Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/LNGoBtO9VA3v_iPitM0QKp2yzJk.roa
File: LNGoBtO9VA3v_iPitM0QKp2yzJk.roa (raw, json)
Hash identifier: SHpPMZxY3kY/ma9/7eQWW9QLHm8hVDsvX1MndaAxwm0=
Subject key identifier: 2C:D1:A8:06:D3:BD:54:0D:EF:FE:23:E2:B4:CD:10:2A:9D:B2:CC:99
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 018CC3B67E2634C436B34F424A7BA46FE347
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/LNGoBtO9VA3v_iPitM0QKp2yzJk.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.150.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7e:26:34:c4:36:b3:4f:42:4a:7b:a4:6f:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cd1a806d3bd540deffe23e2b4cd102a9db2cc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:61:86:59:a8:36:1a:ba:ed:79:86:f9:91:
8a:d1:89:d4:79:a9:36:03:70:2f:cc:1c:af:bc:00:
61:79:5a:48:ee:5d:21:e9:11:b1:1d:ec:43:ea:00:
65:42:71:19:9f:48:17:51:09:e2:6d:a6:f0:ad:87:
9e:84:79:74:94:89:9f:a8:1c:db:01:e2:29:55:6f:
db:a7:ab:09:fe:c8:b7:6e:15:c6:12:26:73:58:e3:
17:b8:2b:af:96:8c:47:96:7a:b4:38:9b:18:9e:3d:
40:25:13:1c:37:ac:86:3e:05:5f:4c:dd:d1:db:15:
0e:2d:1c:32:59:50:de:29:2f:61:c0:c9:59:b7:89:
99:c5:ec:e6:e3:a0:21:82:c5:d8:6d:66:b1:8c:10:
23:62:93:4e:96:0b:0d:61:f7:81:ac:24:c9:51:cc:
fb:2b:8a:b0:4f:41:c7:df:56:ed:97:89:67:43:68:
6e:a2:4d:28:37:ff:95:11:95:8a:57:69:e9:e3:f7:
fd:43:5b:23:18:c9:c6:35:22:67:48:be:69:bd:38:
38:c6:c0:8d:3e:3a:85:bf:66:68:41:ba:4c:27:4e:
ce:fc:e9:ff:45:ee:40:d8:c9:2b:dd:b3:a3:b6:af:
eb:ea:47:37:d4:2f:d5:65:d0:a9:fa:ca:91:f3:cd:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:A8:06:D3:BD:54:0D:EF:FE:23:E2:B4:CD:10:2A:9D:B2:CC:99
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/LNGoBtO9VA3v_iPitM0QKp2yzJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f2:4f:22:4f:e3:6b:50:ac:41:76:c9:85:12:2f:38:87:fe:
e7:60:7f:58:8b:df:df:3f:16:4a:6e:6e:9e:2c:e3:5d:d6:05:
a4:77:50:bf:d1:eb:cd:da:36:df:64:a8:1a:86:13:8d:95:2e:
ac:91:ff:7e:66:35:30:34:23:6d:50:61:cc:8a:48:b6:38:8d:
a2:37:c9:5a:08:67:ef:81:27:f7:82:c8:a7:2b:4a:56:24:99:
8f:4a:54:d6:ee:fc:af:06:b5:58:3b:6b:12:e5:bb:2c:a3:78:
11:3f:70:40:2b:04:9b:86:bc:38:1b:ee:fe:d7:a0:7d:d0:36:
72:eb:7f:be:cd:c9:7e:2a:82:b3:68:b7:8b:47:bc:f0:27:bd:
f8:a6:0e:06:a3:36:f0:b5:c5:80:a4:de:0c:1b:e8:11:4c:61:
24:90:0c:82:73:ef:7d:96:20:78:f0:1a:3d:8e:74:1b:40:19:
e8:12:95:64:f5:15:f8:d1:88:f7:10:e3:23:d6:ce:cd:fe:32:
9c:7d:97:4d:6c:83:11:b4:0b:d2:2f:f2:2d:c1:bf:bd:09:a1:
28:ae:7a:3c:84:ab:63:93:41:5e:5f:43:fa:ca:53:d5:ac:10:
a8:db:f5:39:6c:2c:38:b4:57:1a:c4:d6:fd:e9:f3:0c:f3:67:
2d:b2:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:51:32 2024 by rpki-client on console-fra.rpki-client.org