Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/lKJHBLJ9RMfJhZ1dnvQ2nPJbx94.roa
File: lKJHBLJ9RMfJhZ1dnvQ2nPJbx94.roa (raw, json)
Hash identifier: FYcFbj0a1er1XVqqA294XY1flix7Ey5BVF1g/9vPIp0=
Subject key identifier: 94:A2:47:04:B2:7D:44:C7:C9:85:9D:5D:9E:F4:36:9C:F2:5B:C7:DE
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0192C299DF95478D9255BD0EA6C24166A855
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/lKJHBLJ9RMfJhZ1dnvQ2nPJbx94.roa
Signing time: Fri 25 Oct 2024 07:35:17 +0000
ROA not before: Fri 25 Oct 2024 07:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137235
IP address blocks: 213.137.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Nov 2024 14:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:99:df:95:47:8d:92:55:bd:0e:a6:c2:41:66:a8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 25 07:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94a24704b27d44c7c9859d5d9ef4369cf25bc7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:82:b6:b9:9e:d8:2f:ba:e9:ab:c8:a5:d6:
cc:1c:06:c8:62:e7:9b:1e:09:0d:bf:f5:2a:ba:c4:
ae:a7:b4:70:13:91:32:c4:d9:a0:16:da:6e:8b:d9:
a2:f8:6c:1e:50:6e:89:a0:63:7c:ff:63:33:10:88:
15:6f:73:11:21:e1:a2:1b:4b:53:b1:7f:67:9f:4b:
8a:2e:1a:23:08:00:d4:8c:38:45:0a:ca:33:6d:b0:
fb:7f:1a:35:87:59:2a:d5:26:5b:1c:01:cb:2e:45:
3e:41:d4:33:74:23:83:30:21:cf:15:04:bb:0b:e1:
ff:83:a0:b7:de:d8:5b:5c:1b:74:fa:7b:a7:e3:c5:
d1:27:27:09:87:bf:62:88:99:cb:56:9a:c0:01:1e:
9c:d1:8a:96:48:53:c7:24:b8:e0:cb:7c:f2:47:c0:
2d:a7:e8:94:80:c5:f7:eb:ad:36:e6:c9:23:72:d2:
93:50:af:98:45:c5:37:65:9a:fb:8d:11:13:41:48:
59:21:c0:a2:6b:82:41:4c:f1:16:1b:9d:24:a5:14:
91:be:ff:2f:6c:d1:08:4d:90:08:43:71:53:53:84:
90:4a:bc:85:a8:74:30:e9:47:e2:f4:e2:84:45:09:
1b:88:87:f8:be:35:1b:c0:af:ac:43:18:a2:1c:2c:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:47:04:B2:7D:44:C7:C9:85:9D:5D:9E:F4:36:9C:F2:5B:C7:DE
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/lKJHBLJ9RMfJhZ1dnvQ2nPJbx94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fd:08:ad:e4:b2:33:40:a1:65:b2:9a:97:37:06:1e:67:0f:
26:af:a7:63:e2:b6:8e:a9:7a:ce:a3:2e:05:33:74:e5:07:d8:
e4:d2:a3:7c:0d:74:42:37:c2:65:48:0b:59:e7:4d:70:b4:f3:
5a:b2:6c:b6:8d:88:1c:cc:63:65:1f:71:08:70:0e:b4:a3:ef:
e0:eb:86:56:6c:5d:3d:a9:04:d8:84:3b:1e:41:f7:5a:29:d6:
39:b5:95:39:e8:4d:cf:26:20:c9:78:da:af:50:b3:a9:1c:a7:
91:60:38:04:44:c9:68:e7:cf:1d:99:e4:35:92:dd:8d:eb:00:
28:b6:9f:dc:66:79:0a:1c:fa:39:14:51:26:af:00:3d:8f:9d:
f4:53:36:ec:c5:7e:da:a1:c3:73:53:78:7c:50:cc:ec:d5:e6:
0b:47:78:ab:89:c7:70:51:74:3b:e6:34:17:38:4c:2d:90:1b:
b0:5e:b9:72:14:91:b6:d6:d4:d0:a1:f3:fe:d5:9c:2d:06:83:
79:d4:1a:d1:10:4f:00:57:1e:50:36:2f:50:b0:b3:2f:42:14:
1b:3f:7d:85:3a:0a:e1:45:85:97:b0:5b:9a:e6:b0:03:39:76:
89:fd:b1:07:ed:e1:cb:04:1a:18:43:ac:70:ad:68:47:74:35:
36:f0:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 23:51:30 2024 by rpki-client on console-ams.rpki-client.org