Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/LnaUXpf8QFrJDWP40EkEvsTzxGY.roa
File: LnaUXpf8QFrJDWP40EkEvsTzxGY.roa (raw, json)
Hash identifier: IqwNy5Xs7G1wSfXMKgE8Cncxrc4wi5DDGgkK8qrvAhY=
Subject key identifier: 2E:76:94:5E:97:FC:40:5A:C9:0D:63:F8:D0:49:04:BE:C4:F3:C4:66
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 018CC8DF78888233FB219040C1E09A25543D
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/LnaUXpf8QFrJDWP40EkEvsTzxGY.roa
Signing time: Tue 02 Jan 2024 06:32:17 +0000
ROA not before: Tue 02 Jan 2024 06:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49198
IP address blocks: 185.47.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:78:88:82:33:fb:21:90:40:c1:e0:9a:25:54:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 2 06:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e76945e97fc405ac90d63f8d04904bec4f3c466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:21:33:51:b8:c8:20:12:9b:5c:e3:4f:d6:
cc:57:3f:51:2b:b9:ef:4d:e6:38:c7:15:c9:dc:c2:
cf:59:54:d2:de:5d:c6:7d:99:1e:c8:0e:9f:ef:b1:
84:a2:62:86:21:3f:66:8c:21:73:8c:7c:f4:55:12:
44:36:ff:82:7b:a1:2a:bb:10:b1:4b:0c:83:87:46:
70:ba:a6:bc:88:49:df:f1:28:2e:a8:4e:4c:f8:c9:
c4:08:f8:75:38:c0:bf:cd:83:48:fd:48:2e:c8:e3:
cf:d0:aa:4d:84:c4:17:ef:a2:54:5e:fb:06:53:1f:
26:79:06:d3:9e:a7:29:bb:be:85:73:7e:70:1a:57:
0d:16:2d:7a:37:58:ec:b9:f0:5c:77:fc:c4:6a:f4:
09:61:20:e9:c1:cf:bf:48:9a:fe:4c:8e:35:4d:8f:
e9:4f:5b:35:9f:58:5d:73:b6:00:27:6d:aa:da:36:
1c:ea:27:42:b1:ee:79:44:ad:23:f1:12:44:ba:6e:
fe:3d:cd:a1:45:c1:1f:18:94:e2:f8:ab:21:e5:89:
ca:24:85:95:48:6f:82:c0:47:3d:40:d5:58:b1:89:
0c:61:ff:97:bf:a0:00:1f:7b:d8:21:e5:54:b3:3f:
7c:ca:6d:40:7d:f7:7c:eb:d8:8e:4e:bc:0b:9b:82:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:76:94:5E:97:FC:40:5A:C9:0D:63:F8:D0:49:04:BE:C4:F3:C4:66
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/LnaUXpf8QFrJDWP40EkEvsTzxGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:eb:04:b6:ec:a9:6e:3b:87:57:e6:54:69:5f:54:e9:02:24:
aa:61:9b:e6:64:29:68:62:e5:c7:68:2f:1c:ac:c1:ab:2e:1c:
26:e1:de:a7:b2:0a:8e:4b:8b:e0:31:6a:ac:a9:09:46:4c:71:
fd:03:b0:1d:31:14:40:78:7a:54:16:ac:9e:e8:10:03:63:23:
70:34:ca:6d:a6:8a:56:22:ff:7b:98:e2:1c:05:d4:0c:55:40:
7d:cb:80:92:82:6c:61:dc:6b:c5:4c:4b:37:fb:58:8d:c3:6a:
30:57:ba:a4:ec:bc:1a:83:fe:86:c2:3b:ed:d1:87:66:f5:9b:
d0:99:6a:01:09:d7:ab:bf:05:08:09:be:c5:1c:b4:dd:34:2c:
ba:40:39:22:8f:3e:97:45:e0:75:c4:6e:19:92:1e:ac:cf:1c:
c8:19:de:d9:cf:cb:38:8e:21:b8:86:4e:e9:bf:8c:e8:b0:a1:
71:2c:9f:84:f4:d7:85:26:2a:bb:25:ac:eb:0c:4f:96:f3:bf:
ee:54:a2:63:07:f3:bb:7e:1c:50:be:36:27:2d:4f:14:40:7b:
35:9c:ce:cb:ba:9a:49:a4:5e:48:82:89:24:89:6a:72:75:35:
fa:b6:be:df:c9:f6:e4:e5:2f:b7:f5:9f:ed:3c:b6:dc:bb:85:
fe:c1:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:48 2024 by rpki-client on console-fra.rpki-client.org