Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/LLK4AyJL2H_c_N3IP2svFcalPis.roa
File: LLK4AyJL2H_c_N3IP2svFcalPis.roa (raw, json)
Hash identifier: CSrGPza/XmvdisBVNvgfs0/jbD8JQo54spYVoZnTCOc=
Subject key identifier: 2C:B2:B8:03:22:4B:D8:7F:DC:FC:DD:C8:3F:6B:2F:15:C6:A5:3E:2B
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 0191742980D8295E54710C280501B3F95C5E
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/LLK4AyJL2H_c_N3IP2svFcalPis.roa
Signing time: Wed 21 Aug 2024 08:59:22 +0000
ROA not before: Wed 21 Aug 2024 08:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 2a0e:ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:29:80:d8:29:5e:54:71:0c:28:05:01:b3:f9:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Aug 21 08:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cb2b803224bd87fdcfcddc83f6b2f15c6a53e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:fe:89:52:80:5a:70:2c:a1:35:b0:8f:dd:
ba:b4:7a:56:4c:04:d9:b8:00:ca:1b:0a:a7:45:de:
12:f0:8a:16:96:73:f5:8a:15:72:87:82:00:e6:e7:
bf:ec:4d:3a:9d:a2:b8:c0:39:40:da:45:cb:cc:08:
5a:94:74:ee:75:2e:c7:93:b7:4b:ea:ce:2b:ae:29:
17:d4:01:2a:cc:de:37:c1:70:20:8f:99:0b:9f:16:
87:bf:27:8b:9c:ee:b5:bf:39:52:68:e0:bb:4e:b1:
4b:d1:55:ce:2e:76:e1:95:83:6f:ac:a8:2d:c1:b3:
7e:54:d7:a3:0d:7b:91:a4:fd:a9:d2:81:e8:ee:f1:
6a:4a:e8:aa:04:8d:ff:bd:84:bb:7f:16:48:2e:ed:
9f:38:e8:f1:0b:c0:f6:4f:38:63:84:75:26:1b:eb:
bb:6a:41:01:02:49:21:c7:eb:64:62:d0:2a:87:69:
f3:20:80:4e:79:68:ce:24:51:1e:a6:b9:2e:69:ce:
f0:69:84:f9:2d:78:07:08:8d:54:41:0e:3f:d7:55:
fa:fb:7b:4d:16:17:1b:32:fe:b3:bb:bc:95:ee:83:
f9:b2:41:73:69:f5:42:12:cd:38:09:f2:11:cb:27:
22:90:e3:87:e5:c8:83:41:6d:e7:87:73:18:a7:c7:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:B8:03:22:4B:D8:7F:DC:FC:DD:C8:3F:6B:2F:15:C6:A5:3E:2B
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/LLK4AyJL2H_c_N3IP2svFcalPis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
75:a0:f7:95:0b:a3:e4:7e:70:1a:4f:e5:06:75:ad:6f:ed:ae:
40:bd:5a:35:d5:58:20:10:65:e3:ad:fb:16:37:ce:2d:63:aa:
6c:da:08:6b:41:15:1b:ec:08:01:8b:34:56:9c:a6:bb:0a:c9:
7d:be:11:8f:5b:e4:97:bd:22:42:32:24:f3:1c:d4:a0:94:3c:
5c:a7:dd:63:f5:11:77:f8:6c:67:53:67:1b:b7:ea:12:53:d5:
d0:4a:90:81:7c:ba:79:b9:4d:50:a5:8a:e0:4a:0a:42:f4:d4:
cd:e3:0e:db:83:84:13:c2:a3:bc:fd:80:39:6d:b7:4a:d9:48:
b9:d3:49:7f:8e:a1:95:f1:81:18:38:db:a0:6d:30:83:b0:01:
cf:9d:0e:bf:ad:f9:82:4f:65:51:d9:d3:c6:20:68:90:9e:bf:
fb:bf:42:11:96:e3:9a:3f:51:94:29:0d:f9:09:33:0a:33:e8:
25:0a:f0:01:9e:65:00:2b:33:a8:df:89:9b:70:d6:c0:56:36:
e1:1f:0d:72:e0:a9:6e:0d:00:38:df:de:0a:f6:94:3a:9f:71:
5f:7f:ba:80:ea:91:d5:84:b7:39:8b:92:21:5f:5d:f3:24:76:
24:a6:4a:1e:e6:25:c9:a8:29:60:c3:8b:89:d0:94:c9:85:d4:
b5:b7:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:34:53 2024 by rpki-client on console-fra.rpki-client.org