Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/LJJDeG2ZCstsbK9WYMF-Td9iVB0.roa
File: LJJDeG2ZCstsbK9WYMF-Td9iVB0.roa (raw, json)
Hash identifier: /4cgx1rYwEvBarmgTnx+k00EFrX73U9g74j9BUl5NKk=
Subject key identifier: 2C:92:43:78:6D:99:0A:CB:6C:6C:AF:56:60:C1:7E:4D:DF:62:54:1D
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 018CC5DC540EB26EC4EA7819F6A3CD26CB51
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/LJJDeG2ZCstsbK9WYMF-Td9iVB0.roa
Signing time: Mon 01 Jan 2024 16:30:00 +0000
ROA not before: Mon 01 Jan 2024 16:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39077
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:54:0e:b2:6e:c4:ea:78:19:f6:a3:cd:26:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jan 1 16:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c9243786d990acb6c6caf5660c17e4ddf62541d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:05:61:91:dd:99:97:7e:c9:9d:ff:c4:6c:
01:46:6b:c2:a2:c8:18:68:c5:69:32:10:1a:8e:32:
f2:c3:13:69:fa:2a:f4:fa:8c:d2:6a:da:6b:45:63:
9f:82:34:01:41:d4:20:14:ee:dc:2c:05:28:20:34:
7f:29:37:9a:35:f1:89:f6:8e:f8:26:a9:43:0c:f3:
4d:d7:f1:12:37:df:26:89:1f:84:ca:12:f1:99:ef:
49:29:f3:70:32:f1:f2:4a:4b:74:75:1b:36:2c:65:
87:30:1f:25:1e:19:b3:51:20:d0:2f:d1:30:7c:c4:
d5:e9:9b:a8:1d:37:dc:0e:40:a7:fe:52:1f:9a:69:
59:32:61:85:fe:80:de:8c:d7:ed:38:4c:9c:b8:a2:
b8:e6:7e:70:c0:dd:8c:fa:f3:e7:5c:af:f5:4e:ab:
6d:4f:66:e3:01:35:16:34:ee:db:da:29:ff:a2:d9:
8f:16:c8:39:24:4e:1d:8e:86:84:bd:39:12:4d:03:
c8:ca:9a:a5:13:bb:fe:01:7a:9c:55:71:55:8f:86:
d1:e8:cb:6b:7f:41:a7:b8:c3:e0:76:c7:d4:aa:2c:
15:a5:e8:ec:75:72:9b:50:34:b7:e3:76:e8:b1:72:
9b:d8:b8:ae:be:88:22:d0:2a:85:24:71:5a:ff:fe:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:92:43:78:6D:99:0A:CB:6C:6C:AF:56:60:C1:7E:4D:DF:62:54:1D
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/LJJDeG2ZCstsbK9WYMF-Td9iVB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:92:e2:41:18:ba:9e:16:be:12:d1:32:14:c2:38:a5:62:19:
a3:2f:54:87:ef:c7:71:91:b9:89:48:7e:09:c5:09:91:ce:b8:
b4:2e:7d:ab:92:36:5d:e1:84:05:58:4d:88:d5:1f:2f:9f:85:
1a:9d:8f:f9:0f:b2:15:f2:2b:ef:2a:cd:ba:9d:40:26:07:e6:
d4:8c:cf:62:a6:2c:19:ff:ff:cf:c5:c6:28:14:68:b0:e6:66:
fd:6e:d4:a0:05:f7:ea:b1:f5:a6:9f:48:f4:f6:eb:10:e8:21:
8c:f8:e3:f4:8b:98:9f:c0:1d:38:4a:0b:92:2f:71:2d:f6:c1:
c7:6e:06:03:a5:e0:a7:e1:8b:be:12:f4:12:00:d8:ed:77:f7:
bd:83:46:33:d1:47:80:79:42:0f:9d:60:65:21:c1:3d:34:92:
fe:9e:ea:50:5d:58:45:d7:2b:c8:c9:b7:b7:b7:7f:cc:ea:85:
1e:09:35:13:81:09:0d:36:a9:50:8e:06:03:d3:eb:ce:17:bc:
2f:22:c4:04:1a:ec:3a:e5:98:a1:21:41:da:d8:e3:9e:f0:ac:
9f:25:f9:dd:28:f9:7b:e3:92:ab:06:3b:7a:e3:56:08:20:a6:
09:a3:d6:7e:84:53:0b:c5:1f:3b:ba:da:5a:0c:eb:10:f0:35:
fa:a8:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:07:52 2024 by rpki-client on console-ams.rpki-client.org