Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/L9-_dOO7qksadodF8-mh2sf_xow.roa
File: L9-_dOO7qksadodF8-mh2sf_xow.roa (raw, json)
Hash identifier: fm1P9eIBEPNvCxDwbJlH92RW0Txdfb7RcC9nh/wo6dY=
Subject key identifier: 2F:DF:BF:74:E3:BB:AA:4B:1A:76:87:45:F3:E9:A1:DA:C7:FF:C6:8C
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 018CC56EF4D75EC4CA95C68AF2ABB904C8DE
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/L9-_dOO7qksadodF8-mh2sf_xow.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 719
IP address blocks: 194.137.159.0/24 maxlen: 24
192.58.49.0/24 maxlen: 24
192.103.94.0/24 maxlen: 24
192.103.93.0/24 maxlen: 24
192.103.98.0/24 maxlen: 24
192.103.101.0/24 maxlen: 24
192.103.108.0/24 maxlen: 24
192.103.109.0/24 maxlen: 24
192.103.87.0/24 maxlen: 24
194.137.11.0/24 maxlen: 24
192.103.90.0/24 maxlen: 24
192.103.89.0/24 maxlen: 24
192.103.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f4:d7:5e:c4:ca:95:c6:8a:f2:ab:b9:04:c8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fdfbf74e3bbaa4b1a768745f3e9a1dac7ffc68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:8c:fd:f4:3c:c8:f1:f3:24:c0:b4:2b:6e:
ec:1a:70:ad:f8:4e:f7:1d:7b:07:a3:d1:0e:02:af:
5d:67:a1:db:5c:c6:ef:df:57:30:6b:d1:1c:1d:21:
a0:a3:72:9a:a2:72:25:57:93:44:fb:32:d9:62:7c:
6a:23:16:f6:33:29:1d:a7:17:ac:bf:f1:b0:d1:8b:
cf:eb:a9:53:b0:c6:33:29:0f:8e:b0:d8:0e:28:6f:
4c:10:6c:44:0b:33:a6:6d:80:d4:c7:79:4d:8b:19:
28:69:eb:00:12:20:51:e7:fd:b9:0d:d0:79:6a:29:
b9:e0:b8:9b:ca:d3:05:27:0b:7e:a2:23:28:9f:fc:
f3:af:14:36:8c:a3:d0:a4:68:ec:cc:ef:71:97:5e:
b5:11:db:51:ed:98:d8:eb:77:c3:30:1c:66:e2:6d:
13:e8:12:a9:ab:90:cf:f3:ca:91:ca:36:63:4b:dc:
1c:ff:72:2d:8a:33:5e:35:6b:cc:a4:7e:50:bf:e3:
60:67:0c:d4:01:5e:e9:b3:67:c6:c1:86:d9:50:35:
5a:85:73:45:f9:29:48:80:f6:f3:72:9a:42:a1:45:
e0:f4:5f:4e:ab:ec:4f:93:9a:a2:b4:fa:15:4f:e4:
5b:ce:e7:24:26:89:61:c8:c3:bd:0c:b0:ba:77:c5:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:BF:74:E3:BB:AA:4B:1A:76:87:45:F3:E9:A1:DA:C7:FF:C6:8C
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/L9-_dOO7qksadodF8-mh2sf_xow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.49.0/24
192.103.87.0-192.103.90.255
192.103.93.0-192.103.94.255
192.103.98.0/24
192.103.101.0/24
192.103.108.0/23
194.137.11.0/24
194.137.159.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0f:ed:27:56:38:97:03:2d:9e:87:a8:81:5a:08:bc:19:01:
64:6c:84:50:f7:cd:d4:d6:34:43:0b:76:b2:e2:4f:3f:85:ce:
ba:3d:22:01:04:1a:01:8c:8a:62:24:bc:e9:b9:11:9b:8f:6d:
aa:59:8d:41:b9:91:44:9e:ba:8a:1d:e3:50:b4:e9:92:d2:39:
b4:22:de:5e:5c:13:6e:7f:b1:61:d5:2e:4e:b6:e1:5e:6f:dd:
f7:4d:e4:75:e5:94:0d:c8:50:35:89:1b:d9:92:6a:bd:75:ca:
81:48:25:58:b1:a0:aa:22:c7:dd:f6:04:d6:27:c2:90:41:2b:
86:cf:63:e6:f0:fb:22:3d:9c:56:64:38:60:dc:e2:c1:d8:f2:
77:5f:03:d4:ac:57:59:98:4d:d2:e6:57:1d:06:94:6e:87:0e:
96:20:33:ed:fc:69:2e:b5:8d:15:5f:64:50:f0:81:21:67:3f:
5a:0e:e8:38:fb:07:1a:3f:57:e9:9a:2e:c7:3d:da:b2:60:27:
6a:b6:a6:7b:ed:0d:15:5a:b5:75:a4:df:0a:0c:e9:99:3d:9f:
6a:19:d1:e6:43:8b:05:54:16:b1:38:74:f9:1d:1d:99:49:af:
fa:eb:3f:e5:0e:67:15:03:6b:59:22:7e:72:84:36:01:f4:b7:
57:c4:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:01 2024 by rpki-client on console-fra.rpki-client.org