Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lfj3WHOfsyhSGddyvi-2I75B1TY.roa
File: lfj3WHOfsyhSGddyvi-2I75B1TY.roa (raw, json)
Hash identifier: +qdIRj8Z1sjYDD3zu0ImERL5x2FU3M9Ll86UHaQtcm4=
Subject key identifier: 95:F8:F7:58:73:9F:B3:28:52:19:D7:72:BE:2F:B6:23:BE:41:D5:36
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E1A0A470306ECA36699D1611C18E0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lfj3WHOfsyhSGddyvi-2I75B1TY.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208888
IP address blocks: 141.136.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1a:0a:47:03:06:ec:a3:66:99:d1:61:1c:18:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95f8f758739fb3285219d772be2fb623be41d536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:5f:73:df:59:5b:8c:8c:85:10:96:e1:04:
ca:aa:80:15:3f:ea:4b:a9:85:c2:49:d4:c2:2e:a3:
53:20:77:f4:cc:d5:ef:23:d2:ba:56:22:6d:2c:19:
a4:8a:0e:87:b8:d8:86:d0:89:ac:81:3e:ef:8f:62:
86:b3:cc:1f:20:2a:f1:96:58:d6:d5:d6:ea:27:a2:
4d:a4:68:cf:d6:0d:cc:cd:5b:34:34:1d:4d:e8:57:
b3:01:0b:fa:fe:4a:78:67:a3:68:ef:a1:19:c9:78:
df:ab:ae:1f:f8:39:a1:92:a4:f5:0e:73:03:33:52:
4b:d3:91:a0:0f:b3:b3:73:42:1e:56:c7:d1:c8:7c:
d1:34:37:10:a8:b8:11:93:fd:aa:71:65:87:39:41:
c2:bb:1e:a9:3f:5e:9b:91:e6:1e:b5:53:3b:a9:4c:
e9:c1:42:64:08:15:7d:ed:f4:9e:09:c8:7c:22:38:
20:b7:6a:6d:3c:27:1b:4e:b0:a0:45:fe:f9:15:54:
b9:e2:26:0f:85:d9:fa:6a:a2:fc:73:4c:ba:b7:36:
09:29:89:8c:5a:d4:23:ed:c5:23:55:4b:cb:17:2d:
ff:14:f2:6e:cf:bc:68:94:3d:ca:19:ab:0d:a0:c5:
29:07:6c:71:28:b8:2a:eb:27:e2:41:a4:03:7a:80:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:F7:58:73:9F:B3:28:52:19:D7:72:BE:2F:B6:23:BE:41:D5:36
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lfj3WHOfsyhSGddyvi-2I75B1TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:61:6c:da:ba:9c:25:85:ba:98:6e:c1:27:aa:cf:69:f5:03:
34:80:f5:89:8e:57:df:fc:5c:ff:b7:87:ec:f3:cf:64:d9:3a:
96:50:fa:3c:31:47:56:d9:0c:32:22:3c:64:e3:d4:d3:3d:a0:
56:53:db:56:4a:45:b8:5d:d9:08:b9:0b:1d:24:8b:b4:68:9d:
e9:06:a8:59:9f:d7:3b:5a:6b:e1:a2:31:12:b0:a1:b6:8b:33:
da:57:81:81:c7:61:d7:0d:c2:9e:22:87:f8:82:f7:59:8c:9f:
66:b6:51:ba:f2:b2:c1:0b:f9:57:d4:56:67:c7:1f:5a:e5:96:
cb:1b:b8:aa:00:b4:84:f9:56:d1:2a:ea:5b:66:af:cf:b8:dd:
63:55:ee:75:01:3b:74:c6:c2:54:23:be:d1:02:58:6d:e9:5b:
18:e1:c6:86:d0:02:75:42:74:58:24:32:27:31:bd:4d:9a:c4:
2e:5d:ae:ba:ae:82:74:3b:ac:d7:6a:51:2d:0c:0e:a6:bf:d2:
d1:ad:79:60:39:a0:aa:30:94:43:20:9e:25:50:bf:e8:7a:1f:
c8:d6:e6:65:dc:96:b3:b0:bb:6e:07:5f:b9:2e:6a:e1:06:19:
e3:15:42:96:0e:dd:e5:0e:a0:e2:f4:c4:fc:13:f2:0f:48:95:
2b:77:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:59:08 2024 by rpki-client on console-fra.rpki-client.org