Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/lanMJS4Am6urFlUa0s4lrBNolvQ.roa
File: lanMJS4Am6urFlUa0s4lrBNolvQ.roa (raw, json)
Hash identifier: ihUppG/wWpqCjb9+bCzX+Qs06dJX/9KYjJi9q2r6kIA=
Subject key identifier: 95:A9:CC:25:2E:00:9B:AB:AB:16:55:1A:D2:CE:25:AC:13:68:96:F4
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 018CC6B783C7C98C2B96A4E2FCFFCE016C85
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/lanMJS4Am6urFlUa0s4lrBNolvQ.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50295
IP address blocks: 185.66.80.0/22 maxlen: 24
185.47.112.0/22 maxlen: 24
37.203.216.0/21 maxlen: 24
93.187.8.0/21 maxlen: 24
185.101.60.0/22 maxlen: 24
2a01:8ee0::/32 maxlen: 32
2a00:1f00::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:83:c7:c9:8c:2b:96:a4:e2:fc:ff:ce:01:6c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95a9cc252e009babab16551ad2ce25ac136896f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:9c:59:2f:88:c6:36:e4:38:80:1c:45:26:
7a:bd:56:34:35:ab:31:36:7d:8e:b0:29:88:c9:c3:
e6:09:e2:01:36:0b:f3:c8:58:05:b6:ca:82:69:12:
38:6f:e7:58:20:91:2d:16:62:77:13:aa:0c:6c:71:
5d:33:f7:8d:0c:35:1b:65:1c:dd:4c:75:41:01:a5:
78:3f:37:2f:83:ef:4b:46:05:b1:f8:0a:ed:7d:3b:
6c:ee:12:5f:d3:71:82:f2:d3:75:6f:4b:33:0c:e4:
54:5c:bb:86:7d:9c:a7:5a:58:e0:7f:d8:93:4d:83:
a4:ff:6c:85:73:91:90:a3:2c:de:61:38:b7:98:85:
c3:9b:41:32:cb:33:96:9a:c7:bd:d0:6b:de:9a:29:
38:81:bc:14:5d:de:b1:ff:a8:52:c7:32:f2:2f:d5:
bd:96:c5:1a:31:5c:44:db:2b:78:67:48:ae:2d:e8:
44:f9:bb:e0:fe:e9:21:4e:7f:8a:0c:93:fb:7a:5e:
74:33:7c:98:38:d8:d8:75:3e:7d:07:2f:e6:d0:79:
44:a7:73:56:ac:6e:e0:8a:5f:cc:92:46:90:73:17:
65:e6:9d:33:9a:e6:9c:4d:bf:ba:0b:ae:9e:0b:af:
6a:8e:37:9c:9c:e3:5f:07:86:a9:b7:76:74:c9:4f:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:CC:25:2E:00:9B:AB:AB:16:55:1A:D2:CE:25:AC:13:68:96:F4
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/lanMJS4Am6urFlUa0s4lrBNolvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.216.0/21
93.187.8.0/21
185.47.112.0/22
185.66.80.0/22
185.101.60.0/22
IPv6:
2a00:1f00::/32
2a01:8ee0::/32
Signature Algorithm: sha256WithRSAEncryption
93:20:cd:04:20:7a:f6:f1:ab:b6:14:67:e3:ae:2e:15:9b:aa:
b8:11:11:84:b9:ce:50:c4:43:bd:72:02:99:d6:16:0d:4b:22:
f5:44:02:d9:f4:e6:56:db:32:c3:4c:49:15:bc:5d:ea:cd:ee:
88:f1:53:3a:cc:0d:6b:3c:2d:a4:52:ff:d7:21:46:41:2c:77:
fe:19:fc:11:32:9a:08:57:6c:4f:2f:45:f5:7a:92:16:bd:1a:
c0:ac:a2:a4:3d:35:f6:80:b1:48:96:3a:46:86:18:97:ad:17:
5c:5a:b8:b8:82:3f:ad:42:0f:bf:ac:40:9f:93:02:43:24:47:
c9:b9:b0:9f:a4:34:71:12:43:c9:ea:3c:7f:e6:90:a7:da:15:
85:79:b9:97:6d:39:40:78:a6:5d:95:d8:34:6e:e1:a8:55:7b:
16:02:c6:dc:9c:72:6d:1b:02:4c:17:8d:72:0f:6c:1b:bf:7b:
4b:06:df:33:28:37:6d:ae:40:7f:59:a3:af:89:58:47:c5:7a:
dd:78:ab:ad:4c:dc:60:4d:b5:99:4f:a7:a8:24:0a:69:07:bf:
64:63:e2:f9:4e:96:cf:5d:45:99:d1:8d:19:b2:7d:e0:fb:b5:
01:61:56:8e:56:69:5a:2a:db:71:ca:ee:54:02:f8:a0:88:11:
60:7b:92:76
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYzGt4PHyYwrlqTi/P/OAWyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzJkYThkNDU4ODQ5ZDVmNDBiYTZmMGI5MjA4Zjg1ODVk
OWUyM2UwHhcNMjQwMTAxMjAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWE5Y2MyNTJlMDA5YmFiYWIxNjU1MWFkMmNlMjVhYzEzNjg5NmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveucWS+IxjbkOIAcRSZ6vVY0Nasx
Nn2OsCmIycPmCeIBNgvzyFgFtsqCaRI4b+dYIJEtFmJ3E6oMbHFdM/eNDDUbZRzd
THVBAaV4Pzcvg+9LRgWx+ArtfTts7hJf03GC8tN1b0szDORUXLuGfZynWljgf9iT
TYOk/2yFc5GQoyzeYTi3mIXDm0EyyzOWmse90Gvemik4gbwUXd6x/6hSxzLyL9W9
lsUaMVxE2yt4Z0iuLehE+bvg/ukhTn+KDJP7el50M3yYONjYdT59By/m0HlEp3NW
rG7gil/MkkaQcxdl5p0zmuacTb+6C66eC69qjjecnONfB4apt3Z0yU8a/QIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFJWpzCUuAJurqxZVGtLOJawTaJb0MB8GA1UdIwQY
MBaAFNgy2o1FiEnV9Aum8Lkgj4WF2eI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYt
Yzk5Nzk1ZjM4ODVmLzEvbGFuTUpTNEFtNnVyRmxVYTBzNGxyQk5vbHZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYtYzk5Nzk1ZjM4ODVm
LzEvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQDJcvYAwQD
XbsIAwQCuS9wAwQCuUJQAwQCuWU8MBQEAgACMA4DBQAqAB8AAwUAKgGO4DANBgkq
hkiG9w0BAQsFAAOCAQEAkyDNBCB69vGrthRn464uFZuquBERhLnOUMRDvXICmdYW
DUsi9UQC2fTmVtsyw0xJFbxd6s3uiPFTOswNazwtpFL/1yFGQSx3/hn8ETKaCFds
Ty9F9XqSFr0awKyipD019oCxSJY6RoYYl60XXFq4uII/rUIPv6xAn5MCQyRHybmw
n6Q0cRJDyeo8f+aQp9oVhXm5l205QHimXZXYNG7hqFV7FgLG3JxybRsCTBeNcg9s
G797SwbfMyg3ba5Af1mjr4lYR8V63XirrUzcYE21mU+nqCQKaQe/ZGPi+U6Wz11F
mdGNGbJ94Pu1AWFWjlZpWirbccruVAL4oIgRYHuSdg==
-----END CERTIFICATE-----
Generated at Sun May 19 06:06:53 2024 by rpki-client on console-fra.rpki-client.org