Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lysApltcwumez79uyiG1QCSKsR4.roa
File: lysApltcwumez79uyiG1QCSKsR4.roa (raw, json)
Hash identifier: u+pjGQFmJTJNuVFPrG/eIPRFqT5AnNuiII7PzHyIvwQ=
Subject key identifier: 97:2B:00:A6:5B:5C:C2:E9:9E:CF:BF:6E:CA:21:B5:40:24:8A:B1:1E
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B996731493632720CE46C2AD9A17E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lysApltcwumez79uyiG1QCSKsR4.roa
Signing time: Mon 01 Jan 2024 18:31:32 +0000
ROA not before: Mon 01 Jan 2024 18:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208817
IP address blocks: 85.202.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:99:67:31:49:36:32:72:0c:e4:6c:2a:d9:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=972b00a65b5cc2e99ecfbf6eca21b540248ab11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5b:28:17:c5:57:c6:25:de:35:1f:fe:e0:9d:
b6:70:c9:56:05:6b:1b:7a:13:60:a9:69:98:92:1e:
c1:4c:d2:31:d1:14:53:fd:06:6d:61:d4:ff:b1:41:
2b:2e:07:63:48:a3:22:08:04:c5:43:e9:4a:78:54:
0c:4a:8a:75:40:ad:89:79:33:60:df:b3:ab:24:d0:
4f:77:73:9e:31:38:a5:e6:68:04:86:b6:ee:bf:ff:
91:1d:77:fa:1b:bc:6e:c8:dd:21:f8:c8:ef:bc:05:
f9:1f:9d:96:4b:20:0f:f8:e1:a6:1f:32:ac:c2:7a:
8d:90:35:a1:57:b3:41:ac:47:4d:bd:96:6b:ae:4a:
1b:d7:f3:3b:43:74:0c:82:f4:2c:ca:9e:aa:f3:04:
04:73:70:25:28:98:98:55:ed:a0:66:7d:4c:50:6d:
09:a8:75:f7:00:41:f9:66:4b:f1:81:22:46:21:ff:
73:52:08:f0:8e:eb:06:54:28:95:3c:9f:c1:e0:69:
07:de:be:b9:69:14:e9:75:ee:55:f8:41:41:1e:90:
20:f1:9d:72:54:b3:55:7e:f4:cc:79:d6:02:70:f1:
43:fb:68:0f:88:58:08:a9:2b:9b:d9:df:92:a4:9e:
ef:73:f8:2f:50:37:f7:9a:9b:f9:75:d6:42:b6:1c:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:00:A6:5B:5C:C2:E9:9E:CF:BF:6E:CA:21:B5:40:24:8A:B1:1E
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lysApltcwumez79uyiG1QCSKsR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:f8:d6:25:42:7e:3b:de:7b:e7:87:d1:0a:7d:ff:85:5a:cf:
cb:6b:63:33:ce:72:bb:2a:a8:87:f3:30:ec:18:a5:9a:5e:68:
1e:4f:f5:6d:9e:10:ac:88:57:ba:04:fd:27:4a:01:fe:9e:14:
e1:0b:40:ed:cb:84:d8:43:d7:38:55:75:c5:9c:16:0c:3c:d9:
30:cc:cc:23:ee:49:41:52:a9:f4:38:0a:16:39:6d:b4:e2:b7:
fb:6d:7a:a6:1b:1e:1b:b4:69:fa:63:05:6b:f3:74:cb:17:92:
36:f2:50:5b:64:ca:7b:c9:e8:52:9b:aa:a0:07:13:a8:6f:60:
9c:a3:cc:8f:80:46:0d:45:73:b9:a0:da:73:5c:d5:8f:4f:66:
ed:b7:6a:cb:f9:d9:13:9a:50:68:6b:a6:ba:da:98:43:1f:f8:
5d:24:66:68:0f:40:54:30:83:55:ef:07:11:35:3b:af:4a:10:
9a:d6:81:ac:5a:c9:76:71:fb:9d:3d:ea:ea:a2:b3:d8:0a:22:
81:3d:c7:6c:2d:fd:96:8d:e3:45:e7:4a:4c:1a:3c:6d:45:51:
44:97:be:c2:db:0c:5f:90:a2:b9:66:1d:7f:84:a1:5b:a3:60:
d0:77:40:86:ee:fc:1d:63:f3:fc:a4:d3:13:ff:08:f7:6b:e5:
e7:25:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org