Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/L3MmH9uph5lDRrzDKIDDPgWixyQ.roa
File: L3MmH9uph5lDRrzDKIDDPgWixyQ.roa (raw, json)
Hash identifier: Cf67BopvDF2HiZu7o1Lsq5jbSj1SjDI0LnKZRZ/ensw=
Subject key identifier: 2F:73:26:1F:DB:A9:87:99:43:46:BC:C3:28:80:C3:3E:05:A2:C7:24
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018D2389D3C96068211E05DE723F14A00D47
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/L3MmH9uph5lDRrzDKIDDPgWixyQ.roa
Signing time: Fri 19 Jan 2024 21:04:11 +0000
ROA not before: Fri 19 Jan 2024 21:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.72.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:23:89:d3:c9:60:68:21:1e:05:de:72:3f:14:a0:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 19 21:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f73261fdba987994346bcc32880c33e05a2c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e2:28:a1:bb:56:5e:8e:46:ec:11:28:ea:6d:
be:3b:45:46:7b:76:75:94:f6:71:da:58:6a:b8:07:
99:6f:6b:8e:db:fe:25:40:68:bf:f5:46:3f:b0:dd:
19:32:03:87:e5:fa:65:d6:01:38:ba:1b:3b:10:36:
80:a2:2e:f4:99:b1:bc:ee:1b:2d:ba:95:d9:d0:6c:
31:6f:59:0a:5e:1c:56:0b:f9:42:77:ba:b7:37:dc:
22:2a:f7:a7:38:7f:d5:d2:cb:dc:a4:85:ba:61:11:
47:3c:fc:cf:28:d1:27:cb:73:63:66:d1:e8:a5:e3:
7d:46:6d:8c:84:0a:d7:53:6e:81:ff:c9:50:ff:06:
8f:84:04:ab:06:76:ae:60:4e:69:b1:8d:0f:66:cb:
d4:19:42:60:bb:4e:96:a5:19:0a:7b:a5:df:8d:0b:
6f:af:87:26:46:de:b5:b0:aa:dc:43:1e:b7:13:3c:
be:55:12:20:47:01:53:04:7b:b2:c6:0c:01:15:69:
12:fa:2a:2b:31:a2:27:70:bc:53:d6:bd:aa:98:c6:
0e:2a:b8:61:f5:50:54:22:c8:d4:5f:b0:b3:41:e2:
a7:47:6b:5b:36:3c:28:a3:c8:97:f7:03:9c:7d:5b:
ee:20:a8:3c:58:b6:d5:ef:5d:3e:ea:fc:ce:42:f7:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:73:26:1F:DB:A9:87:99:43:46:BC:C3:28:80:C3:3E:05:A2:C7:24
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/L3MmH9uph5lDRrzDKIDDPgWixyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
46:bd:45:da:e0:74:b5:36:42:b7:63:ce:b9:ea:3d:4a:1f:df:
d5:bf:40:72:6c:a1:4e:d6:41:ff:9f:e0:ea:d0:6c:be:80:ec:
2c:1b:18:37:24:dc:00:79:05:17:6b:b2:7e:4b:18:f1:96:e8:
3b:e0:db:13:ec:70:7a:e2:0c:76:57:10:48:a9:e8:82:6f:94:
29:ff:e0:91:6c:66:67:c8:e7:e1:0f:03:b6:5c:a8:99:c4:ef:
9e:91:ab:e9:4b:5b:05:fb:5a:e8:e3:7a:6d:d9:70:c3:08:b1:
53:4f:88:ab:3c:15:38:3b:c3:6e:b5:19:06:d2:cc:28:d3:d7:
77:78:8f:bb:0c:8e:ed:5f:dd:e5:03:10:9c:6f:a9:4c:71:ea:
16:cc:36:de:4a:10:1d:8c:3f:ae:69:79:95:88:08:37:bf:e3:
bb:71:82:2d:2f:f6:d1:0a:9d:46:39:08:f5:53:23:11:77:aa:
b7:dc:34:8e:e1:36:f0:d2:44:5e:c6:b1:65:24:cf:2f:93:7a:
e1:93:3a:f1:77:0e:94:44:ae:96:41:1b:8a:e0:93:3c:88:cd:
33:d0:cc:71:70:ff:ac:6d:c5:57:99:43:0b:14:c3:57:02:5a:
20:17:b3:9f:9b:6a:c4:95:40:bf:09:1e:25:ff:15:1a:d4:39:
d8:35:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:04:21 2024 by rpki-client on console-ams.rpki-client.org