Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/lzB8DGeWpbmlsnpgTBxA4nxCofg.roa
File: lzB8DGeWpbmlsnpgTBxA4nxCofg.roa (raw, json)
Hash identifier: pWFbGbSephuGDga9byIjErNswg5NuHKW8bgIsQPIO6Y=
Subject key identifier: 97:30:7C:0C:67:96:A5:B9:A5:B2:7A:60:4C:1C:40:E2:7C:42:A1:F8
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 018CEDDA5F917E2D59BCF54828BDA425FC8B
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/lzB8DGeWpbmlsnpgTBxA4nxCofg.roa
Signing time: Tue 09 Jan 2024 10:52:40 +0000
ROA not before: Tue 09 Jan 2024 10:52:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203011
IP address blocks: 80.75.209.0/24 maxlen: 24
193.28.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 19:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:da:5f:91:7e:2d:59:bc:f5:48:28:bd:a4:25:fc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Jan 9 10:52:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97307c0c6796a5b9a5b27a604c1c40e27c42a1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:1e:6b:9c:0b:2e:a4:c5:75:5e:68:d9:08:
1e:a7:87:d2:d6:75:fb:b5:1d:e1:47:a5:c5:88:da:
b5:ae:ee:84:1d:2c:7a:bd:6e:e5:82:f6:71:68:93:
4d:2b:da:5b:87:ca:c6:f5:e1:ec:8c:54:bb:23:bf:
fc:2f:75:ac:25:13:87:f1:c1:3b:bf:a3:fa:05:03:
1d:32:73:97:88:c2:f0:41:78:95:a6:1f:b1:62:dd:
c7:d4:a2:7e:bf:53:ec:e5:82:75:af:3b:af:e5:58:
ba:a8:70:af:fe:6a:5d:a7:a8:11:25:86:c5:a5:70:
8b:93:91:7d:19:6b:29:24:af:5a:33:14:7d:b2:12:
12:76:13:6a:e9:6c:5e:a9:8d:76:e0:c1:c8:f1:65:
9f:10:15:e1:c2:a7:80:68:6a:70:1f:f3:8b:eb:80:
8b:2d:c6:93:9e:ce:90:ef:f8:b3:0f:e5:81:4a:6e:
e9:c1:a7:83:84:c7:74:c1:7f:88:cb:82:60:b0:ba:
d5:59:d4:cc:2a:dc:25:aa:a6:34:64:9e:c7:8b:fb:
f6:2e:e0:1f:a9:9e:50:5b:73:3b:76:db:ad:9e:0e:
6e:a3:d2:50:8c:ae:3f:9b:fc:d9:7d:d4:3a:d8:b6:
25:75:9c:92:e8:e2:da:aa:cc:af:23:5c:7d:02:a6:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:7C:0C:67:96:A5:B9:A5:B2:7A:60:4C:1C:40:E2:7C:42:A1:F8
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/lzB8DGeWpbmlsnpgTBxA4nxCofg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.209.0/24
193.28.176.0/24
Signature Algorithm: sha256WithRSAEncryption
40:eb:8d:97:b9:e7:8b:59:1f:53:94:ae:ac:9e:94:fa:27:75:
70:89:b8:ad:70:38:a3:74:f3:3f:2f:46:d7:c0:76:e7:96:84:
5a:ca:52:76:ae:92:1e:7d:5f:82:1d:9d:a1:0b:a5:2a:56:e2:
3d:4a:8b:0a:2e:3d:54:e4:73:bc:b6:17:7c:eb:cd:f9:1f:30:
24:fe:0a:57:cf:df:69:84:3a:f1:0a:4c:34:e6:9c:ab:fb:54:
9d:31:61:e7:37:44:18:32:ba:f0:c7:cb:cd:d2:bd:52:ce:88:
78:8c:41:c7:9d:bf:93:45:cd:6e:c4:cc:a0:d4:1c:69:ac:20:
46:55:44:ec:d6:ac:23:09:13:69:f9:e2:45:c3:ff:7d:03:df:
ed:bb:f1:d2:bb:85:b8:d7:15:87:6d:a4:7f:51:e7:41:23:1a:
a2:c9:46:b8:04:33:fc:ac:79:52:fb:9d:3e:58:5a:f2:4f:7a:
ef:e7:38:45:2a:26:3f:0e:72:1b:02:22:52:7f:ce:b2:0f:63:
4f:36:a5:2b:d9:75:13:b4:d5:0c:a3:57:f6:65:c9:22:cd:7c:
23:48:82:87:c2:26:e4:e0:22:6c:8d:87:14:95:23:94:47:50:
e5:23:91:4c:ab:8b:4e:11:e8:a9:44:ce:67:59:30:2d:56:91:
1d:bf:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 23:39:08 2024 by rpki-client on console-fra.rpki-client.org