Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/lvBGUUgCpsTxxxlpecbxC_WI-kQ.roa
File: lvBGUUgCpsTxxxlpecbxC_WI-kQ.roa (raw, json)
Hash identifier: EsY3B/RNAjgjAJtPnmA0UA1aKXzO6cIWaCvxW8oezyQ=
Subject key identifier: 96:F0:46:51:48:02:A6:C4:F1:C7:19:69:79:C6:F1:0B:F5:88:FA:44
Certificate issuer: /CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Certificate serial: 018CFCBF8B90CF73F11EF846A4C2F2DB54F7
Authority key identifier: 79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/lvBGUUgCpsTxxxlpecbxC_WI-kQ.roa
Signing time: Fri 12 Jan 2024 08:17:40 +0000
ROA not before: Fri 12 Jan 2024 08:17:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 194.147.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 10:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:bf:8b:90:cf:73:f1:1e:f8:46:a4:c2:f2:db:54:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Validity
Not Before: Jan 12 08:17:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f046514802a6c4f1c7196979c6f10bf588fa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:10:74:77:4a:72:de:fd:31:56:e4:a0:95:
03:1c:26:99:f6:e4:cd:23:af:31:9a:31:21:59:fc:
68:3c:8e:26:68:30:68:30:5c:73:ec:fd:04:77:66:
22:be:33:89:2d:a3:bb:55:63:72:f5:ee:f1:72:ed:
2b:c1:ee:2c:e5:50:4f:a0:58:15:a1:56:d7:6d:5d:
33:6e:d0:da:a2:42:05:7d:0d:67:1f:5d:a7:b9:41:
cf:f9:25:44:a9:e0:f5:ca:d0:2f:1c:8d:e8:9d:6c:
8e:af:54:35:e3:05:8e:ad:1f:60:67:e3:9d:29:0d:
ef:70:0f:a8:ba:25:cd:42:c2:66:ff:29:0f:74:80:
7d:b4:8c:c2:cc:9e:52:9c:36:37:a8:f4:fe:5d:d7:
76:4d:02:c3:b5:2a:23:59:19:e7:2e:fb:3f:7a:9a:
c5:b8:97:00:d2:f8:1e:2d:4e:03:37:d4:1d:cb:75:
8a:ca:73:be:57:6b:96:5f:d8:13:3a:7c:05:6f:dc:
a2:ed:ef:d2:55:01:e1:68:a4:28:9a:82:39:3c:08:
16:c8:e1:9a:a2:b6:86:3d:d1:99:0b:dc:41:9c:3b:
8d:5e:8f:cd:0c:dc:8c:83:2e:66:06:e1:3a:1e:37:
49:88:18:22:fe:36:2f:e7:2a:1d:65:90:50:c3:50:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:46:51:48:02:A6:C4:F1:C7:19:69:79:C6:F1:0B:F5:88:FA:44
X509v3 Authority Key Identifier:
keyid:79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/lvBGUUgCpsTxxxlpecbxC_WI-kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.220.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c8:ab:19:f5:d9:5f:5f:d6:75:fb:6d:f8:33:85:09:60:9c:
df:0b:20:99:34:a4:45:e4:b4:66:63:2e:2f:24:a8:6f:69:00:
28:0b:c2:21:a2:51:c7:67:d8:c0:da:62:4a:01:3d:d3:9b:77:
ea:3b:5f:1b:2e:0c:a7:0c:1a:73:38:11:35:e3:4e:93:f1:49:
20:6d:3f:1e:48:a7:86:1d:c1:50:41:a5:ee:cb:d1:2a:5f:97:
2d:00:56:b8:9d:b4:ea:00:2e:85:72:8c:60:68:09:87:cf:c0:
1e:26:ba:22:82:77:f0:b2:23:23:9a:84:9f:c5:a6:cb:7b:f1:
f8:95:da:62:a9:80:3a:3b:13:ab:27:dc:94:5b:67:f2:ce:9c:
f3:08:45:75:85:2a:2e:a1:30:fe:4c:6b:45:ae:84:97:8a:3c:
1f:23:e2:d2:9b:f7:8f:ea:a6:46:25:64:38:0a:9a:d5:80:19:
e3:1e:62:63:02:42:98:0b:4d:62:00:cb:6a:1d:dd:7d:c9:34:
37:2d:d3:52:39:14:59:f7:9d:bc:e0:95:c7:1b:eb:44:04:05:
45:61:14:36:f0:63:21:c8:7c:e2:1f:d2:d6:71:59:e0:9f:26:
da:44:2c:76:a5:2f:e9:c0:3a:fb:41:c2:ee:fc:3e:3c:1b:61:
d6:47:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 14:20:36 2024 by rpki-client on console-fra.rpki-client.org