Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Lr2AKX7to-SgcJuLQmGNLPC0SNI.roa
File: Lr2AKX7to-SgcJuLQmGNLPC0SNI.roa (raw, json)
Hash identifier: 2dGx0sCPsWuE7TxFvVavmU1lmEL48bOO5+6Kop0UwsY=
Subject key identifier: 2E:BD:80:29:7E:ED:A3:E4:A0:70:9B:8B:42:61:8D:2C:F0:B4:48:D2
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0191A0AA55FDFB1DC31B67426D12AB699791
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Lr2AKX7to-SgcJuLQmGNLPC0SNI.roa
Signing time: Fri 30 Aug 2024 00:23:23 +0000
ROA not before: Fri 30 Aug 2024 00:23:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 212.116.228.0/22 maxlen: 24
212.116.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a0:aa:55:fd:fb:1d:c3:1b:67:42:6d:12:ab:69:97:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 30 00:23:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ebd80297eeda3e4a0709b8b42618d2cf0b448d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:41:cf:78:3b:d0:de:fd:02:a8:79:72:3d:
bc:4e:f8:ba:cd:5a:41:da:df:96:1c:24:79:65:63:
29:d2:ae:1a:b5:fb:61:79:89:e4:06:4a:a1:7d:b3:
8b:e1:87:4f:b3:84:55:a2:71:b7:30:27:79:2f:97:
c9:7a:e5:91:3d:ff:cc:ff:41:c5:bd:86:6d:29:37:
f0:7b:b6:5d:a7:c5:4e:46:6b:31:f8:e4:3a:88:4d:
70:93:23:c6:b2:ad:1d:f4:0b:13:4a:6e:3e:70:80:
0c:68:e7:8f:6b:79:29:94:fd:2a:8b:5c:d8:5f:2a:
c0:6e:7f:dc:d5:fb:26:6f:89:15:80:5d:98:70:98:
82:8a:00:6d:e9:03:88:0e:64:78:c5:e9:c9:f3:a8:
80:8d:50:c8:64:a3:b8:80:7e:cf:9a:60:c9:a6:dd:
8a:c4:45:4b:6f:e7:77:e4:d3:d4:5b:48:9b:fb:fb:
26:8c:fe:f4:46:39:28:b0:af:2e:9e:27:9f:76:55:
8d:a4:a8:d8:4c:38:9c:c5:93:96:c0:c1:e7:f6:c5:
1d:16:18:f0:0d:98:53:28:d2:fa:df:f2:fc:b5:2f:
cd:13:82:fd:b2:c3:75:09:89:f5:9b:9c:13:1d:bd:
ab:0b:39:84:04:20:09:b7:40:e2:2f:0b:a1:da:6c:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:80:29:7E:ED:A3:E4:A0:70:9B:8B:42:61:8D:2C:F0:B4:48:D2
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Lr2AKX7to-SgcJuLQmGNLPC0SNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/22
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:2c:5e:20:51:99:c7:85:c9:31:47:a2:ff:c1:cc:3d:0d:20:
76:da:21:f6:12:46:fa:66:94:11:bd:a1:ed:a5:9a:f5:c5:ed:
db:fc:2d:5f:59:88:82:ca:38:98:b7:d2:37:03:a8:9e:58:0d:
25:9d:2d:6f:bc:29:09:6a:eb:2f:1e:99:5a:84:f7:59:2f:e1:
02:32:0c:c3:fb:77:ac:10:75:14:4c:0c:64:95:57:c3:f9:12:
b5:f6:3b:d9:b4:20:6f:01:51:70:3c:10:f5:c3:0f:66:1e:ab:
11:fd:7b:30:66:c5:f7:06:0b:7e:0b:28:9b:16:53:44:e6:be:
a1:6e:d0:51:39:ac:9e:d5:fd:d4:8e:91:a9:ba:2e:f2:54:44:
3c:d4:b7:68:f7:0e:a6:9e:37:3c:a6:ce:ce:47:20:e1:bc:c3:
4a:f1:3b:de:41:a4:4e:60:9f:ff:8f:ff:12:06:40:b8:b4:6d:
c0:5e:e9:f1:9d:8c:bd:72:79:0c:37:4f:b5:b9:95:50:36:80:
1e:47:eb:67:8f:e1:2a:90:00:d4:2a:93:98:43:ef:b0:0c:f7:
b7:5b:47:ea:82:54:7a:d8:fc:5b:75:d2:ab:7d:21:30:7b:5d:
ef:a9:87:49:5f:bb:ab:f1:fb:02:30:db:f1:bf:a3:ae:df:fd:
09:98:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:25 2024 by rpki-client on console-fra.rpki-client.org