Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LWogUzkVHjr3XW1e5CxPN7N-Wl4.roa
File: LWogUzkVHjr3XW1e5CxPN7N-Wl4.roa (raw, json)
Hash identifier: 9237CFD1EJbd4uiLklcqsC/G5rk7EUYIYORfZNJarV4=
Subject key identifier: 2D:6A:20:53:39:15:1E:3A:F7:5D:6D:5E:E4:2C:4F:37:B3:7E:5A:5E
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01923E0D40EE92B255DCD88145EF45DFE688
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LWogUzkVHjr3XW1e5CxPN7N-Wl4.roa
Signing time: Sun 29 Sep 2024 13:51:48 +0000
ROA not before: Sun 29 Sep 2024 13:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.131.0/24 maxlen: 24
87.248.133.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
87.248.138.0/24 maxlen: 24
87.248.139.0/24 maxlen: 24
87.248.145.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
194.60.230.0/24 maxlen: 24
194.60.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:0d:40:ee:92:b2:55:dc:d8:81:45:ef:45:df:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Sep 29 13:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d6a205339151e3af75d6d5ee42c4f37b37e5a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:81:37:96:b1:0b:84:bb:08:5a:a3:d9:77:
a4:3d:7b:05:d7:8b:1e:d2:5b:66:63:e7:0d:f3:66:
42:91:c2:2c:13:29:c8:f6:49:bd:b4:2a:9d:78:84:
26:1c:c6:f2:57:7b:44:d2:8b:b6:6f:38:ea:d3:ba:
60:6a:c8:22:00:e2:eb:b1:24:1e:c2:69:60:e8:36:
26:43:54:48:db:9f:38:3c:be:76:a6:59:d1:b2:11:
2a:af:29:22:a4:90:46:42:c7:03:aa:42:ad:de:01:
1e:94:46:b2:26:94:53:cb:20:f9:4a:4c:af:30:9f:
60:e7:18:ba:df:2c:b2:34:20:72:dc:3b:97:e8:27:
1e:cb:75:43:bb:ca:6a:55:e6:08:c6:1e:68:fb:7a:
0c:70:c0:cb:b3:ee:b3:5f:5e:e5:42:55:b3:76:8d:
f2:2d:aa:d7:36:01:4b:f3:52:0f:e3:7e:a5:6e:78:
ca:d9:3b:77:d8:28:6e:d8:80:64:0f:28:f1:de:27:
9a:92:3d:44:db:bc:4b:b2:80:3e:7e:9e:bb:1f:1d:
a1:d9:ba:64:a6:f9:51:2a:1d:2b:2b:f5:81:a0:4f:
40:8d:a0:b4:18:c5:95:b4:50:b4:ea:cb:80:f2:38:
e4:f0:71:7d:6d:bf:30:0c:47:ed:d8:7f:c2:70:14:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:20:53:39:15:1E:3A:F7:5D:6D:5E:E4:2C:4F:37:B3:7E:5A:5E
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LWogUzkVHjr3XW1e5CxPN7N-Wl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/23
87.248.133.0/24
87.248.137.0-87.248.139.255
87.248.145.0/24
87.248.150.0-87.248.153.255
87.248.155.0-87.248.156.255
194.60.230.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:fc:11:11:49:ea:76:d7:ba:4d:62:e6:aa:29:e7:9d:5a:b0:
bc:ad:64:7c:e5:c1:27:7e:3e:56:e1:26:f6:19:d0:e4:7c:27:
97:13:51:18:d3:b4:38:91:93:47:65:d5:53:6b:db:e4:80:8e:
c2:2e:7a:62:bb:e1:8a:35:f6:3b:8b:00:9b:3a:94:3d:a9:8f:
8e:0c:9b:91:70:77:ab:7c:76:47:eb:18:cd:7f:9c:01:fa:af:
b5:65:a4:c9:81:dc:d5:80:39:67:74:a1:72:c5:75:1a:3e:45:
3e:f1:b6:e2:e9:67:ca:2e:5c:c1:4a:92:54:23:1e:cb:82:e5:
ce:b8:33:ba:ed:d6:09:8a:33:d2:02:97:af:b0:8c:1e:9f:fd:
5b:41:40:fe:e9:e6:1c:dc:1d:22:af:b6:85:f1:66:04:69:5f:
60:45:4b:b0:58:b5:ad:bf:30:58:63:12:72:4a:d8:c4:f9:ee:
36:df:19:50:5f:32:c0:f4:62:83:79:8d:ed:39:14:15:a8:b9:
b7:6c:67:7f:09:a9:9d:5e:cf:f9:a8:1b:39:90:cf:15:29:32:
f2:ff:0a:b2:b2:85:85:cd:9c:0c:3f:6f:d5:52:ac:13:9a:ab:
23:10:dd:19:c4:15:46:b1:36:7f:21:b9:fd:3f:20:84:45:92:
7d:6a:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:27 2024 by rpki-client on console-ams.rpki-client.org