Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/lxy1nMDqeZzPbZj97iXXujAI0cQ.roa
File: lxy1nMDqeZzPbZj97iXXujAI0cQ.roa (raw, json)
Hash identifier: lI/sI8wwjyLPElcZNtOB27hMw9sYes8FuQBJ8flHlrw=
Subject key identifier: 97:1C:B5:9C:C0:EA:79:9C:CF:6D:98:FD:EE:25:D7:BA:30:08:D1:C4
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 018CC9BC409F5559CE59EA787EE03FE5BE3B
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/lxy1nMDqeZzPbZj97iXXujAI0cQ.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19624
IP address blocks: 31.14.40.0/23 maxlen: 23
89.39.149.0/24 maxlen: 24
185.105.4.0/23 maxlen: 23
185.105.6.0/24 maxlen: 24
2a01:4ce0:61::/48 maxlen: 48
2a01:4ce0:161::/48 maxlen: 48
2a01:4ce0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:40:9f:55:59:ce:59:ea:78:7e:e0:3f:e5:be:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=971cb59cc0ea799ccf6d98fdee25d7ba3008d1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:e5:79:ba:db:05:51:51:c1:79:b6:3e:09:
e0:c8:0c:54:b8:01:13:49:cf:20:45:a0:09:4f:5a:
9c:5e:b4:fe:9a:0a:7a:b6:5f:8a:a7:5d:d7:b9:84:
f1:51:ff:82:d7:57:48:6d:8c:35:88:3f:08:56:59:
3c:f3:43:b7:d0:b2:18:74:6f:fb:f4:5f:21:cb:ee:
00:29:52:a2:92:17:bf:c5:ad:bb:da:a4:78:eb:83:
60:b0:90:c4:9f:75:c9:af:30:cc:22:84:f3:3e:cc:
ce:03:e5:ca:04:0f:ff:54:6e:13:27:ec:bb:c8:a9:
30:67:7c:b4:00:85:fc:58:cb:32:e9:c4:b0:01:ce:
8b:3f:b7:d5:66:6a:da:5b:b3:7f:d9:9c:f1:f6:40:
ec:22:e1:aa:c5:9a:aa:f4:a6:7a:a1:76:4e:7b:11:
eb:9d:3e:f6:a0:40:f3:1d:1c:11:de:1a:82:d3:60:
26:2d:b4:6c:cd:96:b2:68:7c:b7:1e:68:7b:13:30:
8e:5c:72:a9:76:0a:cc:64:b8:df:52:9b:cc:8e:04:
f3:bd:73:36:67:9f:4a:35:d8:b1:3a:5c:81:86:b1:
df:79:b4:2d:c4:fe:28:5c:3a:4f:17:39:08:b7:81:
c6:2a:98:98:c2:c5:96:75:42:7a:79:e7:3d:d5:d9:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:B5:9C:C0:EA:79:9C:CF:6D:98:FD:EE:25:D7:BA:30:08:D1:C4
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/lxy1nMDqeZzPbZj97iXXujAI0cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.40.0/23
89.39.149.0/24
185.105.4.0-185.105.6.255
IPv6:
2a01:4ce0::/32
Signature Algorithm: sha256WithRSAEncryption
65:45:7c:d7:1e:6b:10:67:c8:c2:b0:b6:5d:81:71:8f:c3:3d:
4d:82:dd:03:34:8e:d5:6b:62:cf:4e:c3:7f:39:c2:6a:49:81:
be:79:c2:48:25:3f:06:a1:6e:bb:e6:19:47:36:30:b1:a0:51:
96:34:23:64:db:7d:e3:7e:56:e4:3f:9b:09:25:78:29:cc:58:
5c:38:92:e9:e5:c1:a7:8e:d1:19:4b:2f:26:56:b0:1e:84:42:
b8:50:80:f6:e7:b4:3b:a4:fe:48:ed:89:0e:82:88:e5:0f:91:
32:93:19:74:0b:11:93:08:97:4f:7c:52:5b:1f:00:2c:d3:bb:
e5:b6:ef:d9:f3:91:ca:9b:20:6c:7e:3c:70:12:1f:8a:ce:a5:
41:4e:90:00:0d:6a:5c:31:3c:8e:d7:cf:8f:24:41:53:70:8c:
f1:77:31:13:a9:5e:74:bc:76:ad:b1:0c:65:31:ec:22:3c:9f:
90:c9:6d:91:4b:18:ae:36:06:cb:35:78:84:99:b0:91:bd:9e:
e6:8b:f2:34:58:2c:c9:f9:52:fb:f9:c0:46:a4:9f:3b:a5:ae:
fb:f3:fb:86:e5:16:74:00:e1:41:8f:64:1f:b7:42:59:2c:63:
85:20:d6:13:73:85:54:65:3f:f7:b9:90:75:4a:68:7f:37:ee:
aa:78:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:39 2024 by rpki-client on console-fra.rpki-client.org