Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/lm-Z-VYAgvYFJ6Q7JgcvKLySWeE.roa
File: lm-Z-VYAgvYFJ6Q7JgcvKLySWeE.roa (raw, json)
Hash identifier: y2jkJQlxxiW0GmdWBhZI1kGGMOZEdIWUZal2LArVYg4=
Subject key identifier: 96:6F:99:F9:56:00:82:F6:05:27:A4:3B:26:07:2F:28:BC:92:59:E1
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 018D8ABBE49A6BE40693987E5768A990E7AB
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/lm-Z-VYAgvYFJ6Q7JgcvKLySWeE.roa
Signing time: Thu 08 Feb 2024 21:59:46 +0000
ROA not before: Thu 08 Feb 2024 21:59:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.36.0/24 maxlen: 24
185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
2a06:8f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:bb:e4:9a:6b:e4:06:93:98:7e:57:68:a9:90:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Feb 8 21:59:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=966f99f9560082f60527a43b26072f28bc9259e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:c5:01:02:19:b8:fe:13:99:db:0d:18:12:
11:9d:35:2d:1a:c1:88:4f:8b:0c:31:dd:4b:3c:08:
da:77:31:72:08:ef:a6:d4:6c:d7:e4:ca:c5:70:3a:
af:cd:c9:a3:f6:d1:2b:dc:1c:a3:47:a0:85:6d:59:
5e:f2:f9:09:07:89:67:b0:2b:e7:83:d4:3f:f6:1e:
02:e2:7a:f9:2f:bf:8f:12:c4:85:9f:b0:63:71:d6:
54:4d:68:25:87:44:aa:8b:cb:46:2a:11:90:9f:9b:
da:b9:e7:af:88:34:5d:58:0d:9b:7f:da:68:b1:cd:
c2:76:58:f0:ff:5e:6e:74:f4:e5:d6:28:ba:31:b5:
27:5e:2c:67:b2:03:c1:04:0f:4a:c4:9b:f3:6d:41:
cc:11:8d:b9:f2:20:d5:a1:ec:92:47:0e:e4:a2:13:
d3:b6:13:3c:f5:a3:70:db:93:2f:a3:33:fa:ca:9d:
36:fb:77:11:8e:eb:0b:e6:3f:1b:4c:32:7d:04:26:
30:08:cb:38:f2:a6:64:90:68:ff:f5:34:da:21:4e:
4c:b5:dc:fe:72:50:65:9e:ab:c5:1b:d2:45:24:1b:
04:da:17:54:66:de:8a:ba:f7:3d:70:0b:78:58:de:
60:00:75:9c:89:7a:60:35:5c:91:82:9f:1a:e3:6e:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6F:99:F9:56:00:82:F6:05:27:A4:3B:26:07:2F:28:BC:92:59:E1
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/lm-Z-VYAgvYFJ6Q7JgcvKLySWeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0-185.120.38.255
IPv6:
2a06:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:e9:ea:ac:df:05:3a:bc:09:7f:01:6a:8c:88:36:aa:65:3b:
0e:34:6e:4b:70:16:7a:de:67:86:33:ce:a1:8e:84:a5:b5:1f:
d7:2b:ee:4b:25:4d:20:c7:42:87:76:bc:70:ef:f0:27:9d:46:
a5:df:57:cf:82:25:c2:b6:8a:dd:7a:37:ee:f4:c0:43:1f:3c:
f1:d1:18:e3:05:18:44:87:5e:50:d0:74:2a:9a:a0:b9:e1:eb:
7a:dd:1d:21:2a:5d:26:0d:94:10:b3:6d:16:95:6e:5a:b5:45:
11:29:d0:53:d5:a2:71:04:18:d0:91:8b:47:35:76:35:df:eb:
96:14:ef:78:67:e8:f8:52:e7:6a:61:3e:3d:92:55:7c:50:6a:
ab:86:32:96:3a:4a:8e:31:a2:41:5e:6c:b4:a3:09:43:ee:7a:
ab:ec:cd:ff:1f:bf:89:19:bb:0f:8b:cf:86:28:81:8f:f9:48:
8c:f4:ee:b8:23:a7:18:ae:4b:75:6b:d5:65:e8:0e:28:63:5e:
f6:fd:90:d8:bd:37:2c:52:ac:21:8c:7c:9c:c4:49:b0:be:80:
5a:2c:0d:f4:2f:94:dc:dd:2a:20:aa:61:2f:3a:63:67:d3:84:
ca:a1:f9:d3:e9:e0:90:3a:29:cc:db:f4:8a:0b:18:27:32:d9:
6b:42:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:13:37 2024 by rpki-client on console-ams.rpki-client.org