Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/LrmvCeVDAezGSlNzbl423tJyw9A.roa
File: LrmvCeVDAezGSlNzbl423tJyw9A.roa (raw, json)
Hash identifier: auEAnFHKkmS65x9E/BENugr36k7eGiRQWh1dHEYQXoI=
Subject key identifier: 2E:B9:AF:09:E5:43:01:EC:C6:4A:53:73:6E:5E:36:DE:D2:72:C3:D0
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 018CC8DF6D07468AC9B61E6E6CC69608F9A9
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/LrmvCeVDAezGSlNzbl423tJyw9A.roa
Signing time: Tue 02 Jan 2024 06:32:14 +0000
ROA not before: Tue 02 Jan 2024 06:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57513
IP address blocks: 185.132.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6d:07:46:8a:c9:b6:1e:6e:6c:c6:96:08:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Jan 2 06:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eb9af09e54301ecc64a53736e5e36ded272c3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:c2:f5:9f:78:4b:77:e8:10:b8:f3:91:0f:
09:81:75:61:7a:db:af:dc:dc:55:37:cb:6b:ab:67:
b0:e8:a3:11:cb:78:af:72:5e:e3:ab:4f:04:27:34:
8b:29:f8:d9:fe:87:7f:fe:9b:ca:2a:92:9e:bc:87:
99:5b:1f:9c:84:4a:de:05:a4:49:20:01:86:e1:d5:
71:63:b2:a8:c4:be:a6:fe:e3:93:3a:86:57:63:21:
5c:ed:5e:b2:ab:ea:47:72:4f:ab:42:f2:7a:f8:99:
48:d2:a0:d5:38:01:69:f7:ce:97:ba:8f:c5:89:b5:
50:8a:18:bc:6c:9c:40:9d:01:91:08:53:a3:d2:12:
f5:33:d6:b7:d8:fc:cc:b3:31:57:45:55:12:e8:06:
c6:17:45:49:85:7c:2c:4b:e8:44:93:be:c7:8a:b7:
e6:40:fa:6f:4d:74:fb:26:05:60:c5:7d:a0:70:9b:
a8:d1:64:0e:8f:59:b4:72:bc:da:52:fb:ac:22:37:
3e:a2:b7:cb:16:3e:91:93:73:97:1c:4c:52:72:75:
17:bf:77:b5:91:30:0a:d3:38:6d:85:90:2b:96:4c:
cc:cd:f7:26:38:ff:e4:bf:57:5e:1d:26:fd:8c:4c:
2f:8e:18:d9:8c:01:07:ef:f2:e1:7f:1d:0e:05:83:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:AF:09:E5:43:01:EC:C6:4A:53:73:6E:5E:36:DE:D2:72:C3:D0
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/LrmvCeVDAezGSlNzbl423tJyw9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:ca:c5:5a:36:56:76:64:93:6f:0d:ed:fc:db:0b:f7:a3:d4:
80:fc:6c:06:65:c9:14:8d:a6:38:e8:e4:1d:8e:b2:3f:7e:66:
94:af:6b:74:23:13:1b:a5:24:ac:7f:c1:84:02:d7:31:0f:c2:
87:f9:38:8b:9b:d1:5e:ca:1c:88:de:11:85:57:e0:fb:46:e2:
66:35:df:c0:b0:29:38:ed:ae:8c:09:f9:c4:95:bb:71:28:c6:
63:5c:b5:05:9a:a9:0d:be:54:68:33:3f:4f:63:83:78:82:43:
c6:9b:ca:b6:3f:89:00:b4:49:09:f9:64:a9:49:68:1c:53:10:
89:62:32:52:3d:92:a4:0f:43:92:a8:5f:e2:8e:2e:b9:14:d5:
0b:e6:cc:42:f2:9b:8c:da:29:4f:56:e6:86:7e:58:84:fb:b4:
35:18:12:be:a9:43:d7:ba:76:8c:c4:9f:39:10:fe:e6:ec:38:
37:fe:94:6d:e5:19:f2:44:d8:4e:99:66:33:4c:ad:3b:0e:20:
f5:53:e1:88:fe:da:ea:c2:c2:1e:ac:5b:26:43:0c:f2:12:29:
2a:e3:4e:46:c5:01:7b:ab:c1:11:b3:de:3e:59:0d:89:49:ca:
3a:5f:f2:68:9f:86:80:52:dc:2a:6c:53:10:20:2b:72:31:94:
39:f8:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:57 2024 by rpki-client on console-ams.rpki-client.org