Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/Lx_4XFDsplQfOXQQGVipgwTfSms.roa
File: Lx_4XFDsplQfOXQQGVipgwTfSms.roa (raw, json)
Hash identifier: OD9c/vjTLTeMTjWpAoQEiZoFFds5ic3aO4dEsnWENEA=
Subject key identifier: 2F:1F:F8:5C:50:EC:A6:54:1F:39:74:10:19:58:A9:83:04:DF:4A:6B
Certificate issuer: /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial: 018CC86EFFFF37F6935216BDECE65645E7CB
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/Lx_4XFDsplQfOXQQGVipgwTfSms.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400040
IP address blocks: 212.46.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ff:ff:37:f6:93:52:16:bd:ec:e6:56:45:e7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f1ff85c50eca6541f3974101958a98304df4a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:56:05:66:1d:35:5f:52:51:52:a7:8f:f4:
1b:e7:74:1c:fd:be:0b:82:bb:02:cf:f6:e1:3c:3a:
29:b7:4a:21:1b:15:dc:68:36:60:a4:94:1e:d8:4e:
55:eb:d6:09:bc:89:5d:21:00:98:b2:10:98:0c:fd:
85:58:d1:7e:fd:76:23:a7:75:b7:3a:89:eb:0f:08:
1b:26:d8:a2:be:8d:c0:6a:d9:1b:ef:e9:76:12:ab:
08:72:66:d5:aa:b1:50:a7:d6:c6:bf:1d:4d:6f:e7:
27:b6:49:c8:c4:0a:22:f8:93:2f:c8:83:f4:f8:d7:
bb:08:55:20:d0:e4:7e:72:19:1a:a6:f2:50:f6:9d:
86:b0:52:7b:01:fe:4b:f7:e5:04:59:8c:38:38:68:
98:e1:dd:5e:dc:91:56:cd:6d:c0:87:39:58:54:db:
de:d6:46:24:5f:ca:c4:6e:dc:e0:ea:f5:64:09:56:
a7:42:94:52:05:41:83:bb:dd:66:bd:a8:8e:bb:1e:
50:dd:b5:12:50:1e:bf:a9:a1:36:8a:50:89:a2:b0:
1a:df:68:3e:2e:39:6c:7d:b6:64:8a:0c:d2:69:ab:
7c:67:29:ac:5e:fc:51:93:55:f7:09:ad:c3:2d:04:
7e:70:76:5e:6d:60:a5:17:71:fc:e9:74:19:7a:60:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1F:F8:5C:50:EC:A6:54:1F:39:74:10:19:58:A9:83:04:DF:4A:6B
X509v3 Authority Key Identifier:
keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/Lx_4XFDsplQfOXQQGVipgwTfSms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:11:db:fc:8e:e4:ee:d1:f3:7d:0d:6d:2f:e4:97:9e:c6:eb:
a9:3c:c6:a1:78:5f:07:4f:38:c4:4e:cd:0f:7a:0d:54:85:9a:
66:92:12:76:77:5f:5d:bc:08:40:df:6c:9a:9e:1d:2c:5c:10:
86:09:6f:7b:34:3e:1f:48:d7:5c:a4:ae:1f:9d:f4:45:67:a2:
01:32:b6:ac:2f:13:05:31:8e:39:87:8f:2e:7d:47:07:66:5e:
19:f4:0b:43:ba:6f:7d:2c:59:4c:26:01:fe:84:f7:3d:66:77:
82:57:b2:15:cb:2a:f0:27:34:9c:d9:5e:37:54:88:42:6a:80:
bf:2b:31:9d:86:42:d4:ab:8b:11:ef:bd:48:82:58:7b:cc:5f:
16:5b:43:90:a7:29:e4:d6:3f:2c:2a:33:47:f6:09:5b:6b:95:
6e:9e:69:60:48:c9:47:f3:12:bb:7a:b4:1b:04:58:4e:fb:57:
cb:8c:92:38:8d:98:c7:9f:04:7f:a5:54:8b:be:f9:54:95:94:
f0:d5:15:2d:cf:3e:ef:41:bf:7b:3e:cb:4a:28:d2:05:09:1c:
53:7d:71:92:8f:ac:3a:a6:1d:ce:5d:97:d3:41:58:e2:f4:01:
e7:f2:6e:c8:dd:a0:44:b7:2e:e4:6d:c2:39:c1:20:54:72:71:
4d:c9:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:39:42 2024 by rpki-client on console-ams.rpki-client.org