Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/LZssoXyEFVQz04EMyt_-z8FQyG8.roa
File: LZssoXyEFVQz04EMyt_-z8FQyG8.roa (raw, json)
Hash identifier: y7l48hHRTdtW1WC5sw6KU7nUyLPtXcblotViHWtyXSs=
Subject key identifier: 2D:9B:2C:A1:7C:84:15:54:33:D3:81:0C:CA:DF:FE:CF:C1:50:C8:6F
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018E7B3798FF05A54C6FEF7EABD8B52FE1F6
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/LZssoXyEFVQz04EMyt_-z8FQyG8.roa
Signing time: Tue 26 Mar 2024 14:43:44 +0000
ROA not before: Tue 26 Mar 2024 14:43:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 45.149.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:37:98:ff:05:a5:4c:6f:ef:7e:ab:d8:b5:2f:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Mar 26 14:43:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d9b2ca17c84155433d3810ccadffecfc150c86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:eb:23:ab:eb:e3:3e:a6:14:94:ae:ef:31:
17:79:e9:05:26:32:f6:9e:ff:f5:4f:69:5b:1f:fc:
fb:6e:8e:f7:40:57:69:13:5c:1b:12:fa:7c:7d:ec:
59:58:7f:f9:2f:9a:22:68:3e:eb:7b:00:af:6a:bf:
8e:86:0f:2e:ba:38:f1:96:e1:ad:4b:41:54:06:ae:
d3:4c:e2:22:75:f6:2f:6a:31:15:3c:7f:96:03:a8:
3d:ac:da:81:85:bc:f8:6f:1a:6d:e8:7a:bb:fc:10:
8c:07:ff:d5:9c:43:04:45:54:42:26:30:a1:7b:6e:
72:b7:2a:6c:0e:55:61:80:6b:4a:5d:49:9b:06:f9:
61:b2:62:27:c5:8b:7f:a3:54:fa:a0:0c:c7:28:38:
45:6e:1d:e2:3b:08:e2:26:8a:3c:53:02:dc:bb:80:
19:87:0d:a4:16:dd:f9:b7:47:de:9f:24:fd:34:ef:
85:ce:fc:5a:4f:38:7b:28:07:82:a1:6e:6d:13:dc:
23:5e:b0:5d:1b:2c:d3:e2:ed:5f:5a:8f:7b:9d:59:
a2:00:ea:d2:b6:65:06:62:d7:33:e8:53:d2:7d:3f:
51:a6:17:9a:3c:a0:b6:75:d4:da:e8:5e:87:af:d0:
04:57:58:ca:40:7c:51:c2:0f:e4:ed:de:9c:04:31:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:2C:A1:7C:84:15:54:33:D3:81:0C:CA:DF:FE:CF:C1:50:C8:6F
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/LZssoXyEFVQz04EMyt_-z8FQyG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.166.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1a:d2:b9:da:0e:97:cc:82:af:18:fb:88:c2:47:9d:17:38:
56:c7:47:17:64:2c:01:a0:b3:c9:6a:42:af:b7:0c:b8:23:c1:
07:8b:d7:db:b6:f6:ca:57:5e:fe:74:42:b8:3b:5d:32:ba:cd:
07:4b:6e:ab:45:ab:3b:19:29:de:90:5a:d8:58:48:52:93:b3:
b2:6e:0c:af:1f:8a:e2:fb:03:dd:48:b9:1b:b1:04:20:90:8d:
7d:8d:98:a4:a4:ee:68:cb:2f:5d:8e:23:4c:f4:bb:1d:f0:df:
00:6d:55:0f:31:39:f7:b1:c1:cd:f8:b3:46:f7:90:ea:ea:a9:
14:d6:ff:95:c0:78:71:58:ad:83:7a:64:96:17:4a:d4:64:b7:
b9:b2:aa:b2:55:d9:81:38:97:4e:4b:55:7c:c5:9e:62:0b:95:
5c:38:3c:89:1f:b7:bb:a2:68:72:ac:24:6f:11:99:19:25:d4:
0c:40:1d:11:59:24:61:98:bf:c8:6a:46:48:49:cc:65:fa:c1:
5c:9e:05:87:b2:93:b6:57:f0:68:2b:15:83:dc:ad:d0:70:4b:
9e:2e:6b:0f:b9:7c:71:2d:9d:d8:f3:74:7d:a3:37:95:6a:5d:
06:e7:d9:ae:5a:f9:04:f6:a7:ee:4e:a2:a8:70:b8:25:69:51:
2e:32:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:20:48 2024 by rpki-client on console-fra.rpki-client.org