Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/0leoREUtPayZKuHd4zy4TF7XWpo.roa
File: 0leoREUtPayZKuHd4zy4TF7XWpo.roa (raw, json)
Hash identifier: oBmaHgdYB0wQkrtey+2HwFwxckFfGE41f0qXDbWP01U=
Subject key identifier: D2:57:A8:44:45:2D:3D:AC:99:2A:E1:DD:E3:3C:B8:4C:5E:D7:5A:9A
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 018E86693479EFCC1EE721726F5CB4057CD2
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/0leoREUtPayZKuHd4zy4TF7XWpo.roa
Signing time: Thu 28 Mar 2024 18:53:45 +0000
ROA not before: Thu 28 Mar 2024 18:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 145.224.128.0/20 maxlen: 24
145.224.192.0/19 maxlen: 24
145.224.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:69:34:79:ef:cc:1e:e7:21:72:6f:5c:b4:05:7c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Mar 28 18:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d257a844452d3dac992ae1dde33cb84c5ed75a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7b:b0:8a:e1:cf:0e:04:81:7e:79:f8:2f:ce:
5d:d1:8d:74:3f:f9:b8:7a:ff:36:f7:22:56:cb:45:
bc:d5:25:9f:e6:31:9e:84:1b:9b:1e:06:37:9f:9b:
d4:d8:6f:c6:0b:75:d2:53:c3:e7:d2:ac:8c:46:47:
dd:27:88:13:16:6b:8c:8a:e7:10:7f:f9:0a:71:fe:
32:48:ec:2a:88:9c:6a:9c:f3:d9:82:10:12:4a:ee:
63:af:f4:41:d7:eb:e3:b2:cc:ab:8b:0a:06:dc:33:
8f:70:d6:01:95:49:ff:6c:cd:d3:cd:20:e9:da:57:
51:06:01:93:0d:0e:d9:a9:8a:ce:cd:f5:df:9a:97:
a0:d4:47:48:af:3d:0d:c9:d7:3f:a3:69:71:b9:95:
ed:85:71:51:ee:45:0f:64:0a:11:36:92:04:d1:c0:
39:97:c5:7f:b2:f7:14:44:02:02:43:a4:09:18:3a:
50:c6:6b:50:54:b4:88:a9:84:93:c1:72:c6:9f:97:
7e:a9:bf:c5:f5:bf:51:5a:b5:a6:62:fd:a3:96:3b:
d8:cb:0f:3b:51:cf:45:9d:7d:5b:68:aa:b4:08:ba:
7c:b0:ef:c5:0d:ba:43:4d:1a:a4:5d:a1:87:ed:ac:
41:33:74:51:04:52:55:4d:9b:73:82:79:ba:63:a2:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:A8:44:45:2D:3D:AC:99:2A:E1:DD:E3:3C:B8:4C:5E:D7:5A:9A
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/0leoREUtPayZKuHd4zy4TF7XWpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.128.0/20
145.224.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:69:0e:38:13:53:e2:1f:0e:08:99:d7:c8:93:0c:15:95:1e:
9f:49:70:7f:20:c2:04:4c:81:bd:36:49:54:05:b7:62:24:6c:
09:4a:99:4b:02:ca:1d:95:b0:ea:d8:47:ae:2b:6e:0d:82:72:
ec:ef:b7:19:20:ec:bb:c6:b6:b0:1b:78:f4:3f:15:26:59:85:
13:f0:44:fc:69:c9:9f:a2:6c:ff:2a:bb:6d:36:c2:7b:ab:32:
6a:ac:65:ee:13:0e:fe:c8:5f:93:f9:b1:36:1a:a4:58:b1:0d:
14:9b:34:83:b0:18:5c:35:55:df:55:6e:8b:a5:11:41:11:cf:
bf:5f:26:29:67:f2:b5:b7:05:4b:7f:c0:db:44:f8:35:64:d5:
28:16:60:fd:c9:63:d9:cb:4c:c7:32:8b:73:1d:11:c6:46:e1:
6a:2a:c7:6c:bb:c0:c2:f4:32:53:15:dc:f0:62:d4:d1:4d:b7:
a1:c9:d1:1f:cd:d6:32:e2:9e:3a:6c:d8:85:b4:b1:66:73:70:
cc:56:c3:81:ab:6d:40:60:ca:a9:05:8a:6f:21:33:73:d5:b5:
64:0e:c9:97:68:06:f3:78:19:35:0b:f9:17:fa:a0:45:14:f3:
ae:81:2d:cd:b1:cd:de:8e:ab:91:35:2b:10:a3:a6:53:03:e9:
a4:f3:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:28:55 2024 by rpki-client on console-fra.rpki-client.org