Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/lFtGNLbqjqSjsolPBExn1CUhzCE.roa
File: lFtGNLbqjqSjsolPBExn1CUhzCE.roa (raw, json)
Hash identifier: Hdz10tmkDLUHwK8BKEB/PTavLtum42TFwjfVeqC/H8Q=
Subject key identifier: 94:5B:46:34:B6:EA:8E:A4:A3:B2:89:4F:04:4C:67:D4:25:21:CC:21
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018E5DB102EFFDBBE7DF7CBA65FD6AF3AD8E
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/lFtGNLbqjqSjsolPBExn1CUhzCE.roa
Signing time: Wed 20 Mar 2024 21:07:45 +0000
ROA not before: Wed 20 Mar 2024 21:07:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 91.209.71.0/24 maxlen: 24
185.171.202.0/24 maxlen: 24
2a10:4640::/32 maxlen: 32
2a10:4645::/32 maxlen: 32
2a10:4646:50::/44 maxlen: 44
2a10:4646:170::/44 maxlen: 44
2a10:4646:240::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:b1:02:ef:fd:bb:e7:df:7c:ba:65:fd:6a:f3:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Mar 20 21:07:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=945b4634b6ea8ea4a3b2894f044c67d42521cc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:5c:78:e4:8e:2f:f1:c0:03:11:b9:6d:8c:
a1:00:57:a2:90:1b:ab:fa:c5:30:28:ce:49:6c:ee:
9a:b5:30:bc:87:e9:94:6c:d0:7a:b9:ae:0a:8c:2f:
0a:58:e5:d1:08:0b:53:ba:32:02:0b:a2:00:e8:26:
e1:b4:be:62:12:7b:70:3d:ad:15:43:c5:c7:e7:21:
90:91:24:7b:95:3d:c9:39:5f:5b:1a:b1:b8:f7:61:
9b:af:dd:b6:92:52:15:76:e1:e7:fc:c5:fa:af:bf:
90:ba:bf:1b:45:cb:61:2d:7a:63:cb:4d:89:1b:52:
65:78:5b:d6:87:f1:8d:63:5d:b5:25:b9:8f:34:f8:
66:93:fc:22:60:1d:a3:e0:d9:78:c0:5e:09:54:8f:
a0:03:3a:06:7f:02:15:ff:90:a2:99:85:a3:6d:38:
85:9b:47:b4:95:ee:c6:50:29:ff:73:7e:b3:c6:35:
5b:3a:d5:64:f8:58:fb:38:f9:df:0e:d2:a7:04:5c:
ba:4c:18:a7:b9:06:08:00:4b:b3:99:e0:c1:62:61:
6c:e4:e4:d3:33:82:ca:70:a1:35:3c:86:a9:5b:a5:
22:b2:4e:0e:47:d1:39:3f:c2:45:90:b9:5c:1b:f2:
ca:e9:da:2c:d0:42:34:6d:70:43:b4:6f:0d:27:42:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:46:34:B6:EA:8E:A4:A3:B2:89:4F:04:4C:67:D4:25:21:CC:21
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/lFtGNLbqjqSjsolPBExn1CUhzCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.71.0/24
185.171.202.0/24
IPv6:
2a10:4640::/32
2a10:4645::/32
2a10:4646:50::/44
2a10:4646:170::/44
2a10:4646:240::/44
Signature Algorithm: sha256WithRSAEncryption
42:1c:46:87:0a:c1:0a:25:dc:17:b1:b8:09:d0:7c:79:ba:54:
b3:e1:4c:ff:a5:66:24:3f:7c:98:79:b0:54:eb:a3:ac:7d:3f:
57:67:db:b4:f5:fd:3f:8c:c2:f9:71:02:65:7c:4a:d3:c2:e0:
6f:bd:9b:20:96:df:6f:23:87:62:a2:2c:16:58:65:1c:e1:90:
b5:a6:d0:04:ef:9d:60:2c:47:12:3c:a2:43:81:af:73:00:b5:
2a:28:ba:e9:e4:c1:cc:6a:4a:86:e9:68:6a:73:61:b5:f7:b5:
b8:07:49:a5:1a:11:ca:1d:5a:f9:dc:8f:2f:e0:e6:5d:bd:54:
29:ff:df:31:43:58:67:40:82:d9:87:e7:68:15:fe:f8:da:e3:
a6:01:46:65:fc:4a:49:3a:1b:ff:20:28:56:98:59:fd:ae:e1:
ef:7b:6f:b1:1a:c2:30:bd:9d:d5:91:99:3c:1e:f1:e3:b6:f0:
df:c8:78:07:69:6d:f4:14:b0:86:3a:a2:c1:41:05:27:d2:45:
6f:77:c0:e1:d3:e7:16:81:e8:d4:a5:ae:ac:9d:38:10:7c:3f:
ec:8a:0e:9d:39:1e:79:b6:2b:a5:ba:7f:d3:00:5a:19:f6:9c:
6c:91:10:84:3e:57:09:8a:b0:6c:55:56:cc:0d:c4:26:a2:93:
1b:15:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:49:27 2024 by rpki-client on console-ams.rpki-client.org