Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/lgPRQxzyLIwmsDZTSPARrthKRQ4.roa
File: lgPRQxzyLIwmsDZTSPARrthKRQ4.roa (raw, json)
Hash identifier: C3nlt4HMKw3X2vK16j9CEvRaLAcce+gj33XvPxTWrEY=
Subject key identifier: 96:03:D1:43:1C:F2:2C:8C:26:B0:36:53:48:F0:11:AE:D8:4A:45:0E
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018D0266FED7EBB8322BBE315F13FBEF2C89
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/lgPRQxzyLIwmsDZTSPARrthKRQ4.roa
Signing time: Sat 13 Jan 2024 10:38:40 +0000
ROA not before: Sat 13 Jan 2024 10:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51897
IP address blocks: 109.122.248.0/24 maxlen: 24
109.122.251.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
46.143.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:66:fe:d7:eb:b8:32:2b:be:31:5f:13:fb:ef:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 13 10:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9603d1431cf22c8c26b0365348f011aed84a450e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:8c:05:85:43:ce:bc:43:fa:65:92:7f:9a:
3b:88:ee:c3:31:87:8c:45:16:d7:f7:91:bb:5a:7a:
85:2f:0a:be:22:cf:15:b3:cc:22:69:33:c4:be:75:
7e:fd:a1:f0:18:cb:dc:47:33:d5:a4:91:d4:e2:02:
22:56:15:aa:dc:cd:83:5a:0d:9f:33:4a:9a:7b:40:
ab:49:cf:84:53:14:0f:fb:10:23:19:35:c9:58:4d:
1a:1b:e2:a4:e3:13:c3:2b:8a:be:81:a2:75:26:5e:
a7:46:54:f5:20:1a:8d:00:32:57:8e:98:70:f8:ca:
1e:23:be:db:d1:48:b3:a1:3d:3e:b4:fd:8c:f3:fe:
4c:38:4e:4e:44:59:0a:f5:05:cb:5b:13:a3:28:0d:
40:66:c1:a3:fd:f6:ca:f5:8e:b0:e8:96:c3:16:c8:
02:30:7e:17:86:59:2a:d6:45:94:83:b0:57:ec:66:
d2:97:d1:ad:78:08:9d:eb:91:b1:ac:d0:a5:df:f9:
0c:fb:fa:ae:c4:f1:43:41:00:fb:d3:6c:68:54:6c:
e9:7a:51:61:32:f0:c2:b5:a9:5e:7d:9e:95:92:ee:
11:a4:d6:15:d5:cd:5b:e5:da:e5:26:9a:a2:b8:64:
3d:78:29:45:67:bb:f0:4a:b2:61:8e:0a:1f:44:4a:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:D1:43:1C:F2:2C:8C:26:B0:36:53:48:F0:11:AE:D8:4A:45:0E
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/lgPRQxzyLIwmsDZTSPARrthKRQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.192.0/19
109.122.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:7a:c0:e7:c4:54:63:5c:2a:30:5f:7b:f6:cd:d3:f1:2d:82:
2a:40:25:51:6a:55:65:15:20:aa:bc:05:90:7b:e3:e9:b4:5d:
f3:31:66:e6:cf:f9:82:f7:65:1d:1d:cc:43:5c:91:0b:df:fd:
d0:cc:4b:f1:0a:ca:cf:fb:c9:81:91:da:cd:e3:78:7d:b2:1c:
44:3d:13:3f:3a:07:00:db:49:f2:3a:13:d7:11:7b:71:e9:e6:
a2:a1:0c:69:ca:dd:dc:0a:a6:69:7c:22:1b:8b:d5:8d:90:14:
62:9d:1f:6e:df:db:cb:31:83:ea:16:6f:af:ee:f0:5d:55:a8:
51:11:de:22:71:ac:f0:b4:94:25:a4:04:99:7f:9b:ac:32:cf:
8d:3b:98:96:8f:17:64:b8:55:74:c9:48:59:1f:1c:9e:3d:a3:
1f:41:db:9e:61:7e:8e:d4:d4:f2:e6:b9:6d:0f:9e:d1:44:ed:
15:00:1a:ec:8e:e6:b5:e9:c6:e6:c0:d8:6a:6e:f9:38:5a:40:
4e:8e:ca:c1:ed:70:0f:f8:58:2f:93:a7:9e:bf:b3:88:41:d1:
09:04:db:d6:be:1a:07:e0:99:74:53:6e:c5:01:38:14:c3:de:
15:bf:49:d4:5e:5a:38:8f:a8:f8:80:be:7a:21:8c:9a:3a:76:
1a:dc:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 06:01:00 2024 by rpki-client on console-fra.rpki-client.org