Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lZLZkl_o98BRKCpVCGuA41hx6C0.roa
File: lZLZkl_o98BRKCpVCGuA41hx6C0.roa (raw, json)
Hash identifier: APsOxLWqYm/TRJIVTwurPTn042NOhzGn1U8Jp43qcZA=
Subject key identifier: 95:92:D9:92:5F:E8:F7:C0:51:28:2A:55:08:6B:80:E3:58:71:E8:2D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0192A9C1B45BB5A2F6E4F81ADFA5A0AC26C7
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lZLZkl_o98BRKCpVCGuA41hx6C0.roa
Signing time: Sun 20 Oct 2024 11:48:17 +0000
ROA not before: Sun 20 Oct 2024 11:48:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 37.32.41.0/24 maxlen: 24
178.239.148.0/23 maxlen: 24
185.243.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a9:c1:b4:5b:b5:a2:f6:e4:f8:1a:df:a5:a0:ac:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 20 11:48:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9592d9925fe8f7c051282a55086b80e35871e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:7d:01:d8:0f:c4:de:64:b3:d2:14:65:f8:
84:f3:26:80:17:c5:a7:db:0a:a1:40:2d:08:11:3e:
c4:7e:ea:84:10:b1:3f:d5:70:7a:67:e3:21:ea:11:
21:80:87:b2:78:75:ca:8f:0e:ef:e8:b7:b6:4d:f3:
97:c4:33:72:fa:0c:b4:0f:6f:a8:4f:d1:ef:71:37:
dc:c2:9f:51:b2:3d:52:38:66:87:e6:ef:11:5f:cb:
93:2a:68:bb:86:4b:a4:b3:91:aa:01:14:e6:0c:71:
39:0a:33:bb:43:a8:52:b7:f7:d1:1d:7f:39:d1:0e:
ab:8b:e8:93:16:0e:53:f3:23:e9:e7:38:f7:56:3a:
24:3a:9c:8a:5c:4a:5d:99:c6:c2:62:9b:95:76:01:
31:2a:8d:cc:4b:1d:40:d3:31:84:0e:77:e7:69:f6:
d1:9e:7f:df:ed:ba:ce:27:ac:1b:b8:eb:df:d9:0e:
fd:a6:ba:9a:6f:7f:24:51:e5:6b:2e:9f:3c:b6:d3:
6a:e2:66:89:dc:6b:2c:5a:57:b3:25:43:ad:13:95:
67:63:cd:48:1d:74:a2:60:16:ab:72:0c:ce:fa:02:
67:a7:bc:13:d6:a0:5f:a6:20:14:18:21:03:08:db:
c5:f8:5c:81:09:cb:a7:d6:46:b1:b6:86:89:58:55:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:D9:92:5F:E8:F7:C0:51:28:2A:55:08:6B:80:E3:58:71:E8:2D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lZLZkl_o98BRKCpVCGuA41hx6C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.41.0/24
178.239.148.0/23
185.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
97:66:73:98:fc:f1:59:22:c3:d9:7a:aa:25:57:c0:d5:c0:99:
71:da:51:65:f6:11:b4:79:f1:9a:50:54:91:82:40:bb:45:84:
65:79:f0:74:b5:b8:3f:1b:8d:2e:78:63:44:ae:bb:cb:47:2a:
79:70:5e:bd:f3:65:1a:51:c1:3a:50:78:15:30:f1:39:6c:7b:
f9:77:6d:cb:18:a9:ad:01:dd:fa:6f:0d:16:84:c3:04:0f:9e:
99:21:52:39:8f:40:4f:e9:4a:08:7a:a7:ee:9f:2c:4a:11:4d:
f5:3c:46:90:b7:e8:ac:2a:f8:4b:9a:48:84:f8:b6:3d:14:fe:
27:0b:75:79:3d:df:f5:b8:d3:f3:cd:41:51:c7:9c:49:ea:ee:
d7:cd:f4:a6:df:7a:aa:97:68:5f:60:fa:fa:f5:46:ad:8a:dd:
f4:b8:88:c2:8c:10:03:88:72:ef:24:5f:e3:4e:fd:46:95:47:
15:a4:3a:e5:d0:42:49:90:bf:33:68:30:b5:bc:26:ee:ae:ef:
8b:d7:b8:a5:9a:9a:01:42:a3:e7:6c:a8:cc:4e:2b:7c:9b:53:
cc:c8:35:43:8f:da:06:78:16:67:d9:93:b1:10:26:3c:0c:76:
2b:30:f4:1e:22:9b:69:ac:6b:65:7f:8a:65:f7:d3:a2:ac:f0:
13:f2:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:52 2024 by rpki-client on console-fra.rpki-client.org