Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/LCcSPKnkpZ7XWsZ_lBMa3DVg2Jk.roa
File: LCcSPKnkpZ7XWsZ_lBMa3DVg2Jk.roa (raw, json)
Hash identifier: vJf15B1v8Cv3ZpF7od4GOUP9sb87008LK7iJXH7LvNQ=
Subject key identifier: 2C:27:12:3C:A9:E4:A5:9E:D7:5A:C6:7F:94:13:1A:DC:35:60:D8:99
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01932CCB70F779F72947126E671A71B5B8F1
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/LCcSPKnkpZ7XWsZ_lBMa3DVg2Jk.roa
Signing time: Thu 14 Nov 2024 22:29:10 +0000
ROA not before: Thu 14 Nov 2024 22:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208821
IP address blocks: 193.22.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:cb:70:f7:79:f7:29:47:12:6e:67:1a:71:b5:b8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Nov 14 22:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c27123ca9e4a59ed75ac67f94131adc3560d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:c2:74:4d:b8:63:38:16:f7:4a:1f:b1:5a:
4e:b3:c1:ef:88:53:91:1d:8c:fe:28:41:78:49:51:
f9:ae:02:dd:92:fc:4a:fe:3e:22:8d:d9:b5:73:f8:
0e:ba:0d:ef:18:a2:6a:8a:c9:40:fc:0b:11:9a:36:
f3:21:39:46:96:30:5a:a3:58:dc:f0:8a:4c:de:55:
62:e6:94:59:65:f2:5e:00:5c:5e:51:36:cd:3e:27:
cd:8b:ff:44:2d:3c:d3:0f:8d:85:23:1f:73:db:7b:
b3:72:07:ac:fd:42:ce:e2:4f:2d:71:35:31:bc:e6:
f3:94:19:24:e2:ac:50:e8:49:8d:84:c1:80:b9:4b:
21:72:74:64:7c:bc:c6:5a:1d:f5:5f:f2:2c:80:df:
02:1d:2f:d9:98:90:e8:2d:e5:59:0b:57:82:c7:6d:
11:bd:ac:37:ae:4b:90:3e:25:50:df:05:5a:57:90:
dd:b6:16:b6:38:0c:82:27:ea:cd:30:41:50:e1:e8:
7a:9b:1b:fc:d5:9e:e4:60:2f:22:40:70:b4:08:6f:
d5:40:9a:2c:fb:56:6c:de:ad:1f:dc:06:69:c0:4b:
c2:1c:fd:a5:d7:65:16:60:cb:3c:f1:86:3a:4c:ca:
51:11:4e:e0:e2:73:90:40:5d:7f:b7:94:03:49:77:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:27:12:3C:A9:E4:A5:9E:D7:5A:C6:7F:94:13:1A:DC:35:60:D8:99
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/LCcSPKnkpZ7XWsZ_lBMa3DVg2Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
92:49:35:f2:4d:f2:76:28:0f:f5:b2:5e:87:25:d0:21:02:63:
18:18:fa:4a:d0:40:50:a7:77:db:10:d7:3e:59:e9:22:be:4e:
17:4b:db:89:f6:31:b9:25:54:90:c0:e5:1b:d0:5e:3b:3d:55:
6e:35:15:59:79:7f:7a:8e:91:14:3a:61:89:48:64:89:5d:23:
09:53:e8:ca:68:63:97:9c:67:9f:91:12:8f:01:e6:0f:81:15:
a9:b1:ea:d2:ae:bc:8b:7e:a0:88:6b:fc:82:14:7b:38:74:2c:
ca:0e:ea:9b:61:b6:ca:98:59:25:46:64:cd:0b:d2:30:c6:78:
d2:7e:cb:9b:c8:27:14:7e:1a:da:5e:ed:79:04:38:38:f7:bf:
f9:04:8c:64:6d:e5:7d:2d:40:10:6d:af:2d:81:f9:3e:2e:63:
33:77:47:aa:1f:bd:c2:31:4b:56:20:36:93:6b:7d:77:c6:67:
70:cc:8d:22:f5:ca:34:08:ae:1d:d4:1e:11:83:f1:54:f3:c1:
cb:92:dc:ec:a0:e5:89:63:0e:d2:05:5d:70:dc:0a:06:fe:e4:
4c:f1:1e:19:70:cf:b8:92:27:e0:4e:df:c2:6d:3a:6e:38:bb:
c9:ff:c7:6d:90:4c:b0:49:7e:5d:00:53:cd:19:d7:dc:95:e3:
f0:ed:ec:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:22 2024 by rpki-client on console-ams.rpki-client.org