Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/LkLLd8zmpQEuA2kM1V4rCUgFsww.roa
File: LkLLd8zmpQEuA2kM1V4rCUgFsww.roa (raw, json)
Hash identifier: niEDUYPlafsL58/A7l2+x07/b1C3AeHWvK421F+eOlE=
Subject key identifier: 2E:42:CB:77:CC:E6:A5:01:2E:03:69:0C:D5:5E:2B:09:48:05:B3:0C
Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial: 018CC49322FE46179A560EFF456534BEBBA6
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/LkLLd8zmpQEuA2kM1V4rCUgFsww.roa
Signing time: Mon 01 Jan 2024 10:30:26 +0000
ROA not before: Mon 01 Jan 2024 10:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31529
IP address blocks: 185.151.141.0/24 maxlen: 24
185.151.142.0/24 maxlen: 24
185.151.143.0/24 maxlen: 24
194.0.0.0/24 maxlen: 24
194.0.11.0/24 maxlen: 24
194.246.96.0/24 maxlen: 24
2a02:568:fe00::/48 maxlen: 48
2001:678:e::/48 maxlen: 48
2a02:568:fe01::/48 maxlen: 48
2001:678:2::/48 maxlen: 48
2a02:568:fe02::/48 maxlen: 48
2a02:56f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:22:fe:46:17:9a:56:0e:ff:45:65:34:be:bb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e42cb77cce6a5012e03690cd55e2b094805b30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:91:41:c1:27:7f:9a:fa:fe:c9:7b:d7:60:
ab:fc:dd:73:e8:81:c3:1a:27:a7:34:12:c5:48:43:
e6:7a:b1:00:5d:13:8a:d1:76:2b:a9:13:49:84:42:
19:91:af:b7:35:52:9c:4b:4d:cd:e9:07:40:5b:37:
7f:1d:8c:87:1d:89:a7:df:6b:1f:f1:a3:c2:8d:25:
32:f6:a2:8b:83:62:eb:89:c3:52:de:57:aa:08:57:
cf:ed:20:d4:c4:e0:74:27:1d:0d:d6:52:23:90:81:
7f:32:84:e9:c4:2b:e2:27:1f:7d:7e:c4:ca:4a:65:
16:8b:ff:64:0e:ab:16:79:36:3b:e4:c4:3b:52:a1:
6d:24:21:aa:85:65:ca:98:2e:6e:e5:f9:ec:5d:a6:
fe:d5:a9:ac:63:1d:d1:a8:bf:ed:2a:8b:6d:89:44:
1e:71:4f:fb:fc:16:36:83:3c:34:f4:91:2f:b4:23:
cd:3d:d1:af:6c:61:f1:66:5a:b4:65:99:68:fd:d6:
d1:95:60:10:83:ab:7c:fd:cd:a3:16:26:b0:6b:ea:
34:12:7d:3d:f4:a2:f5:b4:70:10:35:e4:d4:99:9a:
35:71:34:e5:c7:a5:33:3d:d0:48:0f:e3:de:f9:80:
df:31:b3:83:ad:4a:9f:79:f9:79:c9:7a:41:e2:34:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:CB:77:CC:E6:A5:01:2E:03:69:0C:D5:5E:2B:09:48:05:B3:0C
X509v3 Authority Key Identifier:
keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/LkLLd8zmpQEuA2kM1V4rCUgFsww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.141.0-185.151.143.255
194.0.0.0/24
194.0.11.0/24
194.246.96.0/24
IPv6:
2001:678:2::/48
2001:678:e::/48
2a02:568:fe00::-2a02:568:fe02:ffff:ffff:ffff:ffff:ffff
2a02:56f::/32
Signature Algorithm: sha256WithRSAEncryption
bd:40:44:ce:5c:e7:d0:4e:e5:d8:04:2b:7b:0b:e2:b6:7e:17:
55:c6:b1:64:45:67:f2:78:4b:66:a4:e7:e3:cc:93:c3:35:14:
54:85:d0:8b:ac:ce:e8:2d:b6:0b:c3:f1:a4:7c:77:57:c1:b8:
be:68:24:90:9b:27:f9:69:d5:d6:73:3c:eb:e6:dd:22:55:cf:
ba:66:d4:89:53:f4:b4:f4:7e:ec:9d:95:2d:9d:2b:95:b6:ed:
03:06:c7:ec:8d:4b:b6:8d:4c:a5:69:1b:4c:55:bc:4f:c8:35:
63:a5:60:2e:15:ac:3c:7e:13:8a:61:4f:8d:58:f4:e7:b5:6b:
0f:47:f7:1b:27:68:88:f5:e3:1b:78:80:fe:e8:1d:6b:ba:88:
f7:f5:82:48:c4:57:96:a8:ee:88:06:10:89:55:2d:32:ea:c4:
93:13:da:ba:b6:6f:91:75:bb:b3:4e:d2:9a:69:4e:3f:48:8c:
d1:e6:68:78:72:19:a8:46:98:97:a0:c5:ea:53:71:e5:bb:ff:
c1:4f:9b:82:b6:c1:e1:d8:0d:e6:0a:b2:de:15:a9:51:6d:55:
1b:6f:27:02:0c:cc:5e:5a:37:14:b3:47:44:85:df:e8:fa:0d:
ba:67:62:5d:e1:49:21:62:b5:0d:01:70:ed:a2:24:8f:7c:29:
77:3f:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:54:52 2024 by rpki-client on console-fra.rpki-client.org