Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa
File: lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa (raw, json)
Hash identifier: 3MazFUVxFAYfVUcUDDWljMCjN10REorvhSBcT4sUWrE=
Subject key identifier: 94:02:75:D9:60:1B:AD:9E:8A:9F:23:55:C7:1E:9F:7A:DF:F5:35:DD
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018EC2BBD7B3DF451677F5C8679831F4FEE2
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa
Signing time: Tue 09 Apr 2024 12:01:14 +0000
ROA not before: Tue 09 Apr 2024 12:01:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34754
IP address blocks: 87.254.160.0/19 maxlen: 24
87.254.160.0/23 maxlen: 24
87.254.162.0/23 maxlen: 24
87.254.162.0/24 maxlen: 24
87.254.163.0/24 maxlen: 24
87.254.164.0/23 maxlen: 24
87.254.164.0/24 maxlen: 24
87.254.165.0/24 maxlen: 24
87.254.166.0/23 maxlen: 24
87.254.168.0/24 maxlen: 24
87.254.169.0/24 maxlen: 24
87.254.170.0/23 maxlen: 24
87.254.172.0/23 maxlen: 24
87.254.172.0/24 maxlen: 24
87.254.173.0/24 maxlen: 24
88.87.0.0/19 maxlen: 24
88.87.0.0/24 maxlen: 24
88.87.1.0/24 maxlen: 24
88.87.2.0/24 maxlen: 24
88.87.3.0/24 maxlen: 24
88.87.4.0/24 maxlen: 24
88.87.5.0/24 maxlen: 24
88.87.6.0/23 maxlen: 24
88.87.8.0/23 maxlen: 24
88.87.8.0/24 maxlen: 24
88.87.10.0/23 maxlen: 24
88.87.10.0/24 maxlen: 24
88.87.12.0/23 maxlen: 24
88.87.14.0/24 maxlen: 24
88.87.15.0/24 maxlen: 24
88.87.16.0/23 maxlen: 24
88.87.18.0/23 maxlen: 24
88.87.20.0/23 maxlen: 24
88.87.22.0/23 maxlen: 24
88.87.22.0/24 maxlen: 24
88.87.23.0/24 maxlen: 24
88.87.24.0/22 maxlen: 24
88.87.28.0/23 maxlen: 24
88.87.30.0/24 maxlen: 24
88.87.31.0/24 maxlen: 24
109.199.128.0/19 maxlen: 24
193.228.172.0/23 maxlen: 24
193.228.182.0/23 maxlen: 24
212.50.64.0/19 maxlen: 24
212.50.64.0/22 maxlen: 24
212.50.68.0/22 maxlen: 24
212.50.70.0/24 maxlen: 24
212.50.72.0/22 maxlen: 24
212.50.76.0/22 maxlen: 24
212.50.76.0/24 maxlen: 24
212.50.77.0/24 maxlen: 24
212.50.78.0/24 maxlen: 24
212.50.79.0/24 maxlen: 24
212.50.80.0/23 maxlen: 24
212.50.82.0/23 maxlen: 24
212.50.84.0/23 maxlen: 24
212.50.86.0/23 maxlen: 24
212.50.88.0/23 maxlen: 24
212.50.90.0/23 maxlen: 24
212.50.91.0/24 maxlen: 24
212.50.92.0/24 maxlen: 24
212.50.93.0/24 maxlen: 24
212.50.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:bb:d7:b3:df:45:16:77:f5:c8:67:98:31:f4:fe:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Apr 9 12:01:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=940275d9601bad9e8a9f2355c71e9f7adff535dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:e2:76:44:52:c3:bf:f5:47:8d:40:d9:b2:
53:97:5b:f9:e6:1f:3a:cc:e1:a4:36:0f:9d:92:16:
03:6f:05:d5:54:bd:ee:8c:27:6c:11:fb:70:48:47:
c1:05:a4:c8:0a:72:14:f6:a3:c7:48:3f:e4:66:95:
a0:b8:04:ef:6e:ef:84:f4:b1:31:16:ec:53:42:53:
b7:44:6f:8c:99:e1:2e:c3:c4:de:51:fb:40:e6:bb:
68:14:37:10:62:aa:cb:57:24:6f:1f:08:3d:fb:84:
1f:8c:9b:30:f2:e2:be:b0:c2:1e:62:45:cb:62:15:
7d:1b:7b:b6:2b:14:b4:5d:c3:cd:88:65:63:2c:f7:
49:4c:cc:04:87:c7:97:5c:4c:4c:12:5d:f4:b9:2c:
e0:92:87:78:ba:88:a7:fd:dd:90:a6:d4:ea:3c:be:
34:ad:59:fd:90:f7:75:05:5e:d6:d7:5d:cc:06:90:
34:ce:2f:a0:88:cd:b2:2f:7c:cf:56:38:b3:dc:d6:
db:a2:83:ed:c3:8f:9b:b2:24:bf:24:f9:49:50:a9:
46:81:82:42:5a:8f:52:dc:66:32:2d:a5:e0:03:45:
25:50:4c:c2:2f:16:c2:cf:d1:82:50:89:80:f5:d1:
38:d6:43:ff:01:23:09:98:ad:bc:e8:e1:da:5e:ba:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:75:D9:60:1B:AD:9E:8A:9F:23:55:C7:1E:9F:7A:DF:F5:35:DD
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lAJ12WAbrZ6KnyNVxx6fet_1Nd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.160.0/19
88.87.0.0/19
109.199.128.0/19
193.228.172.0/23
193.228.182.0/23
212.50.64.0/19
Signature Algorithm: sha256WithRSAEncryption
84:df:c6:ef:be:02:1c:b2:2e:aa:b8:82:9f:6f:68:34:85:1c:
2d:e0:4b:98:d5:8a:4a:9c:9d:0f:ec:33:a9:05:4a:48:46:7c:
85:3f:4e:c3:3e:5c:85:ce:e6:a4:28:78:60:54:5c:6b:ce:45:
fd:4c:70:7c:00:16:f9:ce:63:58:aa:38:52:57:b6:b0:b4:f8:
87:00:29:12:e9:be:5f:a2:15:16:70:41:10:99:6f:7d:29:63:
a3:e7:e1:00:b7:be:a1:4d:32:a2:96:81:d2:66:0b:46:91:35:
cc:f2:2d:87:e0:4b:7d:c5:d4:e8:45:2b:0a:62:b6:e6:fb:d0:
6b:82:20:9f:99:7d:32:9f:9f:1b:a1:84:bb:98:2c:f6:e6:30:
6a:4d:00:e9:45:e4:d8:ac:e7:e9:f4:3c:17:97:04:d5:b0:f8:
10:0d:98:2a:f2:82:18:af:fc:e2:f2:c9:f7:1e:0e:a0:f7:2e:
48:1c:83:f9:72:4b:a1:05:02:db:68:89:d4:8e:0b:41:8a:19:
f7:19:4b:e6:82:53:ee:5e:fc:e0:8f:c2:02:1e:be:65:fa:fc:
1f:53:d2:e1:b0:de:c4:df:f8:6d:45:74:6f:33:2d:03:4b:dd:
c8:05:44:cc:31:1b:c3:05:14:86:ae:a8:45:dd:c4:bf:8b:7a:
01:61:1a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:20 2024 by rpki-client on console-ams.rpki-client.org