Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/_LvFVynugx-U1eU9u6b3_8PTisU.roa
File: _LvFVynugx-U1eU9u6b3_8PTisU.roa (raw, json)
Hash identifier: SRQgCIgiOBnBlyO2HPFTQvITGyNuvPeYbxHt7jI7Ipo=
Subject key identifier: FC:BB:C5:57:29:EE:83:1F:94:D5:E5:3D:BB:A6:F7:FF:C3:D3:8A:C5
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 018CC5DBEC9C3B32BA5A765DD96A33E007D0
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/_LvFVynugx-U1eU9u6b3_8PTisU.roa
Signing time: Mon 01 Jan 2024 16:29:33 +0000
ROA not before: Mon 01 Jan 2024 16:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35470
IP address blocks: 213.249.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ec:9c:3b:32:ba:5a:76:5d:d9:6a:33:e0:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcbbc55729ee831f94d5e53dbba6f7ffc3d38ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:19:34:cf:23:67:1a:5d:56:f2:e8:76:c5:
b1:fb:f9:e8:8c:54:b3:7e:98:3c:c7:4d:3a:18:b3:
42:bb:1b:3c:a7:ef:a3:d8:50:7e:96:02:1a:fd:3c:
d6:e4:96:0c:f1:ff:fe:b2:b2:a9:21:99:52:7e:7e:
f1:85:0f:2b:d0:26:9c:b4:79:0e:08:2e:f3:b8:49:
77:55:a2:d5:f0:15:7b:1c:ff:68:a9:25:43:46:43:
e2:e0:8d:61:9e:bb:d6:13:db:ba:91:9c:77:2f:6b:
c6:94:f8:86:80:3b:00:0b:c6:af:d4:e6:c5:10:8f:
03:7a:cb:f2:96:74:e0:43:2f:ab:cf:b1:11:cd:a5:
65:7c:ba:72:65:ab:50:4a:bc:61:88:c6:ab:dd:f2:
6e:bb:77:ca:08:94:03:59:6a:a4:06:61:a7:e0:7f:
ba:13:09:86:45:2a:58:4e:c2:c6:ea:0f:a4:09:cd:
1b:18:e5:72:b9:67:db:9d:c0:e2:3a:30:d2:c4:1c:
b1:4f:56:52:00:51:ac:fc:93:b4:f5:0b:ba:ab:61:
4f:14:56:16:a6:cd:d3:59:71:1d:7f:20:47:50:de:
dd:4d:3c:f8:75:c9:9c:d2:0e:1f:49:b7:1a:09:12:
eb:15:ce:c6:65:3c:c2:c4:c5:57:9e:ad:66:e6:63:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:C5:57:29:EE:83:1F:94:D5:E5:3D:BB:A6:F7:FF:C3:D3:8A:C5
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/_LvFVynugx-U1eU9u6b3_8PTisU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.249.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d4:85:ef:43:a0:95:9a:72:4f:2b:27:c1:df:1e:44:8a:80:
52:72:98:be:d9:20:76:eb:cc:b3:de:97:fd:d0:e7:08:35:f9:
5f:ce:f0:0f:ac:f1:69:e8:30:b0:b0:9c:78:00:e5:c5:a9:19:
6d:be:f0:ae:6d:1c:17:a2:91:ff:4f:fe:81:61:cd:82:f4:81:
a5:42:b4:4a:26:aa:19:2a:0a:ae:be:b7:0a:a4:d8:a6:27:47:
2f:7b:c7:4f:82:a6:b1:0f:63:a6:60:03:36:3d:ab:2c:eb:96:
fa:51:69:ba:55:2b:dc:60:28:27:4a:b0:24:8f:a5:a0:28:3e:
b4:47:7a:60:ed:4f:5d:f8:c9:ce:04:6c:7c:0f:ad:96:cb:b2:
79:b4:8a:3d:be:82:34:89:f4:02:88:a6:9b:77:39:87:e2:bd:
01:bb:3e:c2:1e:86:41:45:e7:40:15:ee:9f:51:17:fd:05:40:
ed:c0:8a:a9:fc:4e:e4:51:cd:35:d6:77:5a:02:2a:06:36:01:
f1:14:ff:7f:c6:e4:46:ca:e6:35:df:0f:1f:b0:9b:a0:4a:36:
5d:6e:f3:b3:6a:ab:b2:e4:34:d8:59:ed:92:9b:07:fa:9b:5c:
aa:83:2e:6b:76:4b:92:a9:e8:59:f2:51:7c:56:40:3c:39:f1:
71:72:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:31:15 2024 by rpki-client on console-fra.rpki-client.org