Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/lSBM7EqQw94rf7zF5fFsOPH_thg.roa
File: lSBM7EqQw94rf7zF5fFsOPH_thg.roa (raw, json)
Hash identifier: JdSAkJXxzJRUpVpivjPGtT0Oet+FzPeMU9563tEo/EA=
Subject key identifier: 95:20:4C:EC:4A:90:C3:DE:2B:7F:BC:C5:E5:F1:6C:38:F1:FF:B6:18
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 01927D3FE3B7E887D7B1468E300D6C3C549D
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/lSBM7EqQw94rf7zF5fFsOPH_thg.roa
Signing time: Fri 11 Oct 2024 20:23:11 +0000
ROA not before: Fri 11 Oct 2024 20:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12595
IP address blocks: 185.117.226.0/24 maxlen: 24
185.133.88.0/22 maxlen: 24
188.116.45.0/24 maxlen: 24
193.142.212.0/24 maxlen: 24
212.11.88.0/22 maxlen: 24
2a10:7180::/29 maxlen: 29
2a10:7180:101::/48 maxlen: 48
2a10:7180:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:3f:e3:b7:e8:87:d7:b1:46:8e:30:0d:6c:3c:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Oct 11 20:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95204cec4a90c3de2b7fbcc5e5f16c38f1ffb618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:58:13:4d:2f:d2:bf:60:99:be:99:55:a0:
0f:7e:1f:d5:52:7f:53:03:c0:00:6c:48:08:50:4e:
6e:43:00:14:cc:ca:28:6f:56:7a:12:8d:54:62:3f:
fc:d2:24:e3:ad:5c:58:82:eb:e7:ec:05:91:15:8d:
40:7e:f2:32:f5:8a:b6:b2:94:70:29:63:e9:03:73:
81:66:22:7f:b3:48:88:58:f9:10:3a:a0:8a:b5:ce:
5d:8f:8f:c5:9b:4c:2d:78:b0:62:26:f8:87:b6:ac:
c5:f8:70:4e:41:0e:ee:a1:af:5f:ef:6c:d8:e2:0f:
fe:26:e2:5a:9a:f4:35:42:3b:49:51:de:99:82:04:
09:94:44:99:fe:8a:50:27:d2:4b:7d:56:62:88:98:
6b:6e:f3:7d:c7:dc:04:1b:aa:d4:b8:43:d4:36:d0:
29:ed:b0:3f:db:f6:ae:bb:f4:3c:79:95:df:6d:6f:
c1:56:13:87:67:52:ec:2c:1c:a8:f2:89:cd:08:e1:
61:7c:32:5e:af:c0:6b:9f:0f:61:71:55:d3:e9:26:
ad:5e:5b:e8:09:fa:51:ec:0b:99:df:23:99:a7:7e:
e6:e3:0b:cf:a9:19:51:a9:94:75:e3:cd:86:8a:3c:
d9:6a:c7:df:c2:06:38:70:7b:df:8b:10:1f:36:42:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:4C:EC:4A:90:C3:DE:2B:7F:BC:C5:E5:F1:6C:38:F1:FF:B6:18
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/lSBM7EqQw94rf7zF5fFsOPH_thg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.226.0/24
185.133.88.0/22
188.116.45.0/24
193.142.212.0/24
212.11.88.0/22
IPv6:
2a10:7180::/29
Signature Algorithm: sha256WithRSAEncryption
47:6d:7a:82:13:90:59:12:bb:f8:dc:01:64:60:c2:1d:5c:e9:
bc:2a:27:ba:80:7c:eb:6e:4f:79:b4:0b:b5:be:56:83:a5:7d:
80:71:21:71:01:ea:3c:f5:0b:fb:35:66:1a:dc:d5:94:d3:cc:
16:37:99:91:33:f3:9e:67:af:83:80:91:ed:4b:6c:a3:0c:e3:
0a:68:96:7d:70:b7:e6:77:cb:bd:3f:7b:92:7a:d4:74:b1:d7:
d5:c5:c3:07:84:2e:1a:ac:f2:c7:88:0d:9c:97:49:d4:b3:cf:
ba:96:82:7d:43:4a:09:c3:bd:55:8a:bb:c3:55:c6:3e:84:ad:
af:dc:0b:c4:c5:3d:80:a4:fb:aa:20:c3:c8:1e:a2:a4:08:91:
d9:ac:52:dd:5c:16:b5:b0:0d:c0:cd:01:dc:43:16:c7:27:0c:
d5:42:a6:67:71:70:c9:35:f4:1c:43:b1:46:34:4d:4c:b5:20:
99:c7:a6:c4:56:ef:16:aa:5f:55:46:dd:3d:e1:2f:72:bb:65:
b4:f8:6c:f1:b6:df:dd:1b:ce:ea:25:1e:82:24:8c:ad:3c:3d:
f4:fb:b5:df:46:56:f2:6c:02:db:db:93:e1:ca:1b:ca:7a:82:
17:a2:28:18:2a:87:cd:3c:8e:1a:f4:f3:8f:88:a7:d0:e2:97:
7c:dc:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:32 2024 by rpki-client on console-ams.rpki-client.org