Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LZ--7qbgfeFKVvRx9vBnlEF29yY.roa
File: LZ--7qbgfeFKVvRx9vBnlEF29yY.roa (raw, json)
Hash identifier: 35nMRZeuffmySDNNfCnMaDfEJ4bIdSSqG3+S7fLzjrI=
Subject key identifier: 2D:9F:BE:EE:A6:E0:7D:E1:4A:56:F4:71:F6:F0:67:94:41:76:F7:26
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DB6A0B5CB5C488E396995C7CAAC1DCAE2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LZ--7qbgfeFKVvRx9vBnlEF29yY.roa
Signing time: Sat 17 Feb 2024 10:33:22 +0000
ROA not before: Sat 17 Feb 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 86.106.81.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
188.241.3.0/24 maxlen: 24
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b6:a0:b5:cb:5c:48:8e:39:69:95:c7:ca:ac:1d:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 17 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d9fbeeea6e07de14a56f471f6f067944176f726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6d:34:e3:12:22:e3:f4:c2:df:c3:67:fa:e5:
40:a4:cd:2c:d9:a9:1b:ff:49:6c:6b:ab:16:68:0c:
04:d4:23:3b:99:45:a0:3d:d5:c5:fa:f7:33:70:6c:
38:9d:81:25:01:8f:fd:1e:7e:80:28:ff:12:ad:ce:
f2:aa:0a:b2:4a:17:24:b4:5f:46:44:29:c5:91:e0:
2f:45:f2:71:04:37:c5:c5:89:0a:72:cd:73:22:8e:
67:30:de:cd:a5:17:90:3c:87:47:85:27:5c:7c:97:
1d:d1:2b:cf:69:50:ab:9e:b4:c6:60:ef:af:28:cf:
97:40:4d:61:0c:40:ee:e2:bd:9a:08:93:c6:50:90:
bb:42:3e:fd:83:c3:72:35:cf:bd:28:c4:64:1b:3b:
61:0e:10:51:0f:76:91:a7:b1:b3:47:26:b0:03:54:
9d:38:06:ea:50:12:37:ed:4f:90:a7:ef:23:08:cc:
1b:4c:79:1e:92:0b:f5:90:8d:4c:a0:49:c7:1d:73:
68:5b:5b:8b:b6:07:a8:6e:8d:56:f5:a5:39:92:20:
d8:90:fe:92:01:31:e2:97:86:a3:9d:d2:89:80:d3:
ff:53:0d:60:6b:73:5c:bd:ac:c5:be:a2:aa:ed:0b:
75:21:35:39:28:1a:0d:59:7a:f5:83:6d:1f:09:40:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:BE:EE:A6:E0:7D:E1:4A:56:F4:71:F6:F0:67:94:41:76:F7:26
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LZ--7qbgfeFKVvRx9vBnlEF29yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.34.27.0/24
89.35.158.0/24
89.38.228.0/23
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0-89.47.98.255
89.47.101.0-89.47.111.255
89.47.120.0/24
89.47.122.0/24
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
188.241.3.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
06:a9:73:fd:f1:40:ea:9a:0d:a7:58:83:1e:27:71:2e:ed:18:
89:6f:97:3e:d4:08:26:b3:8b:b3:32:1a:97:db:2e:1e:2d:9a:
ff:c9:0a:87:3e:7f:33:31:89:3f:78:0d:27:92:6b:1a:e5:7c:
c5:7a:d1:87:12:47:0e:86:0c:d3:18:65:37:2a:20:f7:a5:80:
ee:3f:45:d5:d2:14:09:e2:62:53:1d:64:4f:e7:d2:8f:a8:4c:
a8:49:cd:39:e7:03:e5:09:f6:41:8a:d7:af:50:69:80:56:2d:
d7:97:af:76:be:20:15:43:8a:95:89:6c:52:9d:bd:3e:73:d4:
bd:4d:c4:24:db:0a:94:1a:27:aa:12:39:f3:a4:2c:73:ba:39:
6a:4e:8d:98:40:dc:4f:a7:26:f9:24:fc:e1:7c:79:2f:48:70:
cc:6c:e3:59:dd:7e:52:a9:7b:d0:08:1c:59:40:b7:a0:8c:a3:
34:d3:84:fc:78:f5:ee:bf:f6:09:51:32:1f:ac:ce:6d:6c:64:
16:e7:b6:ba:88:d4:e8:9e:da:51:99:6d:ef:e9:f6:94:5f:68:
96:b3:f0:53:45:af:db:3e:5b:bf:2e:ea:18:de:c2:09:49:cd:
ee:e2:e1:f2:b1:53:fd:6e:3d:36:4d:ec:e6:6f:7f:47:55:4e:
3c:54:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:51 2024 by rpki-client on console-fra.rpki-client.org