Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Lv92V_k0H9U0GTdNJoZS1kKq7QI.roa
File: Lv92V_k0H9U0GTdNJoZS1kKq7QI.roa (raw, json)
Hash identifier: Jnku2EjLrKkdiObZim3WBJ7LjpG3enxWQFvav2EqbsA=
Subject key identifier: 2E:FF:76:57:F9:34:1F:D5:34:19:37:4D:26:86:52:D6:42:AA:ED:02
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9324A2AF64391141C3DCAF5CADAFE
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Lv92V_k0H9U0GTdNJoZS1kKq7QI.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29694
IP address blocks: 46.254.133.0/24 maxlen: 24
46.254.134.0/24 maxlen: 24
85.187.14.0/24 maxlen: 24
85.187.243.0/24 maxlen: 24
85.187.249.0/24 maxlen: 24
46.254.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:32:4a:2a:f6:43:91:14:1c:3d:ca:f5:ca:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eff7657f9341fd53419374d268652d642aaed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:c9:32:1c:19:1e:a3:c7:92:64:24:3c:12:
87:3a:50:37:e8:ac:87:d0:65:ac:03:1d:7e:dc:d3:
75:29:cb:f5:44:d3:3d:78:4e:02:06:d2:08:fe:6e:
fa:b3:21:8d:97:1f:0a:da:a2:93:c4:d9:b5:cb:c1:
a4:bb:81:97:a8:7c:0e:0f:b4:9b:35:b1:d9:55:95:
a4:70:2f:ce:07:95:88:a7:93:f3:d7:ca:6f:96:db:
96:37:6d:41:6d:f9:e0:1c:8c:5a:bb:d3:e6:51:89:
ee:01:a4:c4:e6:2f:36:d1:8b:22:17:a8:d1:3e:62:
9a:ef:db:b5:b4:ff:32:83:b7:ce:ee:f7:6e:58:b5:
56:f4:49:ed:a2:08:1c:c8:27:4d:ee:d1:66:df:55:
a7:98:b6:49:a7:24:74:79:c2:69:4b:3c:c1:e7:11:
81:f1:25:76:f5:b2:b0:33:12:f2:0d:b8:17:92:7d:
37:0e:8f:d5:a6:b5:43:f4:c1:10:da:fc:86:d6:a3:
4b:02:0b:dd:42:74:40:c7:3b:88:c2:91:ad:9a:dd:
aa:78:1d:ec:73:4e:82:87:be:9d:70:8e:f7:08:4d:
ab:c4:bf:5f:5a:8b:00:5e:de:39:70:a6:eb:c6:aa:
6d:f6:7c:b5:6e:02:49:14:db:d5:66:3d:89:35:c1:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:76:57:F9:34:1F:D5:34:19:37:4D:26:86:52:D6:42:AA:ED:02
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Lv92V_k0H9U0GTdNJoZS1kKq7QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.132.0-46.254.134.255
85.187.14.0/24
85.187.243.0/24
85.187.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d3:0b:4d:9e:c4:dd:de:2d:45:48:ab:d1:b0:2b:85:bc:89:
e6:cd:3d:13:62:ee:43:4a:af:55:8d:3d:d8:df:dc:84:18:55:
49:01:79:52:6b:cb:d1:d6:cc:e9:8f:82:31:61:48:1b:27:52:
da:08:62:3d:16:5a:f4:b3:8b:64:b7:69:45:c0:73:b0:4a:04:
b9:06:ab:32:55:9f:83:38:a6:7b:24:6c:67:3d:70:f3:be:43:
9c:59:cd:94:c6:24:e6:83:dc:e4:0c:de:09:2a:ab:82:24:4d:
6c:8b:70:91:1f:c8:79:ac:06:ec:61:92:48:39:f8:7c:33:db:
df:a4:50:0b:08:ff:92:46:ab:fc:d7:0a:c8:08:c9:c2:40:04:
8e:f3:59:62:0d:43:e6:d5:7f:12:50:77:46:e2:e3:0c:67:fa:
2a:78:c9:08:31:a8:a4:c5:0b:28:fc:11:10:28:66:65:49:c4:
5d:bc:fb:2b:57:6e:17:ba:4a:56:ad:cd:a8:64:eb:20:aa:5c:
62:9f:c0:e5:8a:a9:b9:4b:57:09:bb:0a:3d:ba:03:b1:aa:87:
ba:3a:b9:61:40:2a:46:69:32:14:9e:f5:65:d8:a0:30:58:62:
36:df:1e:ae:0f:fa:86:cf:78:c7:8f:41:04:6c:0d:71:a8:b4:
11:93:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:30:33 2024 by rpki-client on console-fra.rpki-client.org