Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/lvAWOwu1Oe7q16DaaZbH4EdYgjc.roa
File: lvAWOwu1Oe7q16DaaZbH4EdYgjc.roa (raw, json)
Hash identifier: v/a+nqmnl11o/RyVfp2P3pUFm8T1DDqn8TeZ3rzmyyI=
Subject key identifier: 96:F0:16:3B:0B:B5:39:EE:EA:D7:A0:DA:69:96:C7:E0:47:58:82:37
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 018CC56EF6ADE0C7918C625FBC5FF7A2A8FF
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/lvAWOwu1Oe7q16DaaZbH4EdYgjc.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47132
IP address blocks: 185.227.90.0/24 maxlen: 24
185.236.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f6:ad:e0:c7:91:8c:62:5f:bc:5f:f7:a2:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f0163b0bb539eeead7a0da6996c7e047588237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:60:ea:5d:79:ab:4b:13:51:79:76:a1:94:
35:93:bb:b2:31:48:cb:97:6d:7d:6e:31:c9:86:55:
c4:e4:f9:3e:6f:e0:82:4e:07:8a:c9:1c:1b:40:54:
18:fd:7e:69:4c:33:d8:06:a4:31:5b:60:37:4d:9b:
c4:7d:54:d6:8d:72:8b:bd:a0:72:c7:70:d9:11:3e:
89:9a:15:3e:55:de:e7:39:ab:3c:4b:d2:5d:35:51:
bf:c8:58:ad:90:0b:f1:d8:7c:3c:86:02:14:87:54:
73:22:ec:05:dd:9e:66:d8:10:fe:3f:ca:19:bc:b1:
93:b1:37:58:bf:a5:2e:60:b8:fc:c7:6e:f7:2e:99:
80:f2:00:45:d1:cc:33:41:b5:b2:2f:a1:fa:52:83:
24:73:d8:10:ed:6d:1e:69:4d:7a:12:28:7d:b4:1a:
0d:b5:3f:eb:92:51:be:04:3e:eb:3a:24:68:f2:74:
c6:33:bd:e8:2f:96:05:a5:ff:e5:f4:3e:86:16:ed:
35:e3:81:c9:df:d2:18:26:5d:a7:4d:18:18:d4:78:
89:35:59:36:09:79:ba:8d:08:97:00:19:96:80:06:
a1:68:8b:34:12:0f:26:a6:4a:92:f9:ed:14:d7:36:
79:01:b4:6b:2e:7a:ea:e2:f2:d3:8b:fe:78:02:1c:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:16:3B:0B:B5:39:EE:EA:D7:A0:DA:69:96:C7:E0:47:58:82:37
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/lvAWOwu1Oe7q16DaaZbH4EdYgjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.90.0/24
185.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
31:97:46:1e:26:20:a1:05:02:cc:d6:de:11:7c:a7:22:b9:f5:
cd:de:e3:fe:fe:c8:36:b8:3d:b6:b1:e1:14:a4:22:69:54:d2:
e6:9b:fe:d0:b4:42:66:5b:d6:2a:db:78:28:84:d8:c4:8e:fb:
c0:2e:c5:d9:c4:5b:8e:61:61:e8:2e:50:fc:83:01:fe:c5:d4:
93:1c:0c:6b:b7:50:f7:c1:94:37:1f:1f:5a:a9:b8:37:7a:eb:
21:d6:cb:82:f8:a5:88:5b:41:01:df:37:8d:8a:01:02:59:ca:
6d:1c:80:6f:15:bc:57:f0:d7:0c:86:11:db:3f:52:5e:08:dd:
be:16:83:70:d7:a3:14:37:7c:d8:9a:12:25:65:36:f0:8c:9a:
cf:41:0a:e2:50:4d:55:f1:8d:3c:d3:13:e9:7c:67:a4:cd:f2:
71:ba:45:83:ca:5c:2b:d6:62:a2:7b:9a:15:ee:3f:bd:a8:ae:
17:02:cb:96:0e:76:46:2b:3c:ef:45:18:41:03:b8:1a:e1:30:
86:f7:be:4c:24:a2:6f:b9:cf:6a:b8:3a:36:ac:27:f1:86:87:
fa:d4:e6:5b:44:31:4c:7d:f2:35:7a:95:58:4a:7b:cb:81:c9:
64:b6:e0:4a:4b:40:30:7f:08:eb:23:82:00:4e:fe:d2:cb:cc:
1d:3d:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:34 2024 by rpki-client on console-fra.rpki-client.org