Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LMXhDQ-cXx8nQGkaPVLMfg2qZ0Q.roa
File: LMXhDQ-cXx8nQGkaPVLMfg2qZ0Q.roa (raw, json)
Hash identifier: CbYBUtvOy6Tz7tC+5XrZgB1ct9GqXigWwI2aRlEcXqs=
Subject key identifier: 2C:C5:E1:0D:0F:9C:5F:1F:27:40:69:1A:3D:52:CC:7E:0D:AA:67:44
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019299DEEF62F89BF28D6C3BA456E63187A7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LMXhDQ-cXx8nQGkaPVLMfg2qZ0Q.roa
Signing time: Thu 17 Oct 2024 09:46:17 +0000
ROA not before: Thu 17 Oct 2024 09:46:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.115.0/24 maxlen: 24
193.8.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:de:ef:62:f8:9b:f2:8d:6c:3b:a4:56:e6:31:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 17 09:46:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cc5e10d0f9c5f1f2740691a3d52cc7e0daa6744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:b1:c0:cd:01:7a:af:c9:df:28:a1:98:48:
b9:2b:4c:0c:21:78:d5:a3:9f:52:98:c5:c6:aa:82:
5b:68:c4:26:a7:c7:8a:3f:c4:95:bf:a5:25:0e:94:
20:b0:10:23:74:df:a0:01:65:45:20:25:d9:c1:95:
3e:61:94:19:a4:c9:84:81:d6:a1:d9:bf:76:04:e8:
dd:c6:71:ad:b4:f2:2c:9a:e8:46:91:07:e3:8f:e6:
21:8a:a0:dd:b2:35:a0:2d:d9:ba:bf:74:13:30:f6:
a2:33:a0:78:8d:80:42:0a:8b:ef:2b:24:b7:fe:c5:
15:f3:81:0d:7c:c7:a5:c2:3d:26:89:1d:a6:19:f4:
11:97:ec:cf:77:26:bb:4b:03:3a:ef:58:b4:e3:53:
1b:30:a2:a1:60:23:cf:56:3e:45:50:74:96:81:8a:
fe:94:64:e9:54:2b:6b:9c:be:fd:79:da:97:90:3b:
a7:4a:f8:cb:56:65:d2:1e:80:99:d0:5a:a8:d1:8b:
bd:7b:e7:84:fd:58:5a:34:a4:2a:10:0c:73:be:a7:
27:2d:e1:cc:50:5f:46:29:dc:06:de:82:d4:4e:99:
eb:d9:6f:ce:a8:7c:b7:af:d7:e6:23:a7:5f:7f:fa:
56:ab:02:71:b4:72:15:01:72:b3:6c:83:08:8b:e7:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:E1:0D:0F:9C:5F:1F:27:40:69:1A:3D:52:CC:7E:0D:AA:67:44
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LMXhDQ-cXx8nQGkaPVLMfg2qZ0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/24
185.218.22.0/24
185.240.120.0/23
185.246.115.0/24
193.8.112.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a4:4e:17:c2:f0:94:d8:51:53:9e:f6:dd:17:66:b7:b6:b8:
6d:4c:33:03:cd:43:9a:19:99:b8:55:7b:71:35:23:aa:df:93:
f7:71:16:05:39:96:d5:bf:cf:b9:79:8c:31:dd:f1:35:19:85:
d2:ba:82:c2:94:57:f0:6b:d4:78:9b:a2:10:a3:62:75:80:24:
5e:da:a7:da:40:d0:68:b4:97:27:a6:f0:3a:c2:db:de:66:44:
28:3a:64:61:f0:2b:34:d6:55:4b:f0:71:6c:35:89:64:c2:17:
b7:4b:96:79:66:94:df:ec:9b:cb:ea:97:29:d0:99:57:b7:3c:
19:6e:c5:99:eb:a7:3d:fb:95:58:a3:11:ef:41:88:60:8c:d1:
cd:67:aa:08:c6:fd:f2:df:f0:1e:73:35:2c:91:de:bc:16:19:
36:35:cd:a9:6d:57:66:c2:ff:74:1f:f6:d3:01:9d:1b:40:6c:
27:80:bf:27:7c:91:aa:3b:4c:7a:66:62:44:43:09:e2:f5:82:
7d:4e:32:14:cd:4a:3c:4c:9b:fe:d2:d7:e0:87:8a:69:e6:15:
3c:f1:d5:6e:2b:07:ea:a4:f7:3f:f1:dd:cf:13:a4:ed:5a:2d:
df:14:89:87:e1:b7:00:4a:92:d1:b4:1f:30:67:cd:b7:84:42:
78:12:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:41:48 2024 by rpki-client on console-fra.rpki-client.org