Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/llS158VdlyHZXXeSo7RlSzVfdfs.roa
File: llS158VdlyHZXXeSo7RlSzVfdfs.roa (raw, json)
Hash identifier: g2BLDk0KQunvtL8zt+eiXJgWnnJ7PEW/yD0ES4Jl8oE=
Subject key identifier: 96:54:B5:E7:C5:5D:97:21:D9:5D:77:92:A3:B4:65:4B:35:5F:75:FB
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01900696A549324ADD569774D46B22E57BA9
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/llS158VdlyHZXXeSo7RlSzVfdfs.roa
Signing time: Tue 11 Jun 2024 09:17:34 +0000
ROA not before: Tue 11 Jun 2024 09:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 91.239.209.0/24 maxlen: 24
159.255.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:96:a5:49:32:4a:dd:56:97:74:d4:6b:22:e5:7b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Jun 11 09:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9654b5e7c55d9721d95d7792a3b4654b355f75fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:de:77:9c:77:b5:83:49:80:e3:02:e2:1e:
f8:ee:bb:a4:7c:a2:3a:5d:e2:1c:be:01:f9:b5:15:
6f:54:a6:9d:0e:17:4b:c2:2c:8c:d2:be:7f:e7:a7:
65:c3:82:5c:3a:77:ac:65:65:da:a3:9c:ad:20:bd:
65:86:20:94:a1:4a:76:68:c0:e0:68:b9:16:99:23:
07:25:9e:e7:1f:5b:c0:92:b1:9f:90:35:18:cd:5f:
c7:b7:77:85:fc:fb:8f:9d:1d:85:4f:cd:93:fd:90:
89:5b:84:ba:f2:24:fd:85:8f:84:ec:29:20:b8:5e:
e2:da:1b:aa:8c:fe:e8:70:14:ba:17:49:b6:06:69:
9f:80:ea:fd:c6:a3:73:76:9a:2f:1e:cd:4d:04:ff:
42:fb:14:d1:ca:c3:3a:23:06:06:b6:1b:c9:8c:53:
d8:5e:43:4c:6d:09:a4:65:de:15:5a:4e:a5:a8:9a:
92:a4:0c:b6:24:a6:9b:74:57:5d:ca:0a:23:a4:41:
4c:ed:27:7f:81:c7:88:db:3f:36:88:c0:29:2a:37:
2b:89:7c:eb:7b:a4:c2:91:e3:3a:f2:92:50:df:ed:
51:d5:fe:03:3f:ca:72:10:fe:91:be:97:73:05:a1:
1d:7e:2d:b3:66:aa:b4:45:35:35:1b:9e:b4:d0:af:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:B5:E7:C5:5D:97:21:D9:5D:77:92:A3:B4:65:4B:35:5F:75:FB
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/llS158VdlyHZXXeSo7RlSzVfdfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.209.0/24
159.255.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9e:71:4a:ad:88:99:c3:69:7f:54:ba:33:c9:8b:e9:f2:c2:
71:cb:3c:0e:57:98:08:a6:3a:32:aa:a3:97:5b:a7:56:bf:65:
d2:5b:0c:64:75:f4:25:bd:c5:66:b5:9b:9c:ca:ea:87:99:b9:
8c:4e:77:4e:d0:11:1d:04:25:a3:de:0f:04:d8:c8:a3:51:90:
98:52:fc:ec:03:d1:ff:70:66:d2:95:82:2c:01:be:90:75:9d:
4e:4b:e5:e8:51:cd:18:c2:28:b2:fd:ed:ba:41:31:08:95:14:
0a:67:63:44:dd:42:78:45:bc:3e:0c:ea:1b:f6:73:f3:29:71:
f8:10:2a:86:44:cf:e0:9c:8f:98:bf:59:21:fb:49:c6:0f:0a:
11:dc:47:24:98:9d:2d:91:7c:cd:a4:87:08:98:81:d8:fb:a7:
19:48:17:a9:00:71:a8:d8:e5:07:23:ed:01:ca:e2:79:e1:be:
f6:a5:ad:99:19:03:7f:f5:07:38:90:f4:6b:28:8e:4c:da:4c:
8c:58:ee:62:e9:e1:cf:42:97:14:7a:c0:b9:75:72:40:a9:0b:
8b:67:a9:0b:a1:0b:22:d3:6a:fa:eb:f1:03:a5:fa:9b:03:b2:
7b:21:d6:bc:fe:52:9e:ad:cf:fd:24:0b:24:95:1b:08:79:85:
8c:33:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:18:46 2024 by rpki-client on console-ams.rpki-client.org