Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/lvBWWEdKkXq3FPp5C0FblgSRXM4.roa
File: lvBWWEdKkXq3FPp5C0FblgSRXM4.roa (raw, json)
Hash identifier: gi7jdV1CTqHkm9AeKFjrrbG8ggu4d7oswAUrwRvAZbE=
Subject key identifier: 96:F0:56:58:47:4A:91:7A:B7:14:FA:79:0B:41:5B:96:04:91:5C:CE
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 018CC72581F8FE5435634DD5D0BFE5074083
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/lvBWWEdKkXq3FPp5C0FblgSRXM4.roa
Signing time: Mon 01 Jan 2024 22:29:33 +0000
ROA not before: Mon 01 Jan 2024 22:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51257
IP address blocks: 171.22.146.0/24 maxlen: 24
2a05:d80::/29 maxlen: 29
2a05:d80:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:81:f8:fe:54:35:63:4d:d5:d0:bf:e5:07:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Jan 1 22:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f05658474a917ab714fa790b415b9604915cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:51:f9:b1:65:1b:26:f7:4d:70:ef:b8:e4:
b1:e0:f0:41:1e:9c:4c:24:6e:26:30:98:2e:2f:ab:
99:76:38:bf:6a:49:c4:67:0f:71:ca:f1:8a:e1:05:
c9:b2:b5:50:33:9f:12:67:f0:f4:72:5e:99:da:d5:
8c:5c:e8:8a:2f:9c:4c:6c:8c:31:28:3f:f5:8a:fb:
35:36:3e:40:d5:80:11:57:28:52:d6:7b:d2:24:ee:
4f:88:65:91:76:ab:ea:e0:b7:0a:95:b4:63:65:ea:
d4:5e:7a:5a:7b:0a:f6:dd:63:21:70:1f:78:e1:6a:
1d:97:03:38:00:72:46:0d:1b:fe:e9:a3:5d:d9:d3:
24:12:11:ea:a0:c3:31:97:28:7d:fc:d8:eb:62:56:
d3:6d:85:94:db:d6:28:00:18:4b:3a:c2:ed:fc:71:
5e:a2:f5:43:55:f5:d8:61:22:cf:64:79:c2:ed:0c:
7c:57:c9:46:58:db:e2:02:a2:1c:48:5c:9e:2c:33:
c3:be:44:62:7d:c2:7f:b5:30:15:95:f0:9d:4d:c3:
e7:22:9b:ae:0e:7b:ab:18:e2:46:c2:38:8b:d5:7a:
bd:47:a8:0e:af:d0:2c:e9:76:6a:6e:e0:d8:f0:d8:
56:6a:5c:da:f6:1a:45:2a:91:8b:8a:4f:4e:8d:ea:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:56:58:47:4A:91:7A:B7:14:FA:79:0B:41:5B:96:04:91:5C:CE
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/lvBWWEdKkXq3FPp5C0FblgSRXM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.146.0/24
IPv6:
2a05:d80::/29
Signature Algorithm: sha256WithRSAEncryption
a5:01:24:76:fa:57:43:4a:41:ca:69:4a:c0:a3:3c:fe:8c:da:
19:b5:ea:84:7c:38:36:d8:40:71:11:8b:a6:26:9d:52:13:c8:
26:ed:c0:ab:a4:3d:c1:6f:b4:63:8c:7f:5e:1b:62:c1:17:69:
a3:74:57:6d:30:60:0a:ad:d5:b2:dd:c6:2d:ab:69:69:db:8b:
17:b0:25:e9:57:aa:1f:07:1d:a7:6c:2a:e1:6f:6b:c7:00:17:
ea:ea:da:1a:8c:ed:2e:cf:f2:22:60:39:0a:ff:69:77:d5:c2:
cb:5b:ef:92:88:61:5b:fe:f9:b8:68:5e:f3:03:0e:a0:42:79:
7f:f2:e5:ad:d4:96:d2:34:53:de:11:7a:d8:e6:93:95:ee:84:
60:f5:46:43:28:14:9d:78:04:25:14:73:6d:1b:3a:c0:11:2e:
c7:8c:13:d1:94:02:9d:8e:53:02:83:91:d8:0d:60:6d:fc:4a:
40:54:c0:75:b5:dc:fb:21:37:23:9c:66:f5:55:62:80:67:62:
67:5a:2e:e4:9a:94:8e:08:58:7d:b4:62:1a:1a:33:de:ea:f8:
7b:b6:8d:80:76:f2:40:13:a7:b0:c8:67:d9:f3:49:93:99:41:
ba:a3:a5:d7:60:b2:66:b9:77:cd:ab:3f:79:32:85:d9:85:5d:
e0:b6:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:18:51 2024 by rpki-client on console-fra.rpki-client.org