Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/LzEBxQgT3Hde97dRT7q1VY4LK7E.roa
File: LzEBxQgT3Hde97dRT7q1VY4LK7E.roa (raw, json)
Hash identifier: UvOQ6I6z7umJ3uytGcZbI12LAmZOxV6v+qzf2rTlR9o=
Subject key identifier: 2F:31:01:C5:08:13:DC:77:5E:F7:B7:51:4F:BA:B5:55:8E:0B:2B:B1
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 0191F06C48B80DF9A92E023D35A2CCE8E252
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/LzEBxQgT3Hde97dRT7q1VY4LK7E.roa
Signing time: Sat 14 Sep 2024 12:05:13 +0000
ROA not before: Sat 14 Sep 2024 12:05:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209173
IP address blocks: 2.56.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f0:6c:48:b8:0d:f9:a9:2e:02:3d:35:a2:cc:e8:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Sep 14 12:05:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f3101c50813dc775ef7b7514fbab5558e0b2bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:ac:15:4a:d4:1a:c5:52:77:76:40:b3:d6:
d5:02:66:c1:c7:fe:d0:9c:68:31:f6:34:58:f5:16:
24:73:19:c4:7a:4b:c4:26:72:31:13:e9:34:7d:87:
98:87:98:6b:1d:99:74:9f:aa:51:74:56:1c:e6:73:
f9:fe:61:2d:d7:76:48:83:fc:3a:3f:75:53:8a:f8:
05:ab:04:65:6a:19:4b:25:a0:50:c7:52:c9:1c:d9:
64:d7:e3:77:89:5f:91:ac:15:af:73:9f:1e:1e:ea:
4d:77:b4:43:c8:10:58:77:87:dc:f0:41:73:10:d1:
1e:72:a0:3f:2e:78:06:a9:c5:2c:4b:43:4b:1a:b8:
9a:75:99:9b:dc:cb:ca:eb:e5:3e:34:21:a2:d5:22:
c4:a5:35:29:ad:4c:2f:96:74:18:50:8d:08:0c:d3:
8b:ca:3f:8b:f6:e5:a5:33:2d:78:85:e0:5e:5c:ac:
a6:ac:20:5c:37:4c:6c:0b:b6:48:e3:c5:8c:fc:6c:
d2:a5:6e:ab:ed:0d:0c:f1:5c:d3:83:24:d5:de:0d:
46:4b:6b:81:12:05:9e:56:13:b0:26:7d:13:b0:14:
91:dd:4e:bc:9f:8d:96:62:1c:b0:7b:16:92:c5:07:
48:0e:4c:6a:59:23:ec:0e:79:49:f0:e3:4f:6b:31:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:31:01:C5:08:13:DC:77:5E:F7:B7:51:4F:BA:B5:55:8E:0B:2B:B1
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/LzEBxQgT3Hde97dRT7q1VY4LK7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.36.0/23
Signature Algorithm: sha256WithRSAEncryption
80:34:11:f5:52:f5:1c:b8:a5:82:14:d8:4d:72:80:89:48:12:
ce:05:4c:1b:93:e0:d7:ba:e3:f3:dd:c1:df:24:ba:fc:93:93:
00:d8:4e:a8:bf:dd:bc:f1:65:fe:2a:9c:7d:ba:25:91:07:00:
40:57:7b:a2:fa:44:19:f1:99:0d:02:a0:c8:be:c9:2e:b6:da:
00:70:d6:fb:3c:26:f5:07:c5:a1:30:88:b4:70:7c:77:60:06:
c2:0d:93:c5:99:33:ec:6a:11:79:0e:26:e3:d9:4c:16:97:8b:
07:c1:49:c8:8f:f3:03:b6:80:77:c6:ef:94:7b:31:9c:d0:d7:
e8:ba:b1:58:81:03:50:17:b7:83:8a:e0:c9:02:d8:63:9a:f1:
d5:38:ec:01:14:88:c0:ae:27:94:95:ed:a3:e0:ae:ab:77:0b:
c4:3a:68:ba:14:e3:19:09:89:73:ba:dc:a9:07:ad:4f:9e:27:
41:c5:b5:78:ff:c1:b8:23:0c:91:c4:59:1c:6d:2a:55:a9:4a:
3b:eb:b2:b7:d8:84:95:f6:c3:9b:92:01:67:b0:84:a5:30:fa:
09:47:eb:07:0b:ae:c7:1f:48:34:d1:13:2b:bb:fc:93:f2:53:
04:02:24:e9:9f:45:ae:56:1e:7a:22:4f:bd:f3:9c:01:40:ad:
14:f9:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 04:44:29 2024 by rpki-client on console-fra.rpki-client.org