Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Lx3dl21GBHYwzjFSTPLHnR73xQU.roa
File: Lx3dl21GBHYwzjFSTPLHnR73xQU.roa (raw, json)
Hash identifier: 2EKa141IfyLuIuyQGuT2rZSMerDcb0jOUeudYH1RSAM=
Subject key identifier: 2F:1D:DD:97:6D:46:04:76:30:CE:31:52:4C:F2:C7:9D:1E:F7:C5:05
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019136434887CD4D5886B3448A0D29616A6D
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Lx3dl21GBHYwzjFSTPLHnR73xQU.roa
Signing time: Fri 09 Aug 2024 08:31:04 +0000
ROA not before: Fri 09 Aug 2024 08:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 91.92.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:43:48:87:cd:4d:58:86:b3:44:8a:0d:29:61:6a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 9 08:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f1ddd976d46047630ce31524cf2c79d1ef7c505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:c1:e8:1f:9b:10:86:fa:81:8e:a9:fa:b1:
46:6b:2d:1d:0a:fc:09:9b:e5:59:e3:20:83:69:f7:
fb:df:5f:25:08:48:d7:c2:40:a4:aa:80:bf:df:01:
f5:8b:0d:98:b5:5c:95:e2:20:92:2e:1d:43:cc:da:
34:20:74:a2:84:83:b6:33:38:18:07:7b:73:a6:10:
82:2d:8e:51:df:36:bd:d5:0e:c4:76:11:23:c0:8c:
05:36:b5:a3:ca:79:57:74:9d:4f:49:6d:bd:db:71:
1a:d6:11:ca:78:d2:36:24:3c:32:2f:d0:5c:d4:30:
27:64:ce:4a:41:db:12:a2:78:41:ad:ec:ba:f2:e4:
c0:b6:70:bf:6e:5e:10:4f:82:8a:36:dd:47:3b:e0:
05:c3:62:b4:04:0f:af:71:5b:f4:63:7e:3b:3b:7b:
91:ea:5e:3f:86:41:f2:b5:69:91:d2:7b:51:2e:9c:
a6:d2:06:1c:13:1f:48:ca:09:a5:86:25:ee:6b:ac:
68:8a:8b:a7:95:de:09:a9:c6:f1:81:61:a8:54:46:
8d:c8:3e:b8:a2:18:b9:d0:aa:1e:22:8d:cb:fd:87:
a5:20:97:f5:80:bc:26:60:c0:79:75:7d:79:15:e3:
64:d9:b1:51:ae:4c:4d:1b:73:c1:4a:db:98:df:d9:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:DD:97:6D:46:04:76:30:CE:31:52:4C:F2:C7:9D:1E:F7:C5:05
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Lx3dl21GBHYwzjFSTPLHnR73xQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.41.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fa:2b:60:cb:66:43:ca:6a:ec:b1:52:83:54:99:e2:7f:5c:
6c:f1:8a:be:5e:35:d9:e6:76:29:d3:b0:25:52:e7:f0:fa:d4:
3c:0c:e6:21:61:57:d6:2a:aa:85:b7:b9:e4:22:9e:8d:3d:c2:
ef:05:af:0a:03:81:01:0a:7c:e2:37:81:74:eb:95:27:01:ff:
04:fd:8e:7a:28:99:91:52:92:97:69:08:f1:e9:61:84:c5:77:
9f:68:11:95:4d:53:60:c6:f5:16:a6:53:f3:ce:d3:c6:75:7d:
c2:6e:36:4c:e4:0a:81:c2:cc:7a:8c:c3:a3:ab:ee:4c:16:fe:
d5:ba:a5:98:35:89:be:85:7e:1c:c6:40:44:7a:01:6f:8e:8e:
e9:46:86:c6:89:2d:0a:eb:c2:79:1c:b3:f1:41:8f:e1:b4:a1:
2e:98:c3:0a:e7:32:65:75:e2:25:a7:77:83:2a:65:f3:36:45:
70:1c:35:49:6a:2e:5a:1b:60:e7:23:6c:09:f8:f0:3e:d2:17:
93:cf:17:ef:23:24:24:a7:e3:7f:bc:fb:c4:b5:5c:70:a3:4e:
69:0d:e6:6f:ec:0a:f0:95:d8:f3:1a:3f:49:d0:9a:81:17:32:
f2:2a:9a:fb:de:f1:85:96:45:64:9f:ee:4e:4c:0d:85:76:49:
7e:6e:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:09:30 2024 by rpki-client on console-ams.rpki-client.org