Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/lseQebEqUeW4TSi3gnmG5RYKSPg.roa
File: lseQebEqUeW4TSi3gnmG5RYKSPg.roa (raw, json)
Hash identifier: +pRHTW+s5O1G80eLUfbL/xA6esXdjoYzdv9NcbI+uRM=
Subject key identifier: 96:C7:90:79:B1:2A:51:E5:B8:4D:28:B7:82:79:86:E5:16:0A:48:F8
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018CC6B8A1F6F9C25FDFF5B35B1C6BF7139A
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/lseQebEqUeW4TSi3gnmG5RYKSPg.roa
Signing time: Mon 01 Jan 2024 20:30:37 +0000
ROA not before: Mon 01 Jan 2024 20:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29076
IP address blocks: 212.113.125.0/24 maxlen: 24
212.113.126.0/24 maxlen: 24
37.202.12.0/24 maxlen: 24
37.202.13.0/24 maxlen: 24
212.113.114.0/23 maxlen: 23
212.113.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a1:f6:f9:c2:5f:df:f5:b3:5b:1c:6b:f7:13:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 20:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c79079b12a51e5b84d28b7827986e5160a48f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:5c:97:f8:ea:dd:43:3d:3f:78:e7:88:67:
d7:1e:a6:92:82:24:d3:6d:10:f9:4f:d7:30:07:79:
ee:ec:85:51:8b:47:6e:15:46:9e:f3:7e:4f:d4:97:
20:ea:40:4a:21:02:eb:f2:58:eb:1f:7b:4d:c9:2e:
a9:b1:2c:94:45:d0:88:6d:ef:c1:b2:4d:34:62:3f:
36:7c:47:93:a8:64:0a:cc:26:94:85:33:11:af:c3:
5d:64:5b:b3:70:e1:de:e6:a1:41:11:62:11:c1:ad:
1a:d5:3f:cf:be:06:3d:a4:7d:d3:e2:7c:35:9e:05:
e2:4c:82:96:a0:14:85:b1:02:f5:7d:bd:e1:c1:14:
01:b6:9b:fc:6f:d4:32:2c:e1:94:7b:ce:c6:37:6f:
d8:d5:82:54:eb:de:e1:6e:6c:de:d5:c4:c5:f9:37:
fc:a2:4a:62:6c:bb:84:15:bc:f7:9a:ea:dd:20:a3:
95:7c:a2:86:9a:79:6b:41:d1:4a:8f:ee:49:f9:2d:
9b:fe:34:a8:d3:1a:42:59:82:bf:36:69:b1:9b:8f:
3d:63:87:93:02:0f:ed:46:ba:7a:e9:88:54:57:9e:
37:f8:33:21:d2:e0:8a:bd:9b:83:51:36:80:ac:6e:
96:51:ff:44:fc:e0:f3:dc:c0:01:04:6b:0c:d3:ee:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:90:79:B1:2A:51:E5:B8:4D:28:B7:82:79:86:E5:16:0A:48:F8
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/lseQebEqUeW4TSi3gnmG5RYKSPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.12.0/23
212.113.114.0/23
212.113.125.0-212.113.126.255
Signature Algorithm: sha256WithRSAEncryption
4f:18:f1:e7:9d:99:f1:66:8f:68:e6:8f:ca:6f:45:2f:32:52:
71:8c:95:63:c4:3a:f8:d1:6f:22:56:be:7d:fa:24:16:40:c1:
65:0b:12:62:2c:8d:0b:aa:73:c3:ac:d3:83:5b:59:24:7e:84:
76:ad:8e:53:c3:cb:4c:d1:e6:c9:d5:20:c3:89:55:87:c7:00:
d1:3e:37:7d:93:36:88:5a:23:8b:15:05:86:6b:e7:5e:f5:34:
aa:eb:8c:f2:cd:a9:13:76:12:69:a8:b8:c0:9a:38:be:c4:b1:
f7:c8:4b:37:b3:ce:71:c8:29:85:2f:f4:a8:f3:1c:87:28:67:
5a:eb:a7:db:fc:8c:48:f8:79:d6:64:1c:bb:b8:d4:24:2a:6b:
30:e6:77:64:13:e9:fa:2a:cc:5b:09:4e:5a:54:7b:a5:9d:0f:
3a:db:24:b0:c0:4f:b3:aa:9e:5a:33:74:d8:b8:55:a6:7d:4f:
e0:7f:45:77:cb:dd:6b:c7:fc:25:27:36:40:06:b7:21:18:38:
a3:4f:2a:46:71:2d:10:69:3b:8d:32:45:05:65:de:38:f5:6a:
5c:40:20:03:3d:43:9c:cd:d6:ed:5a:10:58:02:fd:a7:5c:e6:
2e:c8:36:48:3f:f5:23:5f:e8:10:b3:16:ea:6b:e1:76:83:6a:
ac:0f:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:36:21 2024 by rpki-client on console-ams.rpki-client.org