Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/LSR_VdT_s9w5R73CEBoCwmkT6kU.roa
File: LSR_VdT_s9w5R73CEBoCwmkT6kU.roa (raw, json)
Hash identifier: Rujtkv6oZIHTnXevkS0oEdb9EYFgiB5ZjuUfYbDWuAY=
Subject key identifier: 2D:24:7F:55:D4:FF:B3:DC:39:47:BD:C2:10:1A:02:C2:69:13:EA:45
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 018CC94D8A2761B2F3AF922D62FFB6106BA3
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/LSR_VdT_s9w5R73CEBoCwmkT6kU.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3399
IP address blocks: 45.141.108.0/22 maxlen: 22
185.242.228.0/22 maxlen: 22
178.132.72.0/21 maxlen: 21
195.128.240.0/23 maxlen: 23
185.86.104.0/22 maxlen: 22
185.147.236.0/22 maxlen: 22
195.128.254.0/23 maxlen: 23
2a03:8600::/32 maxlen: 32
2a07:5cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8a:27:61:b2:f3:af:92:2d:62:ff:b6:10:6b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d247f55d4ffb3dc3947bdc2101a02c26913ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:5f:00:08:e0:3f:04:d6:8f:a5:59:34:22:
b8:98:52:d8:31:59:a2:f1:6f:f5:49:6f:d6:7a:36:
12:1d:4e:05:06:30:e0:2c:a8:9f:e6:e6:13:e0:03:
d6:d4:c1:1e:aa:d4:e6:db:f7:47:dd:4b:19:ca:52:
47:6f:8a:57:48:2c:5c:8d:85:75:61:96:5e:1d:18:
13:c0:e0:39:ed:80:0c:75:43:9d:9c:5f:0d:3b:cf:
b0:ca:88:c0:c1:98:67:a9:01:ce:ab:9e:73:35:35:
93:9a:24:e4:26:ec:f3:1b:a3:23:12:e0:76:da:40:
1c:9f:67:81:9f:43:d9:6d:fc:fa:60:90:3f:f5:ff:
cd:b9:fe:e5:2b:dc:6c:24:74:f6:d6:00:40:4c:0c:
7a:86:71:0d:e1:31:4a:d8:18:55:a8:c6:0d:d8:14:
b3:21:af:2a:2b:e8:0b:74:19:a6:df:cc:10:f4:88:
42:a8:c5:d5:f5:e7:cf:bf:60:fb:51:0a:a6:04:b6:
3a:46:85:79:66:22:1d:b6:c8:40:12:17:c5:61:37:
7c:e2:c2:5c:3d:bc:68:dc:7e:16:bc:55:04:22:e0:
30:cc:cd:a4:5d:12:3c:28:31:ce:e3:07:c3:54:55:
9f:91:94:95:be:08:04:32:ef:8e:71:2e:b3:c6:cd:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:24:7F:55:D4:FF:B3:DC:39:47:BD:C2:10:1A:02:C2:69:13:EA:45
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/LSR_VdT_s9w5R73CEBoCwmkT6kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.108.0/22
178.132.72.0/21
185.86.104.0/22
185.147.236.0/22
185.242.228.0/22
195.128.240.0/23
195.128.254.0/23
IPv6:
2a03:8600::/32
2a07:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
70:8f:aa:43:1a:69:50:f7:d7:1c:f5:f2:b0:24:92:a7:21:78:
59:93:70:a6:b9:c9:48:f3:c6:1d:1c:ba:a7:a3:88:b8:29:24:
c5:ca:9b:7a:0b:d7:5b:f6:62:aa:88:54:7a:1a:d0:f3:58:43:
e2:69:08:7e:b0:e4:2d:02:1b:f1:f4:5c:94:72:c1:a6:59:b6:
d4:e1:94:98:0f:96:37:e2:9a:11:81:97:3c:39:d1:e3:96:63:
64:a7:02:d8:63:18:4e:47:af:23:82:f5:09:45:3a:4c:0c:cb:
38:d1:05:bd:7c:ca:8f:68:2b:97:88:a6:29:9d:4e:3a:3f:8f:
6c:41:c4:ef:5d:d0:8c:3c:49:7a:56:71:75:3c:64:11:0b:df:
45:5a:fd:2a:4f:58:5e:fb:dc:e3:57:dd:43:0a:31:82:d0:b7:
3b:77:fd:80:c2:e4:d6:93:8e:0d:95:6a:77:93:5c:79:3c:fb:
f6:60:ea:b6:3a:f9:29:9c:cb:c5:7e:e5:8c:5f:4e:cf:64:5d:
a0:05:70:86:be:4a:53:a5:cb:84:0c:19:1e:98:3c:82:a0:95:
c8:16:85:29:77:dc:49:88:a7:bd:c3:06:11:3b:5e:b3:79:04:
77:29:70:72:d6:09:ae:36:69:c9:e0:3f:a6:db:97:6a:a6:a9:
ee:88:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:40:56 2024 by rpki-client on console-ams.rpki-client.org