Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Lb6QKf4RjGNcv3kC5RltZkE3E7I.roa
File: Lb6QKf4RjGNcv3kC5RltZkE3E7I.roa (raw, json)
Hash identifier: nYx/6eBcnV0Mou+6gpb8sUeutWMFSNItxmR9obT951U=
Subject key identifier: 2D:BE:90:29:FE:11:8C:63:5C:BF:79:02:E5:19:6D:66:41:37:13:B2
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018EE607FD95A8C73ECC619DE33557998CEE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Lb6QKf4RjGNcv3kC5RltZkE3E7I.roa
Signing time: Tue 16 Apr 2024 08:31:07 +0000
ROA not before: Tue 16 Apr 2024 08:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199737
IP address blocks: 178.211.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:07:fd:95:a8:c7:3e:cc:61:9d:e3:35:57:99:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 16 08:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dbe9029fe118c635cbf7902e5196d66413713b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:c8:25:c6:01:50:af:af:6e:2b:59:a7:24:
1c:28:99:57:3e:e3:5a:26:35:a1:a3:c0:c7:eb:d3:
df:cb:3e:86:0e:8d:c9:f3:96:1e:fb:67:67:8d:d4:
c3:de:6c:af:18:fe:52:bb:0a:2b:a1:e4:95:5c:63:
6d:05:c2:9a:59:67:86:99:ad:db:a1:48:79:84:d0:
e6:b7:9c:b8:96:44:2c:09:8e:ff:91:01:85:ad:cd:
79:02:bc:c4:e0:55:80:6c:07:3a:7d:3a:33:82:dc:
40:dc:c0:8d:2c:ad:88:a9:2c:49:97:ec:2c:3a:83:
90:a3:a2:13:3e:26:59:a8:04:a7:8c:0b:e1:51:ba:
be:7a:8a:74:e3:a7:79:41:11:cd:25:46:c6:05:84:
1f:83:dc:75:2b:dd:fc:f2:e7:d0:1d:49:ed:d8:a9:
db:cc:d8:ef:39:36:60:af:cf:91:5f:f3:8e:01:98:
41:8b:ff:67:cb:06:34:d1:49:af:97:3b:ab:23:89:
bb:21:6e:b5:c9:1e:65:44:57:2f:73:41:da:d8:6e:
c7:c9:71:8e:97:1d:4e:d2:36:2a:4b:fb:77:9b:c6:
48:84:09:41:8e:76:b1:5d:47:38:4c:5d:e0:84:63:
95:43:a3:be:49:a4:d9:39:93:d1:e7:04:b2:18:ab:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:90:29:FE:11:8C:63:5C:BF:79:02:E5:19:6D:66:41:37:13:B2
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Lb6QKf4RjGNcv3kC5RltZkE3E7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.132.0/24
Signature Algorithm: sha256WithRSAEncryption
11:16:ba:aa:1b:a9:f1:5f:cf:e7:cc:68:27:e3:d0:4e:06:7d:
ac:20:6e:f0:f4:22:e8:7c:c8:3c:45:67:75:b1:dc:48:29:fd:
7f:8d:6f:a5:85:d5:94:6e:1c:a3:b0:9b:7c:90:e4:26:99:86:
39:eb:01:8c:10:56:bc:53:e5:ad:0f:27:ce:be:ed:1b:d1:0e:
cf:f3:dd:91:cb:25:6f:bc:57:e6:ca:a1:56:81:47:e8:2c:55:
1c:50:8e:c9:32:69:59:11:b0:19:8e:3c:07:26:68:25:d2:e8:
e1:7c:c6:82:75:ed:03:e8:90:92:c2:96:1a:75:84:21:63:56:
e5:ed:ef:2e:08:ea:4f:9c:c5:ea:e9:7a:62:62:40:77:7a:c8:
31:ec:a3:76:8a:65:c6:e5:d1:1f:42:51:60:3f:81:28:6c:ec:
df:df:2c:85:21:d1:20:2d:71:df:1f:48:b3:21:5b:c6:da:45:
10:55:87:16:71:45:f0:01:f9:4a:4d:6c:d0:f3:01:5b:ce:13:
da:fd:67:0a:38:b5:e7:5b:f4:ec:b9:fb:79:e8:43:4d:17:2a:
79:bc:73:2c:06:03:60:31:c9:70:07:72:c4:9f:ae:fa:76:07:
4f:e0:c9:7f:32:11:1f:67:7d:31:12:a0:6e:85:c5:09:f1:5d:
70:eb:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 07:36:10 2024 by rpki-client on console-ams.rpki-client.org