Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/LW1_XJId_IeE3ynRKIztZErRSOw.roa
File: LW1_XJId_IeE3ynRKIztZErRSOw.roa (raw, json)
Hash identifier: u+fi42iSRUfUhYYN0upPbPgTHH9si2NqoS2cbXwe62E=
Subject key identifier: 2D:6D:7F:5C:92:1D:FC:87:84:DF:29:D1:28:8C:ED:64:4A:D1:48:EC
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 018CC26D28B466F8A438666B1D3C5E442A0D
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/LW1_XJId_IeE3ynRKIztZErRSOw.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8364
IP address blocks: 195.216.96.0/19 maxlen: 19
212.126.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:b4:66:f8:a4:38:66:6b:1d:3c:5e:44:2a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d6d7f5c921dfc8784df29d1288ced644ad148ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:33:ac:1d:92:37:39:ff:35:d8:de:f9:84:
6f:3e:24:c9:67:fa:e7:8f:51:9f:88:cf:c6:b1:27:
62:2e:21:82:56:8d:cb:57:a1:39:cb:4c:4c:78:07:
0e:6d:8b:b9:c5:f7:8c:db:ed:7b:b6:6e:f0:17:99:
0e:cd:b2:aa:17:69:ae:7c:b3:dc:09:44:ae:13:ea:
1d:44:16:4c:9e:9e:7c:f0:5f:6d:4f:21:3c:d4:cb:
81:7b:ff:e9:15:68:09:b5:4d:ef:09:7a:ee:e6:df:
23:15:fa:13:ac:ce:db:ad:30:bd:0f:00:42:96:b1:
8c:98:54:a7:0a:2c:9e:46:40:02:98:95:1e:be:54:
d1:7b:d4:ee:1c:d9:5c:7e:97:9f:8a:f2:4f:1f:a4:
03:b6:27:26:3e:3f:82:e2:a8:07:21:a5:07:f8:3f:
da:7f:1f:c4:8e:29:65:5f:31:91:8d:60:f2:8e:99:
40:30:8b:7f:c5:4a:a6:01:9f:80:6b:51:fb:fb:5e:
71:9e:9c:70:f9:61:28:92:2a:46:11:27:b2:1c:8e:
27:e9:0e:8b:79:0f:54:11:1d:a0:29:b5:c8:c1:fd:
eb:b3:c7:73:ef:e8:d8:58:91:70:d6:15:07:67:74:
33:a8:ce:38:9a:03:99:e3:9b:a7:d8:59:da:33:87:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:7F:5C:92:1D:FC:87:84:DF:29:D1:28:8C:ED:64:4A:D1:48:EC
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/LW1_XJId_IeE3ynRKIztZErRSOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.96.0/19
212.126.0.0/19
Signature Algorithm: sha256WithRSAEncryption
17:f8:7d:b9:f7:3e:3c:16:11:4b:c7:a7:2f:33:f8:08:eb:83:
c8:11:7a:f3:32:5a:42:b9:cf:fe:da:17:da:48:06:67:19:3f:
83:49:49:b7:57:b2:dc:bc:d6:5a:5f:de:4d:67:57:57:c5:be:
26:9c:2d:21:16:81:78:0c:c9:67:85:0c:bf:a9:84:f2:c6:c4:
25:bf:ba:2c:94:8e:e9:40:28:ea:3b:f2:1d:fd:8f:58:f5:23:
1d:76:ce:37:64:4d:3e:b5:83:74:69:b3:34:69:e9:3f:18:8a:
be:78:a7:c1:4c:54:00:af:be:bf:4a:31:7c:f3:ce:b3:13:2c:
76:5c:7b:6f:d3:68:be:c6:80:9a:b9:ff:7f:9e:a4:1e:b3:17:
36:d9:e2:41:97:6c:ed:86:5a:ab:9f:1d:19:c4:95:56:f4:4b:
34:61:42:94:53:6c:ac:6e:6d:5a:60:5c:62:2f:8a:db:73:5a:
ac:06:85:77:da:37:0c:ec:2c:db:37:e7:60:dc:ef:a1:78:cc:
c1:9c:06:29:dd:1b:16:89:10:f0:06:66:4c:1c:fc:63:61:18:
f9:dd:e8:cf:08:5c:41:e6:a0:da:63:80:dd:ef:7d:ad:8d:8e:
e4:2a:db:4e:ae:ba:83:61:22:7a:c1:7d:90:2c:85:d7:1c:65:
45:db:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:49:54 2024 by rpki-client on console-fra.rpki-client.org