Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/lgEzm-kcUVVmPCY-AD8nO_qvUjk.roa
File: lgEzm-kcUVVmPCY-AD8nO_qvUjk.roa (raw, json)
Hash identifier: dCN9qOuTM06r1zDH8l/PonQAtODsmdFH9QRZiym6WuY=
Subject key identifier: 96:01:33:9B:E9:1C:51:55:66:3C:26:3E:00:3F:27:3B:FA:AF:52:39
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 018CC7934408C62CFF2A59A8CBE74A21575A
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/lgEzm-kcUVVmPCY-AD8nO_qvUjk.roa
Signing time: Tue 02 Jan 2024 00:29:26 +0000
ROA not before: Tue 02 Jan 2024 00:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8387
IP address blocks: 212.95.17.0/24 maxlen: 24
213.162.64.0/23 maxlen: 23
213.162.78.0/24 maxlen: 24
2001:678:5a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:44:08:c6:2c:ff:2a:59:a8:cb:e7:4a:21:57:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jan 2 00:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9601339be91c5155663c263e003f273bfaaf5239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:a1:17:fc:45:e9:ed:fc:af:9a:8b:03:e9:
5c:3c:0a:eb:0d:7d:bf:04:40:5c:1c:ad:dc:bd:d6:
ec:99:71:ed:c3:86:3f:95:d5:88:16:83:ec:6e:bc:
3c:a3:d9:d0:15:58:78:ee:38:c7:2f:ed:08:83:8d:
bb:18:cf:e0:39:1b:62:2e:78:06:83:fb:30:d0:02:
ef:7b:d2:db:c0:88:57:9f:ab:5a:2a:a6:c9:46:07:
db:00:c1:20:4f:34:06:a9:9b:ab:9c:b4:a1:11:f9:
cd:48:0e:86:33:27:4f:1b:5c:a6:7e:7e:22:ba:a2:
86:d7:79:a9:d6:79:e0:a1:f4:99:be:e5:ee:67:2d:
cd:df:0c:89:ab:3c:e0:bd:31:83:a4:82:d9:be:7c:
86:59:4e:10:d2:37:07:bb:64:3f:53:04:e1:84:1d:
c7:4d:10:0e:de:58:9e:a8:58:59:a9:5f:3f:e5:82:
48:e3:a3:39:0a:37:56:67:95:8f:28:e8:65:6c:46:
e2:d8:14:0d:77:2c:5a:03:49:65:8a:4e:39:59:62:
28:84:09:16:f5:38:4d:43:25:50:fe:dc:55:33:2c:
ff:f6:85:de:b8:46:0d:65:87:0f:1e:b9:8c:f5:50:
c4:f0:8b:fc:2b:a4:f5:cb:2a:76:48:c7:cd:73:97:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:33:9B:E9:1C:51:55:66:3C:26:3E:00:3F:27:3B:FA:AF:52:39
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/lgEzm-kcUVVmPCY-AD8nO_qvUjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.95.17.0/24
213.162.64.0/23
213.162.78.0/24
IPv6:
2001:678:5a8::/48
Signature Algorithm: sha256WithRSAEncryption
30:5e:1f:bc:db:b1:6f:6e:56:4f:ed:d6:ff:a6:95:fe:bb:8a:
f4:82:a9:de:d3:83:87:84:51:23:ef:b4:08:78:95:ed:f1:65:
86:a9:e0:90:0e:5a:7b:c8:c9:8b:fa:95:3e:85:37:72:d2:bf:
f1:9b:6e:62:67:94:44:11:c5:84:88:ee:68:9c:68:ef:0b:cf:
8c:55:27:8f:a1:17:00:cc:fe:15:b1:a6:02:f6:98:dc:bb:b3:
bf:eb:e5:91:41:e3:aa:42:56:0c:94:e7:54:19:33:bb:12:93:
b0:06:e3:2b:06:4a:6b:26:87:4a:af:fe:c9:f1:9f:bd:1a:08:
4a:d6:a7:ea:f8:9f:df:94:30:cd:36:82:30:c4:1a:83:45:74:
75:1f:ce:09:c6:81:fa:c4:2f:bb:83:ed:de:96:b1:ca:ad:32:
05:6d:c6:54:5f:f4:06:60:ec:e8:79:93:aa:74:e1:7a:58:e0:
ed:ab:dc:5b:b2:0d:ab:2e:8e:72:84:fb:d6:f5:74:41:45:35:
79:65:7c:70:be:7d:fa:0c:7e:9e:33:a4:6e:35:f2:2c:e6:30:
c4:4a:d9:b4:6f:cb:f6:6c:36:39:9f:32:31:a7:35:56:06:a0:
3a:6f:2c:d3:e5:83:9e:e9:0f:d6:4b:d7:f8:50:f1:19:9c:56:
2a:e3:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:42:21 2024 by rpki-client on console-ams.rpki-client.org