:7d:44:03:ee:
e0:4f:57:59:c0:6b:89:b3:cd:8c:4f:da:f0:6a:4e:
d7:7f:e8:a6:7c:4f:32:6a:71:17:c6:1f:e4:3e:76:
42:bc:b6:67:64:af:2c:68:a2:4c:39:81:82:bd:34:
cc:e1:14:2e:53:e1:2f:81:68:ba:25:03:d9:4c:a0:
a5:31:bb:92:81:f5:0b:5f:11:56:9a:1e:64:d5:5b:
16:95:bf:31:c5:dd:12:79:1f:b5:db:15:04:72:2a:
16:32:eb:e3:ea:3d:dd:54:4c:b7:a7:db:0a:97:4f:
33:21:87:88:67:11:0c:40:63:91:28:08:1a:56:d4:
74:bc:7a:db:fa:4c:9f:3f:30:47:08:10:be:c4:27:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:10:AA:F7:08:2C:51:EF:8B:1B:FC:51:07:B1:3C:5D:61:74:99
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LrQQqvcILFHvixv8UQexPF1hdJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.94.170.0/24
85.209.120.0/23
193.30.241.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
54:fd:18:94:e5:43:64:63:e4:b2:da:5e:f0:b6:c1:20:03:68:
4f:2b:9d:99:a4:81:2b:8e:35:3c:de:07:04:8c:73:f8:7f:72:
3c:11:9d:82:eb:3c:ef:b6:a2:bd:b6:40:df:5c:ae:f6:e8:6b:
04:bc:d1:0c:ee:31:88:56:47:20:c9:f8:19:b3:8f:2c:ba:78:
3a:a7:24:f8:b0:63:3a:07:87:dc:a4:d7:3c:60:28:d2:48:af:
b7:b7:77:2e:6f:8b:7b:35:0a:64:f1:59:c9:d3:b5:e2:a1:1f:
86:d1:b3:63:54:65:db:22:da:40:ad:d7:9e:b6:4e:80:f1:ff:
f6:e8:ff:b6:2e:89:06:66:21:37:da:27:b5:ab:e5:ae:a3:fa:
42:f6:3d:74:10:23:71:07:ac:48:c1:34:bf:86:81:74:2f:7d:
0b:3b:cd:a6:3a:9e:e6:ce:c7:07:4f:bf:e4:56:6a:5d:e1:b3:
6d:2e:9e:a1:c3:58:50:bc:f3:eb:0f:40:81:92:78:c7:5a:1e:
64:17:2e:ca:ad:d4:9a:84:2f:57:78:c2:62:b9:85:bb:68:c0:
aa:cc:53:86:b3:9c:4d:91:d9:c0:53:40:9d:b1:b2:fc:57:a0:
c0:ab:7d:e2:91:d7:5b:bc:b9:6f:6b:a2:c6:19:c7:c3:8c:41:
af:e8:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:51:55 2024 by rpki-client on console-fra.rpki-client.org