Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa
File: LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa (raw, json)
Hash identifier: jPdydiL9q0309jErsqqWbCZshkEVYb11PbKJpexeehY=
Subject key identifier: 2C:03:BF:67:D9:C6:9D:17:44:36:67:FC:0E:BD:0B:EE:D8:86:F4:95
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018F00FA84FDCAC05521FBC7535A6459EC01
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa
Signing time: Sun 21 Apr 2024 14:06:08 +0000
ROA not before: Sun 21 Apr 2024 14:06:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212516
IP address blocks: 2a0d:b287:ec30::/46 maxlen: 46
2a0d:b287:ec40::/48 maxlen: 48
2a0d:b287:ec41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:00:fa:84:fd:ca:c0:55:21:fb:c7:53:5a:64:59:ec:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Apr 21 14:06:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c03bf67d9c69d17443667fc0ebd0beed886f495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:6e:df:aa:5d:34:b5:09:ad:96:e5:1f:23:
5c:e9:89:25:ac:8d:13:2d:e1:d9:a5:57:fd:92:93:
b7:17:44:c6:80:86:de:a6:1d:47:0c:41:51:18:fd:
f0:c3:61:92:ee:9a:d8:46:03:09:f2:23:89:30:83:
af:cf:e2:8b:a1:9c:de:28:2f:e1:b4:9e:4d:5e:9b:
a3:3d:72:fe:d5:77:64:9a:f4:04:6f:f8:b5:9a:d2:
bb:9e:0a:1f:7a:31:5c:89:9e:dc:9e:ed:99:6a:05:
ec:2c:bf:e8:4d:cc:2f:69:67:25:b1:a4:0e:7c:46:
7f:96:75:9d:c7:5d:1b:27:9c:64:19:41:9f:29:32:
a7:25:99:67:8c:8f:2f:65:37:c6:74:0c:ab:40:73:
e7:a5:ea:73:3a:03:ef:81:19:43:38:42:3e:b1:ac:
44:f9:5b:79:c6:6f:ff:3a:a8:0d:75:d6:9d:58:07:
f5:89:91:44:c8:ed:13:47:2a:e7:b9:e6:72:ff:0f:
d0:83:87:6c:d2:43:a1:10:5f:54:9a:45:58:6f:6f:
2c:42:5b:0a:aa:5b:99:6e:b8:ff:e8:4b:39:c8:6c:
59:6a:20:e4:16:84:8b:d9:5c:58:c8:0c:4f:73:ea:
93:9e:20:b5:43:f9:0a:61:75:e8:61:96:85:82:d7:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:BF:67:D9:C6:9D:17:44:36:67:FC:0E:BD:0B:EE:D8:86:F4:95
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/LAO_Z9nGnRdENmf8Dr0L7tiG9JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec30::/46
2a0d:b287:ec40::/47
Signature Algorithm: sha256WithRSAEncryption
5b:65:a4:76:95:a2:36:13:9c:2a:86:05:ff:ee:3b:ce:1d:66:
8b:91:04:f0:7b:9f:49:45:14:c6:da:eb:44:60:d7:f6:c2:12:
f4:45:e3:9e:08:08:11:43:73:98:48:6d:e6:cc:e8:db:42:bb:
6d:16:09:8f:a1:7f:3c:62:81:fe:6b:56:da:73:10:eb:76:8f:
1f:d9:58:36:91:c3:a1:e4:33:59:c9:c4:00:de:47:2d:84:f5:
c2:cc:71:f9:cc:b5:21:51:ac:06:a7:6f:46:26:3f:88:9c:e4:
8d:a5:3b:37:ff:88:e5:68:90:f9:db:1f:2d:26:88:1d:97:3a:
dd:46:cd:9f:53:1d:a4:d8:a7:78:56:35:67:5e:b0:d4:d4:7f:
53:3b:b2:c0:9f:39:fd:8d:5e:14:04:3c:3d:2d:58:b9:aa:e5:
7f:1f:f9:86:6e:50:fb:4b:00:e5:c5:2c:8d:40:0e:02:2d:59:
01:fa:05:13:04:e4:8d:62:e1:d5:f7:ff:01:d5:3c:f0:78:8d:
93:26:62:e0:15:05:06:32:fd:a2:61:ad:3a:3a:4e:58:80:53:
9d:2d:2e:ec:da:a5:42:e6:b1:2a:b6:32:b7:ad:20:63:3c:b7:
a4:ce:16:53:78:ea:b7:6c:52:d2:09:21:8b:cb:5d:f3:a6:79:
9e:dc:17:e9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY8A+oT9ysBVIfvHU1pkWewBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2IzMGZkN2Q2ZTQ0OTQ5M2VjN2NiMGQ5Zjc4NjAwNDU4
YmUyMWIwHhcNMjQwNDIxMTQwNjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzAzYmY2N2Q5YzY5ZDE3NDQzNjY3ZmMwZWJkMGJlZWQ4ODZmNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMNu36pdNLUJrZblHyNc6YklrI0T
LeHZpVf9kpO3F0TGgIbeph1HDEFRGP3ww2GS7prYRgMJ8iOJMIOvz+KLoZzeKC/h
tJ5NXpujPXL+1XdkmvQEb/i1mtK7ngofejFciZ7cnu2ZagXsLL/oTcwvaWclsaQO
fEZ/lnWdx10bJ5xkGUGfKTKnJZlnjI8vZTfGdAyrQHPnpepzOgPvgRlDOEI+saxE
+Vt5xm//OqgNddadWAf1iZFEyO0TRyrnueZy/w/Qg4ds0kOhEF9UmkVYb28sQlsK
qluZbrj/6Es5yGxZaiDkFoSL2VxYyAxPc+qTniC1Q/kKYXXoYZaFgtctSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCwDv2fZxp0XRDZn/A69C+7YhvSVMB8GA1UdIwQY
MBaAFC/LMP19bkSUk+x8sNn3hgBFi+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhzd19YMXVSSlNUN0h5dzJmZUdBRVdMNGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOTEwYmYtZTQ5Yi00Y2RjLWJlNzkt
NGRkNGRjMzM5MWFjLzEvTEFPX1o5bkduUmRFTm1mOERyMEw3dGlHOUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOTEwYmYtZTQ5Yi00Y2RjLWJlNzktNGRkNGRjMzM5MWFj
LzEvTDhzd19YMXVSSlNUN0h5dzJmZUdBRVdMNGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCKg2yh+ww
AwcBKg2yh+xAMA0GCSqGSIb3DQEBCwUAA4IBAQBbZaR2laI2E5wqhgX/7jvOHWaL
kQTwe59JRRTG2utEYNf2whL0ReOeCAgRQ3OYSG3mzOjbQrttFgmPoX88YoH+a1ba
cxDrdo8f2Vg2kcOh5DNZycQA3kcthPXCzHH5zLUhUawGp29GJj+InOSNpTs3/4jl
aJD52x8tJogdlzrdRs2fUx2k2Kd4VjVnXrDU1H9TO7LAnzn9jV4UBDw9LVi5quV/
H/mGblD7SwDlxSyNQA4CLVkB+gUTBOSNYuHV9/8B1TzweI2TJmLgFQUGMv2iYa06
Ok5YgFOdLS7s2qVC5rEqtjK3rSBjPLekzhZTeOq3bFLSCSGLy13zpnme3Bfp
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:11:23 2024 by rpki-client on console-ams.rpki-client.org