Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/LRZy-Bdq8bLC0tQJxOY7NNj1SGY.roa
File: LRZy-Bdq8bLC0tQJxOY7NNj1SGY.roa (raw, json)
Hash identifier: Nhyth2voi7jQOBD8mJLfMJTk6ARSfjTdwSwatxp6ThI=
Subject key identifier: 2D:16:72:F8:17:6A:F1:B2:C2:D2:D4:09:C4:E6:3B:34:D8:F5:48:66
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0190B5D1A787C1B6FC1497AC3019E4E33C2A
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/LRZy-Bdq8bLC0tQJxOY7NNj1SGY.roa
Signing time: Mon 15 Jul 2024 09:55:34 +0000
ROA not before: Mon 15 Jul 2024 09:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.248.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:d1:a7:87:c1:b6:fc:14:97:ac:30:19:e4:e3:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jul 15 09:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d1672f8176af1b2c2d2d409c4e63b34d8f54866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:f7:76:f9:06:ae:50:e0:d0:ae:f0:19:c2:
f0:4d:b5:e6:15:b7:60:c6:01:7d:46:1c:26:25:51:
fa:31:31:05:ba:af:ef:a1:3c:41:1a:5c:67:26:04:
c2:5b:d3:f8:5b:de:57:ee:eb:70:d8:f9:35:73:aa:
a8:af:16:32:31:6f:8c:56:55:52:65:02:ec:61:e4:
dc:92:5b:12:0d:7e:09:0c:2a:8f:5e:4e:bf:33:3e:
5c:c0:38:fd:82:81:36:a5:ec:32:c8:9a:4f:9e:50:
63:ff:84:47:c8:e5:f4:96:24:74:a6:56:c5:7e:5d:
df:0f:c1:3c:5f:98:e4:72:4c:df:1e:d4:69:d5:3a:
be:3d:7a:31:68:40:c7:08:5d:50:7b:e4:e2:b9:02:
56:4d:ce:7f:3f:74:92:ae:dc:14:83:75:46:64:c8:
8f:ed:c9:24:e6:e0:b9:52:13:37:e9:02:76:37:de:
9d:c1:98:05:49:76:c2:59:f3:9d:da:c8:12:54:e5:
93:05:08:34:b5:43:dc:17:69:fc:6b:5a:dc:e4:c2:
8a:3c:6d:71:c5:8f:b4:39:ed:9d:b1:48:b4:56:7c:
e1:f0:31:27:5b:6a:80:c4:32:9d:fd:63:40:2e:53:
43:a1:fc:77:ed:bc:21:0a:fa:c8:4b:08:c6:94:03:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:72:F8:17:6A:F1:B2:C2:D2:D4:09:C4:E6:3B:34:D8:F5:48:66
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/LRZy-Bdq8bLC0tQJxOY7NNj1SGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.71.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c8:2c:92:9b:b3:ab:90:fb:a8:10:35:c2:7c:8a:a3:e8:0a:
16:37:ec:e8:e5:27:5a:3d:04:15:b2:ea:11:a3:66:7b:16:bb:
9e:56:ee:68:80:97:e4:b3:45:79:20:99:0f:ea:f0:f4:3d:5d:
22:89:4a:88:18:bf:f5:98:39:3f:b1:29:e2:2d:52:88:a1:f6:
a4:e5:e1:6f:60:b1:cc:67:2b:73:5d:7b:c8:17:ea:c1:06:a1:
d3:5b:52:d7:7a:be:32:d7:e1:d6:a4:75:67:18:16:1d:55:d4:
e3:63:2b:0b:83:62:ce:6d:cf:6b:3b:da:80:d1:ec:ba:ef:6b:
5a:e2:e6:ea:6a:5c:14:9c:86:ef:e5:fd:80:a6:7e:df:7d:31:
fb:ad:03:f6:55:7e:6b:ef:df:37:a4:f0:c2:7f:f1:cb:af:b0:
39:6c:86:ac:e7:86:22:1b:45:35:bc:16:76:5f:99:9c:a5:c6:
78:05:97:0d:5a:e0:2b:5d:04:bb:03:6f:af:c7:64:a1:4a:fb:
65:76:c0:c0:d3:2d:b1:64:d0:8d:fd:52:d5:f0:cb:fe:c2:35:
ce:2c:f0:e8:87:91:40:93:e2:e1:dc:1a:49:d4:87:fd:22:d2:
fa:38:b7:25:17:5b:b2:ab:fd:e1:f1:0e:ef:91:5f:f0:20:8a:
f9:96:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:55 2024 by rpki-client on console-ams.rpki-client.org