Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LX7StpvjWcDwDYgoiyQvhSxsVac.roa
File: LX7StpvjWcDwDYgoiyQvhSxsVac.roa (raw, json)
Hash identifier: LypVLMozb1gk7Bc2srcf9HurxaMtpnc7x85KsP1zDYo=
Subject key identifier: 2D:7E:D2:B6:9B:E3:59:C0:F0:0D:88:28:8B:24:2F:85:2C:6C:55:A7
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0192222CB7A8060A84C7A676429B508332B2
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LX7StpvjWcDwDYgoiyQvhSxsVac.roa
Signing time: Tue 24 Sep 2024 03:56:48 +0000
ROA not before: Tue 24 Sep 2024 03:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21487
IP address blocks: 46.48.128.0/20 maxlen: 20
78.31.216.0/21 maxlen: 21
80.73.64.0/19 maxlen: 19
80.73.64.0/20 maxlen: 20
80.73.80.0/20 maxlen: 20
91.185.224.0/19 maxlen: 19
91.185.240.0/20 maxlen: 20
94.245.128.0/18 maxlen: 18
94.245.128.0/19 maxlen: 19
94.245.136.0/22 maxlen: 22
94.245.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:2c:b7:a8:06:0a:84:c7:a6:76:42:9b:50:83:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 24 03:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d7ed2b69be359c0f00d88288b242f852c6c55a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:d9:5e:03:05:79:ed:a6:cb:35:db:16:98:
e4:79:dd:75:16:fc:30:69:5c:00:41:57:c1:82:cf:
0a:4d:7d:3c:a1:38:f1:6f:e2:6b:de:e8:cd:b2:85:
2e:aa:73:81:29:d6:9d:87:ec:bc:6b:fc:58:8a:43:
68:90:d8:41:56:db:1d:76:8d:b3:7c:87:58:16:1f:
3d:cb:e2:91:d8:1e:c9:0e:21:56:77:fb:6c:f4:bb:
d9:c9:e6:f9:56:91:97:7e:59:eb:71:0b:a6:09:1a:
4a:f3:57:a6:c3:96:de:d5:b3:da:e2:cd:b4:98:a6:
11:88:ed:99:bd:ee:5b:8a:c4:64:89:5c:ed:26:8b:
88:be:93:be:59:2f:4c:81:f4:44:06:2a:cb:c0:4d:
20:90:a5:0a:d8:21:a6:ad:5c:58:0a:58:cd:42:77:
bb:80:3b:e0:3e:c8:44:60:12:23:c4:39:2f:8a:fc:
ed:a1:9b:4e:74:1b:2a:96:54:46:0d:ba:68:04:de:
4a:05:fa:de:d1:65:25:69:02:74:5b:76:bc:b0:2b:
25:97:50:e7:e3:12:78:21:0e:6e:81:84:61:97:fe:
1d:94:c1:e4:a3:34:19:28:d1:9a:10:a6:a4:f7:a8:
80:45:40:67:6f:16:69:9d:63:77:30:15:94:be:e5:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:D2:B6:9B:E3:59:C0:F0:0D:88:28:8B:24:2F:85:2C:6C:55:A7
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LX7StpvjWcDwDYgoiyQvhSxsVac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.48.128.0/20
78.31.216.0/21
80.73.64.0/19
91.185.224.0/19
94.245.128.0/18
Signature Algorithm: sha256WithRSAEncryption
77:c8:95:97:10:d2:8c:4a:91:9c:af:da:0c:d8:62:c3:3e:96:
a9:46:7f:16:05:6e:91:35:28:cf:ca:1b:d3:dd:86:a7:d1:dc:
2a:9d:63:4f:e7:86:32:ca:69:c3:20:57:c6:99:1f:8a:7a:0e:
64:77:ac:3d:84:3a:d5:90:05:27:d5:49:b8:e9:82:b5:a7:fb:
4d:34:d9:ee:b9:5b:fb:6b:70:5f:24:54:9a:89:c3:1a:5c:8a:
d9:7c:d7:0b:bd:4c:c1:2b:40:e9:cb:53:ab:e3:6d:94:e6:0a:
08:3c:25:51:1b:35:3d:53:83:ce:9d:d1:7b:4e:59:26:8f:49:
64:8c:7e:86:f3:25:1b:9d:15:99:74:7e:39:34:9c:ae:d1:7c:
5c:0a:71:53:62:0c:5f:45:e7:73:5f:4e:2f:96:3b:a9:5c:38:
80:f1:1e:2b:85:f4:91:13:6d:38:28:5e:12:bd:76:88:78:44:
0a:f6:6d:e9:be:1c:39:bc:ca:3a:26:2c:75:2c:6e:5b:9d:22:
75:3c:da:a4:f5:8a:32:52:74:53:49:94:56:38:98:a7:22:17:
65:b9:ad:df:f7:47:c4:af:46:f3:e1:c9:fb:19:8d:08:37:04:
8c:02:89:d0:ef:fc:6f:97:aa:57:26:37:56:a5:b7:96:88:89:
7f:0e:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org