Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/lodfWc2Raw1LCzlM3UVedKqMcC4.roa
File: lodfWc2Raw1LCzlM3UVedKqMcC4.roa (raw, json)
Hash identifier: aXanT3IWF15jjBH1dFOb+C+HgeLRyamo1gSlJhCAD20=
Subject key identifier: 96:87:5F:59:CD:91:6B:0D:4B:0B:39:4C:DD:45:5E:74:AA:8C:70:2E
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 018CC6B77E07A7571A59D75C8A516C770B80
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/lodfWc2Raw1LCzlM3UVedKqMcC4.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49490
IP address blocks: 213.217.8.0/24 maxlen: 24
2a12:d980::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7e:07:a7:57:1a:59:d7:5c:8a:51:6c:77:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96875f59cd916b0d4b0b394cdd455e74aa8c702e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:f9:4e:4e:d9:3b:54:15:e0:e3:29:98:39:
54:bd:fd:4e:cf:87:d1:10:cb:95:e3:14:01:28:91:
2c:6f:35:54:e4:d4:10:0e:3c:ad:3a:49:d0:0c:4f:
a6:30:be:ac:70:71:df:54:fe:16:91:5d:7b:b5:3d:
a3:04:4a:99:00:da:eb:25:27:9a:1b:8c:43:cd:54:
4b:21:dd:f9:bd:c6:cd:f1:7c:70:8d:4b:c5:6e:c8:
7a:f0:8f:8c:3c:45:30:7d:e7:d4:0d:07:60:41:5a:
74:c1:37:09:37:93:3f:53:dc:19:f5:5c:58:8a:6a:
37:ae:83:0b:11:75:c3:f2:41:ec:1e:0c:0e:20:e8:
a2:be:db:f8:2f:ac:b9:23:2c:91:79:c6:ff:33:17:
9f:c5:58:ba:8c:0b:3c:d5:91:b6:50:48:b0:29:a4:
b1:f7:75:10:9b:7c:8f:62:ed:e6:53:f1:6e:25:83:
4b:54:26:e2:a3:18:00:49:28:9c:60:ee:8c:09:d2:
9a:af:7a:06:6f:25:29:a5:b5:b8:07:9a:d8:ca:bc:
18:4b:98:79:1e:9b:be:15:b6:92:5f:1a:ba:50:fe:
91:ee:87:67:8d:4e:b9:45:9d:d4:01:6c:5c:21:85:
9b:ed:a5:8f:cc:4b:5e:ae:6f:85:fe:02:ac:4b:e3:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:5F:59:CD:91:6B:0D:4B:0B:39:4C:DD:45:5E:74:AA:8C:70:2E
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/lodfWc2Raw1LCzlM3UVedKqMcC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.8.0/24
IPv6:
2a12:d980::/32
Signature Algorithm: sha256WithRSAEncryption
67:00:34:9b:17:f2:66:19:b9:c9:18:0c:ba:59:34:9b:b7:7e:
ca:ac:d8:c0:19:dd:3f:c8:28:47:f4:4f:6e:fe:9c:b4:a8:37:
73:2f:b1:e2:a3:bf:c1:c8:b1:90:a4:79:ec:5d:31:d7:76:8d:
f0:43:0e:bc:dd:c1:4d:52:df:24:7c:7e:3f:77:99:b7:a1:f4:
27:49:48:69:67:da:16:ec:5c:a9:1d:1f:31:24:23:ed:90:fe:
c6:e6:91:6b:a6:d1:92:47:2e:7c:08:97:c0:82:e4:e4:d9:85:
37:c5:c3:ce:5a:fc:10:06:06:74:85:58:ed:05:0c:75:89:a3:
80:a1:cf:92:23:d9:4f:20:04:44:0f:cf:0d:d9:ec:16:88:df:
cd:ab:8f:9d:25:bd:3c:90:4f:93:71:b3:dc:dd:d5:e4:88:bc:
5d:5b:66:b0:e1:1f:bc:d6:9e:1c:66:f9:6d:cb:53:60:82:9a:
0f:d5:98:0e:98:b5:a9:7d:8b:c8:4d:e2:c3:ed:97:23:3d:cd:
b4:61:a5:78:10:cc:a2:fa:94:ec:cb:94:cd:8f:3a:04:53:be:
dd:d3:f9:13:0d:77:9e:00:8a:b2:5e:b4:31:00:fb:18:67:a9:
2e:54:aa:f7:24:85:94:7b:3a:d5:12:f0:96:18:02:e9:1b:d9:
9d:91:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:15:25 2024 by rpki-client on console-ams.rpki-client.org