Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LB3NEG2QUI2geTngYasYpCZqU5w.roa
File: LB3NEG2QUI2geTngYasYpCZqU5w.roa (raw, json)
Hash identifier: tNUqLdhAACSoaEoIftUkBm8dhIBXlFJ+x9LS0uN7aiI=
Subject key identifier: 2C:1D:CD:10:6D:90:50:8D:A0:79:39:E0:61:AB:18:A4:26:6A:53:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD136F115324A9829CF3954A27E021
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LB3NEG2QUI2geTngYasYpCZqU5w.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 263065
IP address blocks: 87.120.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:13:6f:11:53:24:a9:82:9c:f3:95:4a:27:e0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c1dcd106d90508da07939e061ab18a4266a539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:34:08:83:38:e2:f4:c2:f3:cd:5c:3f:13:
70:32:f1:5f:21:6b:2d:52:20:c5:a6:8a:18:64:9e:
80:7f:c6:d3:a8:b9:cf:b0:66:7b:51:3c:8d:5f:3b:
84:d2:eb:b4:98:0e:80:9d:31:59:d4:eb:49:1a:b7:
8d:92:4a:64:43:a6:da:2a:e1:14:f9:40:7e:fa:a9:
0e:98:d8:77:c6:1b:9b:83:dd:3f:7e:b6:59:4e:63:
3c:d5:5c:9c:b5:46:cf:19:fb:79:7f:c6:c7:21:bb:
7f:94:fb:6e:af:5a:14:d6:3c:2f:56:03:48:78:da:
79:9e:4a:83:87:f6:01:1c:b0:ad:bc:f8:57:46:ff:
7c:83:0b:4f:84:86:27:9d:bf:00:5b:b3:9e:4c:9f:
b2:39:08:57:17:99:c0:c5:d6:63:f8:4b:11:04:f8:
1b:00:4f:22:6f:be:9a:fc:f3:7e:b6:a4:1b:43:8d:
8c:1f:fb:63:7c:5a:b8:c5:05:fb:a3:dd:5d:4a:97:
ee:b0:12:14:7d:29:78:a8:28:3c:dd:67:62:1d:78:
22:6e:99:9d:f5:3b:36:0d:8f:ac:0e:72:c6:02:83:
d8:ad:78:9f:a7:c1:43:ad:18:5a:38:d7:e9:90:82:
af:c3:a2:58:16:b9:d3:75:f2:23:cb:9f:86:79:a0:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:CD:10:6D:90:50:8D:A0:79:39:E0:61:AB:18:A4:26:6A:53:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LB3NEG2QUI2geTngYasYpCZqU5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.130.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d3:08:26:09:43:20:b5:de:fd:20:87:7d:47:30:f2:12:56:
17:1f:90:3d:d2:ea:bc:30:2e:51:9d:fd:e3:3a:b8:7b:e1:12:
e0:4b:2f:2e:6d:d0:32:9f:52:38:9a:da:92:f1:c9:47:44:90:
74:71:2b:ee:09:4e:19:d6:24:61:b1:7a:b7:09:0e:bc:3d:33:
30:23:ec:3e:83:75:d2:be:72:4f:1f:ac:53:20:df:94:c0:66:
9e:46:b1:c9:09:2e:23:a5:59:c2:90:66:63:69:c4:71:86:92:
e8:42:91:02:27:a6:34:18:8d:6e:15:24:77:e0:d7:32:2a:16:
b9:67:da:83:5f:fc:de:4b:09:65:7d:b4:1a:59:88:6f:30:b9:
1a:a3:ef:ea:8c:42:39:35:1b:65:9a:44:d7:9e:3e:fe:86:94:
d5:bb:2c:c0:b3:b1:69:59:43:9d:dd:4d:39:32:5f:e3:b3:fd:
4d:62:e3:ea:20:c5:c8:53:3e:5e:6a:f3:78:77:08:fb:92:33:
a9:74:a4:0c:75:fe:b3:4f:64:dc:0f:b3:f3:90:41:ae:38:fd:
b4:71:13:d9:0b:58:a9:d9:8f:9c:0e:1a:b8:d7:b9:3f:5f:cf:
89:3a:3c:67:29:8e:aa:20:c1:93:d2:ff:43:02:c6:89:b5:fb:
d5:ad:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:44:39 2024 by rpki-client on console-ams.rpki-client.org