Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/lrICgfXIeI6P1J01asPb1xriNbo.roa
File: lrICgfXIeI6P1J01asPb1xriNbo.roa (raw, json)
Hash identifier: B7aiCpWY3j+Or7GDfVjyokGHIglOFDLrDPV6fTxIjfI=
Subject key identifier: 96:B2:02:81:F5:C8:78:8E:8F:D4:9D:35:6A:C3:DB:D7:1A:E2:35:BA
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AEF88CE1102EB8000F4266106BA883B6
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/lrICgfXIeI6P1J01asPb1xriNbo.roa
Signing time: Mon 21 Oct 2024 12:06:17 +0000
ROA not before: Mon 21 Oct 2024 12:06:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211974
IP address blocks: 195.5.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:f8:8c:e1:10:2e:b8:00:0f:42:66:10:6b:a8:83:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:06:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96b20281f5c8788e8fd49d356ac3dbd71ae235ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:dc:68:84:15:3b:50:27:b5:2c:cb:dd:9e:
14:9b:06:b8:7a:c0:b9:1d:9d:a4:6c:e3:17:ef:d1:
05:7a:19:21:64:e9:30:74:01:cf:5f:24:6f:d8:47:
4b:a9:d3:4e:5a:7f:89:64:9f:5b:64:aa:21:37:c4:
64:e4:37:b0:5e:40:4d:db:5b:d1:34:11:fa:81:2f:
b1:0f:11:25:bf:bb:0d:b2:82:a3:d3:5b:91:53:f6:
96:ef:67:a0:6c:49:11:5c:54:2e:14:9f:f2:61:17:
8a:50:66:a3:98:12:6e:46:70:53:f1:5e:9b:98:17:
f4:2d:6f:10:34:1b:ce:45:ef:ee:f6:82:f1:32:e0:
f1:92:6c:25:8a:d4:05:38:ad:36:f2:99:1f:a9:fc:
f8:3d:77:7f:38:02:ed:8b:c5:95:00:80:58:d7:b0:
fb:ce:80:08:60:7f:96:29:28:bf:47:ac:92:8f:93:
5c:5a:66:91:06:fd:50:f0:c2:ff:b5:d3:37:bf:c5:
b7:f9:d7:e4:91:86:86:21:bb:24:16:1e:1a:44:a2:
f6:6b:84:be:b6:0b:02:fa:31:fa:99:d1:fc:61:02:
54:38:74:69:61:fa:8d:1f:92:2d:ea:2e:cc:1b:57:
04:e0:89:a4:ae:77:54:e5:bc:8b:3e:19:a8:08:59:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:02:81:F5:C8:78:8E:8F:D4:9D:35:6A:C3:DB:D7:1A:E2:35:BA
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/lrICgfXIeI6P1J01asPb1xriNbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.76.0/23
Signature Algorithm: sha256WithRSAEncryption
01:7c:b0:46:9f:1f:37:7a:1a:8e:5c:57:fd:a1:49:5b:e6:f1:
72:97:34:83:ec:26:8c:77:33:4e:ca:0a:1a:30:a6:b5:52:dc:
c1:f7:9c:f4:cf:3f:a0:0a:43:d6:00:df:73:82:76:04:28:58:
7e:8b:7b:a6:95:26:62:9d:cc:ca:98:d8:fb:1a:d5:04:cc:d3:
d3:8f:4a:47:fa:bb:75:ca:cb:f4:9b:94:b2:91:54:db:7b:2c:
8f:29:bb:ae:a6:72:d8:f3:c8:57:28:aa:11:fa:2b:f5:22:99:
08:86:49:94:ba:01:95:70:5a:d4:4e:37:33:64:f9:50:17:2b:
7f:23:7a:95:b9:88:20:8a:19:8b:2b:6a:92:91:12:77:d2:37:
e8:ae:68:37:b3:6a:a1:56:00:cb:0c:12:b6:9a:60:d0:58:c5:
99:e7:95:90:9b:c7:ba:dc:c8:2d:91:b0:f9:da:71:69:ad:8b:
00:fb:c2:b2:91:b7:78:40:a3:ff:1c:cb:9a:45:b7:06:dc:14:
96:91:dd:e2:82:6e:44:44:a8:c7:29:32:97:70:05:b4:22:2e:
65:6a:cd:e3:52:96:80:ec:19:3c:df:90:33:4b:1e:a1:8c:40:
43:79:45:3b:89:4d:13:ee:7c:58:06:6d:48:dc:5b:72:a4:dd:
64:53:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:30 2024 by rpki-client on console-fra.rpki-client.org