Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/09VrMA67ijzyHU61ISrwxX49P08.roa
File: 09VrMA67ijzyHU61ISrwxX49P08.roa (raw, json)
Hash identifier: albBvRIKdbylA0rqeStRThSzB9lykX+hf9r0FgjnCac=
Subject key identifier: D3:D5:6B:30:0E:BB:8A:3C:F2:1D:4E:B5:21:2A:F0:C5:7E:3D:3F:4F
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 018CC7940B64A63B5F7F09F54C4E53B24ECE
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/09VrMA67ijzyHU61ISrwxX49P08.roa
Signing time: Tue 02 Jan 2024 00:30:17 +0000
ROA not before: Tue 02 Jan 2024 00:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57070
IP address blocks: 146.0.16.0/21 maxlen: 24
185.200.248.0/22 maxlen: 24
2a0a:bac0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0b:64:a6:3b:5f:7f:09:f5:4c:4e:53:b2:4e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3d56b300ebb8a3cf21d4eb5212af0c57e3d3f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:50:97:8f:aa:c3:fb:28:ad:55:65:98:55:
3a:df:bc:93:a1:8d:dc:14:89:e5:92:d2:81:28:f5:
be:87:81:88:80:c1:0b:9d:66:56:26:10:08:8d:67:
af:ab:02:96:37:ff:84:b7:63:69:a4:69:28:48:18:
5b:37:b0:a1:2f:30:14:5d:e9:54:0a:52:84:81:8d:
5a:c1:8d:73:3b:cc:17:5a:06:bb:d0:c0:b8:9b:3e:
d0:8a:0c:21:5b:34:9d:55:76:1e:ce:07:95:c9:4f:
3e:dc:85:91:70:05:d3:63:07:d8:ee:c2:cf:21:f5:
40:f6:46:4b:b2:74:ff:79:80:53:16:05:67:a4:01:
c0:cd:c8:c6:1d:b1:9d:02:99:49:b4:fe:21:ae:6d:
bc:78:d0:30:38:48:74:fa:7c:8d:94:70:af:29:f4:
fc:29:4b:bf:f3:cb:33:97:91:e6:c6:75:11:80:46:
ab:05:e6:15:44:fb:e1:41:00:18:32:d2:b1:85:f6:
d6:cd:f0:20:44:5c:ac:6d:25:95:2d:22:71:c4:74:
95:f7:1b:a7:f0:5f:c2:0a:bf:8d:37:85:a7:63:45:
66:a2:2b:fe:7d:40:24:e4:93:73:82:4e:ae:ed:3f:
ec:d1:fe:80:2d:6e:71:b9:32:63:99:c4:3d:64:46:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:6B:30:0E:BB:8A:3C:F2:1D:4E:B5:21:2A:F0:C5:7E:3D:3F:4F
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/09VrMA67ijzyHU61ISrwxX49P08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.16.0/21
185.200.248.0/22
IPv6:
2a0a:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
53:f0:32:fd:d7:c9:00:a4:f3:ad:c4:93:70:90:6f:8d:d4:58:
4b:a7:cc:60:0e:95:86:7f:d0:a0:73:9f:49:e4:c3:f9:fe:c0:
51:9f:37:49:c1:64:c7:69:c1:ab:fb:26:86:44:84:f8:e7:ac:
c7:b4:e1:30:72:29:e5:6b:f7:45:ad:56:54:f1:36:2d:ac:8b:
0d:dc:9e:11:c6:fb:7b:d3:a6:6d:45:7e:00:7b:4d:c4:e6:58:
de:b5:c9:a9:d7:94:24:a5:72:98:61:44:94:8a:3a:cc:3d:95:
6d:e3:4a:b4:f7:2c:3e:ce:96:16:80:f7:8a:3e:4e:c9:83:4a:
46:87:c2:b0:28:5b:81:25:18:9e:fa:48:67:ce:1d:1f:3e:6e:
8d:df:e9:4d:84:58:61:23:8e:03:a6:97:53:59:60:02:7b:f0:
55:f5:35:51:20:2e:3a:5f:17:17:e2:bd:fe:24:1d:67:a6:34:
11:f3:38:05:8d:15:4b:de:56:c5:c2:b1:31:9a:2c:35:b0:a4:
c2:d8:2d:83:bb:3c:73:d0:58:6e:c6:58:af:7f:0e:22:c1:e0:
57:9a:4b:16:ca:36:1b:f6:4b:e9:6d:6f:bd:d1:7e:e7:e9:9c:
52:0f:ce:4d:26:60:81:ed:7d:f9:41:5c:e6:e2:20:d0:e5:db:
8c:59:ce:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:22 2024 by rpki-client on console-fra.rpki-client.org