Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LnumxW7bNIDorSoYIIyfLPuz0GI.roa
File: LnumxW7bNIDorSoYIIyfLPuz0GI.roa (raw, json)
Hash identifier: SYv7+inM5kR8mplwWFeNgYuZQ11pqgT6ci/bJbBqx7k=
Subject key identifier: 2E:7B:A6:C5:6E:DB:34:80:E8:AD:2A:18:20:8C:9F:2C:FB:B3:D0:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D7814FA65C9F5643D187F2C0542E44D2D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LnumxW7bNIDorSoYIIyfLPuz0GI.roa
Signing time: Mon 05 Feb 2024 07:04:16 +0000
ROA not before: Mon 05 Feb 2024 07:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205175
IP address blocks: 31.13.212.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
2a00:1728:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:14:fa:65:c9:f5:64:3d:18:7f:2c:05:42:e4:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 5 07:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e7ba6c56edb3480e8ad2a18208c9f2cfbb3d062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:2f:c3:97:a4:34:3d:46:1f:53:e4:13:53:
e8:ff:0f:e6:ba:59:63:59:0c:38:b2:93:7a:7b:82:
73:c3:f7:2e:33:7d:6d:17:70:3a:b4:12:81:22:b0:
6b:35:4f:bd:ed:ec:9e:bc:c8:f7:8c:b7:55:b6:de:
80:5d:59:eb:03:21:17:c8:10:1c:2b:90:54:6d:1e:
3b:0b:6a:e3:17:c5:78:d3:4e:b0:13:e7:22:43:6f:
26:50:c5:69:0f:05:1e:72:00:11:8d:0f:1c:56:c6:
40:db:47:6b:33:fb:7d:69:02:81:11:b1:01:b2:bd:
c6:c6:f5:c1:16:d7:e0:00:c3:cc:19:2c:9f:12:d4:
d4:24:29:db:c9:31:24:62:fb:11:d0:4c:10:b5:3d:
2f:d0:1d:f2:28:50:17:d8:0c:bb:63:04:77:a6:47:
fb:11:be:07:b2:e0:46:17:a1:65:d4:ab:3f:75:6e:
7e:01:d0:4a:71:b0:3c:e3:28:95:d5:04:f5:b7:69:
cb:c0:6e:c2:1c:4f:49:09:d0:39:e3:39:01:99:17:
0b:f8:eb:53:55:d2:e1:a7:76:5d:6b:3b:a3:f2:29:
6a:44:e1:21:df:e5:e0:e5:03:06:03:61:cc:bc:35:
8b:b3:0d:db:b2:1e:a6:16:5f:00:b2:51:28:d0:1c:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:A6:C5:6E:DB:34:80:E8:AD:2A:18:20:8C:9F:2C:FB:B3:D0:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LnumxW7bNIDorSoYIIyfLPuz0GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.212.0/24
87.121.220.0/24
IPv6:
2a00:1728:31::/48
Signature Algorithm: sha256WithRSAEncryption
8f:72:f4:7c:da:42:79:6c:18:a5:e1:a3:49:fe:1b:fd:ef:37:
f5:d0:a2:a1:01:77:f7:5e:a1:da:97:ec:97:eb:d1:d6:7c:e3:
0d:ea:a3:68:15:2e:b6:c6:60:5d:fe:e9:98:24:f1:24:cc:ff:
49:59:97:80:6f:29:d4:3d:53:f1:3d:75:c8:8f:72:41:66:6e:
16:f8:d9:9a:72:17:d2:86:4a:26:1f:fc:d1:35:63:c5:7c:b0:
8f:8e:15:d1:31:59:3e:ee:41:88:63:c3:0c:74:36:68:9a:5a:
02:d6:37:6c:08:5e:be:5b:de:c3:61:d4:90:1e:1c:7f:fd:e8:
0d:aa:ae:7a:88:f4:2b:2a:0e:0b:dd:cd:0d:ef:4d:dc:78:ed:
87:f6:60:a8:93:27:ec:a7:5d:e3:b3:57:8b:8f:39:f3:62:d1:
fd:5b:14:ec:1a:48:99:56:01:80:c5:9f:6b:ee:02:34:dc:31:
31:64:4d:f4:a7:69:7a:6a:dd:8c:cd:d0:84:78:59:61:f9:84:
0e:a3:64:e4:26:2c:a8:c5:38:55:e1:4f:9c:7e:24:43:2c:0e:
4c:68:0a:e9:b4:08:70:16:f4:d4:ba:dc:8c:74:b1:eb:ba:8a:
81:f7:6d:73:06:df:84:d8:a3:46:a2:27:8b:e7:b4:03:d2:95:
95:6b:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org