Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/LoRkGvz9LThHxXwKGQgVrtddnNI.roa
File: LoRkGvz9LThHxXwKGQgVrtddnNI.roa (raw, json)
Hash identifier: aRLUfmUbe5YJHf44SL53xD/ND2SQiFe3wbhIVvRcPw0=
Subject key identifier: 2E:84:64:1A:FC:FD:2D:38:47:C5:7C:0A:19:08:15:AE:D7:5D:9C:D2
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 018CC87150A63D29A3FCCB83E2E9090F9650
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/LoRkGvz9LThHxXwKGQgVrtddnNI.roa
Signing time: Tue 02 Jan 2024 04:31:58 +0000
ROA not before: Tue 02 Jan 2024 04:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14576
IP address blocks: 95.181.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:50:a6:3d:29:a3:fc:cb:83:e2:e9:09:0f:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 2 04:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e84641afcfd2d3847c57c0a190815aed75d9cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:58:18:db:44:bf:23:7b:b8:f2:53:a2:56:
39:f7:e8:88:23:1b:21:e4:43:e8:5d:00:5d:1a:89:
84:84:96:4f:3b:46:94:40:26:cc:42:f1:76:c9:20:
8a:d0:7d:36:2f:6f:e5:70:d0:80:f0:9e:05:41:fb:
28:fa:b6:f6:64:6e:d3:cf:0e:9c:e8:28:25:7c:8a:
04:d2:01:17:60:c3:22:31:1d:c1:65:34:5a:66:77:
90:c9:1a:ae:6e:a9:42:22:2b:e6:b3:92:77:34:ce:
06:19:19:26:b3:bd:b5:e5:a5:a0:07:35:88:fc:83:
81:0a:fc:a0:9f:a6:5e:e4:e1:87:cc:b0:57:bf:e9:
cf:39:6a:4a:21:37:d1:9c:3c:8b:bc:43:73:a9:8e:
38:8c:4a:6f:27:83:7d:6a:db:19:8a:49:29:69:ea:
81:8b:98:78:af:08:e1:59:50:6e:4c:83:5d:88:fe:
77:2d:a0:e7:0c:2d:e1:ee:4d:4c:ae:5a:b1:f4:0d:
50:3f:18:93:7d:a4:93:17:7c:d5:00:1b:ed:ce:67:
fa:f0:38:cd:03:60:0c:c3:ac:eb:b2:4e:84:07:62:
31:df:26:14:2f:ab:4b:85:5b:14:51:93:41:f6:56:
ae:3c:59:2a:99:de:52:d6:db:98:b6:b5:fd:c0:37:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:64:1A:FC:FD:2D:38:47:C5:7C:0A:19:08:15:AE:D7:5D:9C:D2
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/LoRkGvz9LThHxXwKGQgVrtddnNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.148.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5f:17:50:b4:7c:69:bb:b1:44:ac:7c:36:24:e4:5c:80:b3:
d3:77:47:41:1c:ca:29:39:40:e0:0a:55:44:32:6c:87:07:fa:
3e:31:c7:05:96:68:bd:c1:2d:b6:f8:1e:9c:ee:a1:6c:94:ba:
07:43:bc:ca:8e:6c:78:cc:6f:ed:4f:c5:dd:26:73:fd:67:e2:
e6:81:02:7a:09:62:c8:e3:99:4d:82:fa:b7:92:13:b8:90:5d:
59:92:61:b0:0f:dc:72:d2:4f:ec:20:2e:75:41:0d:32:42:87:
28:66:be:34:e8:f2:02:23:8c:03:5a:3c:57:d9:90:b8:3b:39:
a8:3e:05:6a:ac:a6:2c:29:e6:03:b9:9a:c0:5b:d9:f0:4f:9e:
33:96:70:15:5d:41:bc:ef:bb:57:8b:b2:ea:53:00:ea:ab:e3:
80:2b:f1:9b:9a:97:1d:23:52:b9:ac:87:db:39:a0:0c:6b:47:
d1:91:a3:a0:1d:17:44:3f:c2:8f:53:89:cd:09:bc:3b:90:eb:
f5:01:b7:69:28:8a:5f:7d:1d:c6:0f:76:22:c4:20:3a:bb:d9:
5a:84:19:54:07:5c:ad:95:39:67:e0:bd:ee:0a:74:98:3f:70:
92:a8:f9:82:a5:50:0e:a0:87:6d:cb:b9:ea:ab:2b:43:93:77:
20:f0:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:50:48 2024 by rpki-client on console-ams.rpki-client.org