Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/LKjItZIMIopU3JKC4REbUBFVT00.roa
File: LKjItZIMIopU3JKC4REbUBFVT00.roa (raw, json)
Hash identifier: QoxqEBeyQeyDmfI1mTOD8sPrJPmL4Lo3KH0jOAZyzwU=
Subject key identifier: 2C:A8:C8:B5:92:0C:22:8A:54:DC:92:82:E1:11:1B:50:11:55:4F:4D
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 01929AE1D1ACE665A59BADEB0C5D1EEEED57
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/LKjItZIMIopU3JKC4REbUBFVT00.roa
Signing time: Thu 17 Oct 2024 14:29:03 +0000
ROA not before: Thu 17 Oct 2024 14:29:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12552
IP address blocks: 80.252.160.0/19 maxlen: 19
93.189.240.0/21 maxlen: 21
94.136.64.0/19 maxlen: 19
94.136.71.0/24 maxlen: 24
185.165.80.0/22 maxlen: 22
2a01:6d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:e1:d1:ac:e6:65:a5:9b:ad:eb:0c:5d:1e:ee:ed:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Oct 17 14:29:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ca8c8b5920c228a54dc9282e1111b5011554f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:f6:30:d7:19:fa:01:25:16:c7:c3:bb:93:
95:c4:80:ad:bf:c0:ba:2f:b6:dd:40:97:cc:ce:59:
12:6b:32:fb:36:8f:d5:7b:bc:85:a1:f7:2a:15:8d:
19:d5:f3:60:79:4d:71:28:d0:67:9e:b7:db:b5:8c:
1c:c1:d9:b4:48:fd:92:79:ed:37:4e:35:3b:bb:9c:
9b:36:93:14:3a:c4:e4:27:af:06:d9:11:c8:82:bd:
c7:27:a8:b3:bb:46:8c:1d:f3:46:f7:96:58:ef:e3:
94:d2:aa:99:b9:09:6f:75:20:d9:4e:27:74:25:0a:
5c:33:de:34:40:08:eb:c4:58:8a:86:1c:a2:4b:e2:
56:4e:30:3d:c7:61:9e:29:6f:e8:64:30:23:ee:43:
7d:84:ac:fe:a0:c5:fa:93:58:e8:fe:e0:54:59:73:
2c:3e:c6:ec:5e:26:b3:3a:31:a6:3c:c4:7d:56:3e:
82:3c:47:a5:2d:a2:32:b1:60:83:77:5b:af:e8:eb:
ac:21:59:81:44:c0:bd:38:2e:a1:b1:fe:da:48:36:
57:81:9f:28:69:27:01:87:41:9f:79:b1:88:7e:38:
58:48:e5:41:1b:b7:37:89:d1:6a:f5:45:76:3c:99:
88:d6:6b:b9:f2:5f:cc:f2:f4:d7:0e:36:72:f9:1a:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:C8:B5:92:0C:22:8A:54:DC:92:82:E1:11:1B:50:11:55:4F:4D
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/LKjItZIMIopU3JKC4REbUBFVT00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.160.0/19
93.189.240.0/21
94.136.64.0/19
185.165.80.0/22
IPv6:
2a01:6d0::/32
Signature Algorithm: sha256WithRSAEncryption
46:30:7a:af:54:fe:46:8f:7b:93:d5:31:4c:e2:85:dc:01:a4:
fd:26:1a:08:97:cf:d7:e2:7d:e3:58:0d:0b:4e:e5:28:8a:8f:
35:90:8f:54:27:46:55:40:95:a1:24:f5:36:e2:97:b6:14:3f:
7c:af:9c:7b:33:52:56:97:17:b1:b6:e2:57:8b:7a:55:6d:ad:
6d:4a:e8:89:5f:9d:87:b2:c2:9d:a6:f9:12:01:bd:16:aa:47:
fc:16:f3:64:3b:0c:1e:0c:4f:9e:7c:a5:6a:d2:4e:7f:48:25:
99:6e:6e:f8:1f:a6:a4:f5:09:6c:0b:5f:53:dc:c2:d2:b9:07:
80:5d:cb:6e:15:25:fc:40:a3:7a:34:d1:25:1e:85:81:de:1f:
00:e6:65:9e:0d:81:91:a7:44:36:74:2b:f2:46:c5:86:9d:83:
2c:75:65:44:cb:1b:0e:2d:ad:38:c8:e7:1d:57:fc:c4:7c:1b:
b9:c5:46:c7:a8:8d:e3:39:3a:04:f3:68:7d:a6:68:62:3b:1c:
50:4a:ff:23:d1:26:7e:b6:45:31:ce:a9:8d:de:df:82:24:ea:
7a:19:30:f6:ce:36:a7:84:24:16:1a:eb:2a:db:59:70:1c:63:
fa:04:bc:41:3c:53:78:cf:83:0c:5e:2e:2e:13:08:9d:f2:6d:
80:2b:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:39 2024 by rpki-client on console-ams.rpki-client.org