Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LO7xiRTFCv3yeeOzdx_DTToE-nU.roa
File: LO7xiRTFCv3yeeOzdx_DTToE-nU.roa (raw, json)
Hash identifier: wBWTmFaInfWU6AbijBJpfV+8HJZhoohWZ+00I9FZMNg=
Subject key identifier: 2C:EE:F1:89:14:C5:0A:FD:F2:79:E3:B3:77:1F:C3:4D:3A:04:FA:75
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018EEC2D28F742E6B110205244D92FEBBB86
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LO7xiRTFCv3yeeOzdx_DTToE-nU.roa
Signing time: Wed 17 Apr 2024 13:09:26 +0000
ROA not before: Wed 17 Apr 2024 13:09:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13920
IP address blocks: 83.143.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:2d:28:f7:42:e6:b1:10:20:52:44:d9:2f:eb:bb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 17 13:09:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ceef18914c50afdf279e3b3771fc34d3a04fa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:b4:b9:ee:50:d4:45:d9:93:4e:a2:7c:1e:
9c:1e:a3:6c:f6:ad:77:57:c4:33:9f:90:31:29:1a:
2a:ac:6c:48:dc:b4:cb:76:a3:fa:25:25:59:08:8a:
98:66:a3:28:ab:cb:87:b1:1c:fd:b4:0a:bd:7b:9a:
e5:68:a6:fd:df:1e:29:21:f5:48:07:36:d6:19:95:
51:bb:92:1d:31:e1:63:30:ab:5d:d0:00:56:9c:28:
22:89:42:f7:ad:00:00:21:d1:96:bf:90:b5:ee:7f:
bf:9a:ae:cd:73:f2:66:35:1c:23:f5:22:9c:c2:98:
4d:73:03:81:31:27:5e:78:24:29:03:53:c9:1a:7c:
13:51:97:bc:47:7c:e2:6e:32:ca:c3:aa:d9:e3:d7:
21:cd:39:7d:35:ba:a8:42:a0:c9:d6:24:b5:54:97:
bd:33:61:a9:cb:29:76:e2:b0:3f:f8:1a:c1:46:68:
f0:bb:ab:08:70:c3:1b:56:b8:37:e7:28:18:49:7d:
8f:e5:6f:7c:98:e2:2f:21:32:fb:e8:a8:1c:73:b5:
22:18:dd:6e:07:16:2c:cf:43:52:b7:eb:c1:ce:24:
66:1b:b1:9e:e1:7e:4b:35:89:95:cf:38:f4:27:07:
68:0d:00:00:0f:46:71:46:5b:4c:09:a3:fc:f7:39:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EE:F1:89:14:C5:0A:FD:F2:79:E3:B3:77:1F:C3:4D:3A:04:FA:75
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LO7xiRTFCv3yeeOzdx_DTToE-nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:71:27:e1:b7:86:a2:ee:19:ba:eb:24:f9:20:02:5b:9a:68:
52:5c:d4:70:cf:e2:5f:7d:5e:5a:bb:12:66:3c:0c:2f:45:48:
0e:ab:af:7e:c5:20:8c:6e:fd:4c:d2:ea:62:fd:f6:19:67:62:
c3:69:e6:ad:95:76:13:ee:bc:f6:38:6d:4c:73:6c:be:cc:a0:
92:96:d5:8c:f0:f7:e0:8e:af:c5:d7:a0:3c:26:17:41:2a:36:
9a:75:5f:b9:7f:fb:b3:d4:6b:23:a8:51:2e:45:64:09:d1:61:
a8:37:2f:ab:5a:f0:47:78:46:53:76:32:b4:bc:41:ac:6a:29:
6f:1c:1d:c9:06:a7:b4:bd:68:0a:36:b3:fc:f6:c5:08:fa:29:
de:16:91:94:9f:42:6f:65:76:9d:42:3b:63:90:f1:e8:60:f2:
69:6b:35:03:fc:a2:c7:00:a6:56:4e:77:64:fb:4f:1d:05:81:
dd:fd:99:39:56:94:86:01:16:5f:53:dc:ac:32:27:ed:5d:6c:
6f:e9:7f:2a:c3:18:66:06:0d:ec:ef:1d:03:d1:2b:5a:9d:c9:
8e:76:9e:90:6d:a1:da:ae:bc:b1:41:6d:74:df:db:dc:45:93:
bf:9d:fc:09:d3:7d:e2:ef:fe:73:03:c0:c6:1c:67:22:76:46:
45:38:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:35:43 2024 by rpki-client on console-fra.rpki-client.org