Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/lKfx__R2QYNPbbhoq0HP45HLvDo.roa
File: lKfx__R2QYNPbbhoq0HP45HLvDo.roa (raw, json)
Hash identifier: sdH5pYALwtj4PstZalPPUwJqKm+I236p0iQfn6MPOAc=
Subject key identifier: 94:A7:F1:FF:F4:76:41:83:4F:6D:B8:68:AB:41:CF:E3:91:CB:BC:3A
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 019125E22AD25381DE49CCF5FAC67BE53B43
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/lKfx__R2QYNPbbhoq0HP45HLvDo.roa
Signing time: Tue 06 Aug 2024 04:11:04 +0000
ROA not before: Tue 06 Aug 2024 04:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 37.114.72.0/21 maxlen: 32
78.110.16.0/20 maxlen: 32
80.245.208.0/20 maxlen: 32
95.131.232.0/21 maxlen: 32
185.56.252.0/22 maxlen: 32
195.38.30.0/24 maxlen: 32
217.168.160.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:25:e2:2a:d2:53:81:de:49:cc:f5:fa:c6:7b:e5:3b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Aug 6 04:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94a7f1fff47641834f6db868ab41cfe391cbbc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:d6:05:34:0c:a3:b8:ee:6c:ce:8f:08:5c:
db:e9:0a:4b:6e:0c:d4:a3:de:07:41:12:f0:5c:b1:
4f:5e:8a:96:75:f2:66:1f:c8:f6:2b:f4:16:e4:57:
13:b0:dc:fe:74:86:62:75:c7:ce:14:75:2d:5e:1e:
d4:8c:b4:fc:65:ba:03:93:00:36:ff:25:99:9e:51:
0c:c2:58:a4:93:75:53:2a:b4:eb:df:af:8d:58:83:
20:4c:93:2d:e9:f9:f0:70:87:c0:23:46:bf:e3:7b:
6a:09:ac:a2:ca:a1:09:dc:d3:10:40:35:d3:a1:1f:
8c:d4:77:6e:e8:8c:13:ec:6b:52:cf:4e:09:af:fc:
58:a9:5d:47:81:e0:83:2a:60:8f:06:36:41:1a:bf:
cb:d8:de:e0:54:c4:bc:06:bc:04:a8:9b:00:82:ac:
48:b6:b1:4c:57:aa:68:1a:3f:ff:70:6a:79:3e:97:
87:8b:a6:70:6e:c9:be:c9:97:b4:36:a7:36:10:f5:
3b:11:5f:cf:85:8d:2f:02:48:59:2f:b0:7c:e1:10:
e9:ea:5c:3a:8f:7b:40:37:07:c2:8f:0e:8d:bc:2e:
d8:35:06:45:7a:da:22:21:ef:3f:e5:4b:a0:98:b8:
ba:91:4a:27:7e:be:e2:f9:45:82:50:aa:58:39:f6:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A7:F1:FF:F4:76:41:83:4F:6D:B8:68:AB:41:CF:E3:91:CB:BC:3A
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/lKfx__R2QYNPbbhoq0HP45HLvDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.72.0/21
78.110.16.0/20
80.245.208.0/20
95.131.232.0/21
185.56.252.0/22
195.38.30.0/24
217.168.160.0/20
Signature Algorithm: sha256WithRSAEncryption
82:b6:56:f9:94:77:f6:33:c2:f0:e4:fe:77:43:5e:e7:01:f0:
ae:ed:c2:be:aa:e1:a5:6e:ef:23:4e:e4:83:c5:b0:b1:29:23:
c6:64:ef:89:a2:4b:db:05:b5:b9:9b:56:c1:0b:98:f6:7a:98:
5a:a8:c9:d0:2a:46:b6:6c:64:31:85:f1:25:87:23:e6:00:8c:
a3:f9:fa:80:97:84:3f:21:74:db:23:bb:93:a3:cc:1d:cb:89:
cc:43:58:d8:7b:65:6b:c0:cb:47:d9:9b:5b:47:5f:66:df:68:
d9:73:7f:c5:e8:0f:ce:20:49:c8:1a:f4:35:a6:6b:2b:13:57:
fb:46:63:d3:ca:42:bd:c1:c4:09:36:9f:5f:00:6c:bb:ad:09:
b3:35:e8:1f:c6:08:6e:45:78:f3:bf:08:ed:b5:24:c4:78:6d:
32:38:a5:0b:54:49:1f:b8:64:33:62:b9:c3:6f:81:9f:42:eb:
aa:bc:ee:6f:20:a7:8e:a9:ca:cf:be:bd:d7:54:1c:24:18:d6:
08:5e:8a:41:d7:c1:df:4c:32:e4:99:5a:74:dd:bd:67:a7:55:
1c:79:f0:bb:d1:78:5d:80:a6:97:bb:62:ae:4f:ce:c9:c7:00:
89:a2:47:4d:52:e2:ce:95:99:48:86:76:af:f6:d9:6b:4e:d6:
52:90:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:28:53 2024 by rpki-client on console-fra.rpki-client.org