Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lK7U09NkZX5B7onqkU9gVrGg4rk.roa
File: lK7U09NkZX5B7onqkU9gVrGg4rk.roa (raw, json)
Hash identifier: 4vNIlyMHfYrUla4+oVBBzbIa2g79VlnL+cbuq13mVNY=
Subject key identifier: 94:AE:D4:D3:D3:64:65:7E:41:EE:89:EA:91:4F:60:56:B1:A0:E2:B9
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 018CC8DD09CF194932301761A4634038A5F0
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lK7U09NkZX5B7onqkU9gVrGg4rk.roa
Signing time: Tue 02 Jan 2024 06:29:38 +0000
ROA not before: Tue 02 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48131
IP address blocks: 193.33.140.0/24 maxlen: 24
37.221.116.0/24 maxlen: 24
2a09:500::/32 maxlen: 32
2a0f:ae80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:09:cf:19:49:32:30:17:61:a4:63:40:38:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jan 2 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94aed4d3d364657e41ee89ea914f6056b1a0e2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:78:a2:3c:59:6c:d2:63:a3:9e:bd:15:f7:
89:e0:c0:cf:01:72:58:c4:5f:2b:ab:96:3e:db:ba:
d7:df:45:e4:aa:01:66:b1:25:ff:ce:ba:5e:34:8b:
15:52:65:f3:bf:61:12:d5:ed:e1:79:12:c5:46:3a:
7d:83:34:4c:d4:51:ec:f4:00:b5:e5:b2:1f:e0:cb:
b3:a0:cf:94:c9:8f:aa:85:79:f3:fa:36:14:8e:a4:
a1:5b:bb:c0:ca:fb:f0:92:7c:af:b9:e3:cd:e3:9d:
57:4c:df:51:b9:46:b3:08:ef:fc:60:be:13:e0:89:
ba:de:77:61:12:1d:51:e1:00:eb:7d:ac:a0:f7:fb:
35:30:8e:3b:e6:27:02:25:83:b0:02:83:f5:2b:fe:
16:12:71:db:39:06:2a:36:e8:7d:40:46:9c:8c:4b:
b7:7a:d0:01:90:19:db:fa:60:fb:19:62:09:8e:72:
35:49:f4:2f:66:af:9d:e3:23:13:14:50:21:86:eb:
79:f0:cb:05:22:db:91:0a:2f:e8:d0:1c:99:3d:56:
28:82:c7:a1:04:c4:e4:3f:94:af:7c:66:3f:94:1f:
8c:dd:e1:ec:df:3c:d0:21:96:08:8a:44:a4:19:3e:
92:fe:63:77:c0:d5:d6:67:a1:c7:71:e3:12:9e:a2:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:D4:D3:D3:64:65:7E:41:EE:89:EA:91:4F:60:56:B1:A0:E2:B9
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lK7U09NkZX5B7onqkU9gVrGg4rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.116.0/24
193.33.140.0/24
IPv6:
2a09:500::/32
2a0f:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
a3:7e:89:5b:62:00:b3:7e:e2:64:ce:2a:05:17:01:ac:57:5f:
46:5c:7f:4d:89:4a:9e:ac:1e:42:a9:6d:54:ec:6b:0c:9f:4a:
ec:95:75:7c:33:0f:2e:78:fa:c4:c9:0b:7c:cd:0f:e7:8a:16:
0e:d3:c5:13:f6:69:c0:40:41:15:a2:7c:88:e0:12:13:98:a1:
ee:51:76:55:a7:50:e9:66:d9:0a:61:1d:9e:81:f9:37:91:c4:
25:4e:fb:71:d1:50:e9:a1:68:c2:fc:7b:6e:ad:b1:c7:29:1f:
95:26:59:8c:26:aa:51:a9:80:0e:d9:ce:18:2e:72:57:b7:ae:
e4:35:48:a6:32:02:45:bc:dd:a8:ec:2a:97:3b:93:bc:d1:64:
75:6d:7e:6f:34:49:61:f9:2d:b2:13:dd:f3:13:ce:66:20:26:
b4:0b:a6:1d:f6:3e:27:bd:08:69:ea:5a:a7:5b:7f:ab:eb:9b:
53:b6:c2:e7:a3:3c:39:0a:cf:ea:c0:b1:64:44:7b:81:6f:75:
80:e3:0a:23:ac:4a:77:d2:0e:b2:ae:8a:6e:99:8f:57:c1:f6:
00:9c:d0:ca:63:18:c4:44:e6:66:28:5d:8c:ff:0a:ec:33:d6:
63:b2:43:f9:2c:4a:5c:d2:05:80:11:db:3c:84:38:21:2a:d7:
3e:b0:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:46:13 2024 by rpki-client on console-ams.rpki-client.org