Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/lSZ1Kg-OFcDJV5nFUUQynuIeZvQ.roa
File: lSZ1Kg-OFcDJV5nFUUQynuIeZvQ.roa (raw, json)
Hash identifier: yeCI6bwdmBGCYa5LpVcQbKU01SZlONAu4Qb+3MXIMvs=
Subject key identifier: 95:26:75:2A:0F:8E:15:C0:C9:57:99:C5:51:44:32:9E:E2:1E:66:F4
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019228DE961584893AFB2E8FB3352F6415B8
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/lSZ1Kg-OFcDJV5nFUUQynuIeZvQ.roa
Signing time: Wed 25 Sep 2024 11:08:49 +0000
ROA not before: Wed 25 Sep 2024 11:08:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199152
IP address blocks: 94.247.137.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:de:96:15:84:89:3a:fb:2e:8f:b3:35:2f:64:15:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Sep 25 11:08:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9526752a0f8e15c0c95799c55144329ee21e66f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:e0:92:f4:eb:8b:57:e6:dc:7e:31:07:ce:
cd:b8:54:98:44:82:b2:0b:3c:1c:94:19:3d:4f:1c:
59:b4:c0:59:08:1e:de:ee:a3:f6:1d:13:0c:01:47:
c8:a8:4e:eb:94:d3:24:62:ca:e6:cf:43:9d:65:1e:
52:9e:0d:29:9c:75:eb:e4:0f:1e:ac:22:4b:92:2f:
63:1f:f8:5b:37:b8:20:d4:8c:99:e6:a2:d6:02:81:
da:2b:bd:52:0e:d1:2b:8b:a8:bf:0b:49:da:a8:be:
36:88:51:ae:30:e1:49:41:40:98:3b:00:e8:cc:9c:
7e:dc:24:d7:16:33:f3:03:01:09:00:1b:4b:d6:c3:
70:f3:1e:c8:3e:13:23:fe:db:5c:32:aa:99:4e:94:
2a:d3:fb:2f:e7:d4:64:44:9f:97:97:7a:03:af:6a:
95:ba:a3:4a:84:2b:7d:de:80:7c:10:42:b6:09:b0:
5d:4c:99:bb:9b:d6:ef:83:e8:5e:29:f4:83:96:b4:
23:91:fb:d5:c8:ac:6e:59:53:52:e8:ed:bf:9c:de:
a8:84:f3:25:a0:72:c4:6d:e4:f7:90:af:94:6b:13:
88:42:75:d0:a1:ab:fb:f3:ed:3a:ec:98:d5:c9:b7:
f4:7b:e7:a3:84:cd:c6:f1:c5:76:0e:69:91:14:1f:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:26:75:2A:0F:8E:15:C0:C9:57:99:C5:51:44:32:9E:E2:1E:66:F4
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/lSZ1Kg-OFcDJV5nFUUQynuIeZvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.137.0/24
176.116.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:33:b1:9a:2b:8c:24:c4:01:a6:0a:97:24:97:e9:d1:15:77:
46:b4:1d:52:be:c7:26:cb:8d:59:82:4a:36:4e:de:6b:cf:f8:
31:12:87:ed:c1:15:5c:27:d0:48:bb:f9:16:4b:62:4b:64:40:
b5:d0:01:92:ee:37:24:69:2c:3e:0e:db:8f:0a:2e:68:86:3f:
1c:30:c2:75:72:af:dd:bf:95:8e:9e:4a:50:80:53:6e:ee:8e:
c1:71:1b:0c:b3:bb:50:9a:ed:06:b1:69:5a:c2:0d:6e:1e:5c:
ba:a2:00:61:58:88:18:74:46:4a:cb:3c:1f:d8:97:52:82:0e:
be:b6:26:fa:6d:78:40:83:ac:ee:37:2c:7e:74:10:a0:99:f1:
71:0b:78:2b:73:25:51:8f:fd:6c:f3:54:22:5f:a5:ef:bd:93:
66:16:b9:43:bb:a4:13:a4:ef:2c:2d:c7:b9:af:c4:89:d8:ed:
71:88:13:1d:29:e3:f3:36:61:fb:2b:28:3a:50:34:1b:a3:2f:
e5:64:44:13:03:e0:ed:07:fe:5e:d2:09:af:8f:0e:af:ac:7b:
00:dc:38:f0:b8:a5:3a:eb:ea:b5:67:26:4f:0f:a7:f1:d6:89:
69:fb:be:06:7c:be:55:fe:03:24:e9:1e:af:fb:bc:22:c0:c6:
ad:f7:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:17 2024 by rpki-client on console-ams.rpki-client.org