Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/LG0qOrAXUNNb7dkL8P_E_qQNqfY.roa
File: LG0qOrAXUNNb7dkL8P_E_qQNqfY.roa (raw, json)
Hash identifier: I7gLze99by7TjKGiRANIsYv2pLHj0NNI2tGs7zg4pug=
Subject key identifier: 2C:6D:2A:3A:B0:17:50:D3:5B:ED:D9:0B:F0:FF:C4:FE:A4:0D:A9:F6
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01932512D0007E31E9ABFA54122E48BCC1A0
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/LG0qOrAXUNNb7dkL8P_E_qQNqfY.roa
Signing time: Wed 13 Nov 2024 10:30:10 +0000
ROA not before: Wed 13 Nov 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401479
IP address blocks: 77.93.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:12:d0:00:7e:31:e9:ab:fa:54:12:2e:48:bc:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Nov 13 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c6d2a3ab01750d35bedd90bf0ffc4fea40da9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:45:5b:8b:70:e5:e7:81:f4:22:ab:ff:71:
d1:c2:94:e2:bc:c3:38:08:4f:60:31:80:04:c0:01:
44:ff:31:c7:4b:58:8f:5f:b3:7a:ea:63:2f:93:78:
a2:ae:8c:8a:29:84:4b:42:18:82:85:4c:c1:3d:b6:
04:70:ed:5f:6b:ca:c8:37:fa:80:83:35:83:b7:df:
a9:1b:6b:84:a9:4c:e4:95:75:42:5d:b8:5a:3e:b6:
27:bd:a9:0f:e3:43:21:34:75:b5:d2:44:90:7d:fd:
f5:45:fc:32:4b:a7:1a:a8:24:bb:50:3e:75:78:31:
57:c7:bc:cf:29:5b:60:9d:fa:cd:50:7e:34:21:a7:
40:a0:43:1d:22:d2:d1:a0:d6:61:87:41:18:a9:9c:
06:b9:ac:cf:62:cb:e5:e7:8f:29:d8:ac:25:0a:5d:
6b:90:54:ec:f0:6e:55:5a:af:d6:94:b7:95:ca:7f:
a3:e9:a7:04:93:af:c5:84:85:93:50:e8:88:1c:dc:
18:83:2f:e0:6a:08:f3:c5:96:4d:49:94:ad:62:58:
e5:f0:1b:8f:bc:81:5b:a2:57:43:c2:f4:0c:82:cd:
6e:13:e9:90:63:df:99:ff:c5:a5:8f:94:38:4f:31:
64:84:d3:9f:1d:f6:27:24:61:4f:09:35:05:d2:ea:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:2A:3A:B0:17:50:D3:5B:ED:D9:0B:F0:FF:C4:FE:A4:0D:A9:F6
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/LG0qOrAXUNNb7dkL8P_E_qQNqfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
95:80:5a:21:ac:5b:e8:3b:56:27:71:6b:3a:b2:88:cf:15:08:
e0:18:e7:4e:57:a2:3d:7b:98:4b:db:f0:74:c7:b9:b8:25:4c:
ab:04:59:c9:66:15:7b:c8:d3:99:6f:aa:76:fe:0e:1d:13:72:
5e:b4:de:51:c7:03:49:6b:fb:6c:61:cf:e3:e6:bb:3b:62:d3:
2c:06:65:86:20:68:19:73:f4:65:b0:8a:4b:c5:35:0f:17:f5:
53:28:f4:82:0d:f5:24:7c:78:7d:17:83:cf:2b:89:21:93:09:
25:2f:3a:b7:ff:c2:5d:79:c7:55:4a:be:25:d4:85:73:de:ed:
ef:ff:1a:b9:9b:1f:92:88:f9:19:1b:cb:57:09:53:5b:9b:87:
ac:ef:53:db:8c:63:c3:48:69:33:e5:3c:91:ab:8b:c0:dc:25:
aa:16:90:23:86:5c:6c:63:03:60:16:4a:af:71:c8:0c:6d:47:
89:45:2f:29:cc:59:f6:3f:db:75:9a:89:92:92:c6:b0:a8:d4:
69:5e:1a:64:4d:ec:16:fc:b5:1b:67:17:7a:cf:75:95:1c:8e:
c5:72:8d:44:06:5e:da:d0:ed:b2:4b:23:86:71:ba:f8:47:31:
81:77:25:49:33:1b:6d:2e:e6:1d:8e:1a:94:d2:a4:b1:70:0d:
3b:ff:8d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:26:54 2024 by rpki-client on console-fra.rpki-client.org