Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/lneGPI9lZ_HLOeoKtMHkMqU_t38.roa
File: lneGPI9lZ_HLOeoKtMHkMqU_t38.roa (raw, json)
Hash identifier: BQTmSBbaHAqnRG5h/LRbS3OW33lYQch+S3vjr74/IEo=
Subject key identifier: 96:77:86:3C:8F:65:67:F1:CB:39:EA:0A:B4:C1:E4:32:A5:3F:B7:7F
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 018CC56DE36E0857554212BD84EA3A5A8FAE
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/lneGPI9lZ_HLOeoKtMHkMqU_t38.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60951
IP address blocks: 152.89.225.0/24 maxlen: 24
152.89.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e3:6e:08:57:55:42:12:bd:84:ea:3a:5a:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9677863c8f6567f1cb39ea0ab4c1e432a53fb77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:f7:d0:d3:17:cc:34:2f:c4:89:a9:25:d4:
dd:ae:2b:f4:35:83:b3:ef:ad:f9:74:f6:56:b7:c7:
23:2a:1c:e1:28:e8:59:df:ab:66:33:3d:cb:a4:de:
c4:9b:7d:61:5b:a7:48:4e:20:e9:be:fd:97:c5:1a:
12:2e:1f:a4:ff:ea:01:ee:97:8f:c0:46:12:f3:a9:
05:30:23:72:db:e4:d1:28:fb:56:69:67:60:87:ef:
6d:1c:6d:be:b8:51:aa:8d:39:a9:08:a9:e8:3e:5b:
16:b3:43:ab:6e:c7:cd:de:f6:5c:50:2b:ac:4b:3b:
c2:c8:c6:00:cf:25:7d:a3:9a:97:7e:f9:52:53:7c:
6d:80:0f:b8:e6:df:86:0f:8f:3d:61:c0:de:74:f3:
2f:03:da:bd:59:04:ec:dc:18:1a:23:5e:22:7f:37:
b1:e4:71:0c:59:07:ac:20:cc:a3:74:f4:f0:db:3a:
8c:42:b3:8e:55:d6:07:7a:a2:54:23:d4:82:a2:f3:
7e:16:b1:90:ae:f8:b0:65:f6:71:4f:f8:9f:48:61:
8e:7e:c6:e9:bb:7f:0b:a3:6f:ac:0d:c9:7e:ba:4c:
a2:c0:c7:9c:d6:ea:81:10:12:55:7e:ab:e6:db:14:
d2:8e:2b:b3:bd:5b:b9:74:03:eb:33:92:81:2a:4d:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:77:86:3C:8F:65:67:F1:CB:39:EA:0A:B4:C1:E4:32:A5:3F:B7:7F
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/lneGPI9lZ_HLOeoKtMHkMqU_t38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.224.0/22
Signature Algorithm: sha256WithRSAEncryption
34:85:7f:eb:1b:bd:bb:23:01:db:b8:5c:19:15:44:60:e8:34:
2b:bb:30:6a:c4:6d:89:27:58:cc:67:da:36:01:b5:b1:30:54:
fa:00:92:05:44:9b:9a:f6:72:b9:95:4f:92:d6:51:77:82:66:
26:f3:17:20:65:c6:7e:41:6d:5d:e7:ae:69:1a:4a:e2:e1:d4:
83:ae:0a:2d:f1:55:89:92:66:6f:73:a0:04:e1:87:a4:10:d5:
ae:a3:5f:f7:a8:51:7c:a2:51:18:8e:2a:37:32:ac:d7:f6:a2:
6a:b6:b7:de:3b:71:f1:27:09:2c:9e:d5:66:a3:4c:d5:99:6a:
c3:6b:42:d1:fd:70:d6:42:87:61:61:5a:55:c5:e7:06:a9:bf:
fb:6a:01:6b:06:0f:25:39:7a:5a:6c:fa:ac:9e:3f:5c:4f:22:
ef:9a:f6:9a:f2:ae:fb:c0:24:0e:0f:86:36:de:78:c5:60:c3:
e2:4e:54:f7:a7:c8:4d:06:c3:9e:1b:d3:0c:99:26:ff:1d:93:
11:2a:73:2e:c5:6b:00:65:ec:5a:10:09:da:3c:ab:f7:24:a4:
17:cc:97:3e:0a:4d:b9:8f:00:51:f8:4e:4a:9d:51:65:4c:7a:
c0:54:d0:b6:60:b4:3f:3c:f5:50:b0:56:48:e6:2c:ec:b0:42:
e4:b5:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:47:06 2024 by rpki-client on console-fra.rpki-client.org