Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/luixh66HXVZrqWNYKfATyCLBX7M.roa
File: luixh66HXVZrqWNYKfATyCLBX7M.roa (raw, json)
Hash identifier: 7BAUkmn7bFOsNpAHk+CLAyokqLpdsA64kxSRTk6lV2M=
Subject key identifier: 96:E8:B1:87:AE:87:5D:56:6B:A9:63:58:29:F0:13:C8:22:C1:5F:B3
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018CC64B683F8E59AD8327F48F65AD3A64F9
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/luixh66HXVZrqWNYKfATyCLBX7M.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133199
IP address blocks: 45.136.13.0/24 maxlen: 24
45.136.12.0/24 maxlen: 24
45.144.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:68:3f:8e:59:ad:83:27:f4:8f:65:ad:3a:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96e8b187ae875d566ba9635829f013c822c15fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:05:28:2a:a0:71:f6:e3:04:73:6e:70:e5:
e1:83:76:d5:3d:0c:60:7a:c7:1f:5d:fc:16:0e:72:
90:8c:18:93:0b:6a:e5:ba:3e:34:3d:f3:65:d1:eb:
51:a0:a6:47:0d:69:dd:e3:61:51:41:9e:c8:8f:df:
05:25:09:cf:b9:52:31:49:3e:46:5a:ea:d0:f6:2d:
84:73:26:9d:89:c5:08:db:44:8a:ae:6d:25:d0:bc:
fc:db:3a:2d:2a:e7:53:51:a9:48:a6:7c:ec:c5:19:
cf:d7:66:9f:6b:a8:9d:31:c1:5c:ba:c5:2c:b7:51:
f9:05:a9:35:44:60:af:bd:a4:55:06:f5:55:6f:e7:
16:96:10:3e:74:d0:96:a9:b9:b9:08:8a:64:fb:ce:
29:36:88:f8:59:28:cd:ae:73:fa:f3:52:49:76:0e:
48:1e:79:58:22:94:67:3d:17:39:c1:5f:3e:ec:6f:
74:ba:94:a4:b7:0b:7b:bd:e4:0e:6e:9e:26:05:f0:
06:da:10:e7:ba:86:73:bc:b6:ac:ea:9d:18:e1:f3:
66:c9:51:f9:39:87:f8:9d:52:d2:4d:d7:ae:58:93:
ea:62:3b:fe:31:41:1e:b0:19:39:d8:31:48:bf:b4:
2d:d0:f8:16:d3:d1:05:ab:4c:50:3c:67:51:f4:4b:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:B1:87:AE:87:5D:56:6B:A9:63:58:29:F0:13:C8:22:C1:5F:B3
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/luixh66HXVZrqWNYKfATyCLBX7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.12.0/23
45.144.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0e:4d:d7:72:1d:12:20:2b:90:53:45:b5:2f:60:54:81:1a:
cd:20:ef:44:b9:64:1c:b4:73:ad:a5:e8:1c:6f:3b:4c:82:14:
7b:10:03:24:60:21:14:1b:20:24:34:23:48:4d:24:62:7f:90:
2e:9b:e1:55:9b:73:9e:e0:e0:be:8e:cc:c8:ae:0d:25:7c:15:
d4:57:11:9f:5e:8c:81:9b:7a:e7:28:cc:18:3c:49:66:cc:92:
0e:7f:d6:f9:ef:8b:99:a2:cb:e6:ad:63:e8:5e:9f:a8:f1:b9:
ec:cf:75:41:11:65:d0:60:c1:f0:bc:4b:b6:66:cd:b5:68:c1:
62:d2:96:f0:e1:f8:2b:0d:a3:eb:42:d9:ec:80:73:10:f4:6b:
06:39:9b:08:16:e7:c2:34:75:f7:9c:89:ed:2a:6a:94:da:4a:
0e:cd:65:b0:2c:c7:1c:c0:7f:97:08:11:15:c2:be:a2:88:e8:
66:95:9e:8b:9d:6c:07:b4:cb:61:3f:ab:ef:a0:87:95:fe:05:
d3:d3:1b:ce:74:35:06:bf:2c:c0:86:72:47:f9:c8:6f:ec:89:
6e:aa:e1:f3:e0:a3:89:c2:35:14:8c:40:e8:77:7a:c1:99:be:
c5:22:3c:d7:26:c8:eb:c6:a3:bc:a9:91:ce:48:be:90:7c:ec:
8e:ec:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 18:43:28 2024 by rpki-client on console-fra.rpki-client.org