Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/LPT1zPuZM0bxh6AWUJAYGe7O2Xg.roa
File: LPT1zPuZM0bxh6AWUJAYGe7O2Xg.roa (raw, json)
Hash identifier: YDMG2tHy+FcVk5FCteLmf5PY1SG6vLsOoSuu89s7vME=
Subject key identifier: 2C:F4:F5:CC:FB:99:33:46:F1:87:A0:16:50:90:18:19:EE:CE:D9:78
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 018CC8DE7B918A668DB6497C899921540E04
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/LPT1zPuZM0bxh6AWUJAYGe7O2Xg.roa
Signing time: Tue 02 Jan 2024 06:31:12 +0000
ROA not before: Tue 02 Jan 2024 06:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35393
IP address blocks: 185.67.152.0/22 maxlen: 24
37.0.72.0/21 maxlen: 24
62.100.128.0/19 maxlen: 24
188.130.0.0/17 maxlen: 24
91.191.144.0/20 maxlen: 24
195.114.18.0/23 maxlen: 24
94.247.176.0/21 maxlen: 24
78.41.232.0/21 maxlen: 24
46.21.192.0/20 maxlen: 24
81.93.240.0/20 maxlen: 24
195.14.0.0/24 maxlen: 24
193.47.184.0/24 maxlen: 24
2001:758::/32 maxlen: 48
2a00:cb80::/32 maxlen: 48
2001:900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:7b:91:8a:66:8d:b6:49:7c:89:99:21:54:0e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Jan 2 06:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cf4f5ccfb993346f187a01650901819eeced978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:7d:23:7e:db:08:cc:44:8a:11:b8:93:da:
54:4f:8e:62:b2:2b:8d:51:53:e0:f3:fc:86:d0:9a:
66:33:c9:90:45:d8:23:2a:9a:d4:fe:36:97:77:ba:
3b:19:d6:96:41:e7:da:82:b3:f2:82:89:3f:92:f2:
f5:58:ff:66:11:a1:d0:b1:40:e3:96:1f:09:c6:76:
8d:41:18:44:63:4b:43:cb:57:39:32:69:37:6d:6e:
89:96:d1:ff:12:b6:2f:61:cc:0c:8f:a9:7e:49:74:
a8:6d:48:6c:c8:dc:c2:5f:35:eb:3b:e0:cd:42:a7:
d3:01:99:83:a4:bb:bb:cf:05:e9:47:8f:6f:5b:b0:
a8:3c:e1:bf:97:7e:13:7c:58:d4:2a:14:70:8c:bd:
ab:44:1a:14:d1:2c:3b:05:29:4b:8a:e7:66:9d:6b:
b8:c8:69:74:81:74:ac:b7:d6:4b:fc:49:8c:a9:da:
dd:dc:6f:f9:f3:5d:4c:c5:9a:6b:95:97:10:6d:f1:
11:58:f2:43:e5:3c:64:0d:01:27:c9:3c:da:27:e6:
3c:27:9c:01:e2:d0:35:20:33:2d:68:08:f4:0a:45:
a2:3e:ef:b7:c9:8a:32:50:8a:e1:f5:0b:f3:c1:3f:
13:10:e7:ca:a1:c7:f1:2f:97:e8:44:3c:e6:de:39:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F4:F5:CC:FB:99:33:46:F1:87:A0:16:50:90:18:19:EE:CE:D9:78
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/LPT1zPuZM0bxh6AWUJAYGe7O2Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.72.0/21
46.21.192.0/20
62.100.128.0/19
78.41.232.0/21
81.93.240.0/20
91.191.144.0/20
94.247.176.0/21
185.67.152.0/22
188.130.0.0/17
193.47.184.0/24
195.14.0.0/24
195.114.18.0/23
IPv6:
2001:758::/32
2001:900::/32
2a00:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
25:b4:b0:25:36:4f:c3:d6:83:6b:51:04:21:66:e2:7f:bf:ac:
6a:9e:b7:d2:04:07:28:f5:0f:e0:3b:1a:83:3c:3e:0b:39:25:
8b:dc:e0:e4:49:9c:7c:18:f7:08:c1:9f:4a:18:74:2a:6b:2a:
69:16:71:ba:f7:c5:09:26:53:f8:e8:93:25:1e:1d:4d:6c:ff:
0c:85:f1:ff:56:d3:01:82:aa:fa:34:be:0d:8f:87:be:f9:bb:
6e:f6:c6:f6:f7:19:35:9a:b2:b8:42:5d:19:3d:a5:e9:d2:b9:
4d:f5:48:1f:5d:fa:0a:f3:11:19:01:01:d1:5c:99:24:9b:88:
e4:1f:78:90:59:29:02:65:3e:2a:b7:b8:50:8e:43:52:41:e1:
18:b4:e5:ab:aa:17:e2:c2:d1:fb:af:85:97:f9:3e:1d:a3:15:
eb:1e:b0:19:cb:75:7e:65:69:01:a3:94:a1:ba:6e:83:70:00:
a4:1e:60:49:8a:4d:88:85:d2:a6:6a:a0:a6:36:af:c3:2e:09:
0c:47:1a:77:d2:1c:d7:b1:40:33:a2:13:7d:7f:a6:60:2a:b0:
01:ae:ad:c7:ab:22:4f:54:02:59:b3:1f:cb:97:bc:09:e5:a3:
03:ce:b5:75:40:c8:a4:88:7a:74:86:49:51:7a:6c:8b:95:d1:
5e:82:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:36:39 2024 by rpki-client on console-fra.rpki-client.org