Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa
File: LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa (raw, json)
Hash identifier: brzj2PLQjt+FqlZTi6y7m3QGOFzLDfzi/MQ/T+R9xgQ=
Subject key identifier: 2D:B3:12:CD:68:E3:D1:BE:D1:03:28:55:13:FA:F0:5F:47:A8:26:C1
Certificate issuer: /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial: 018CC3B6A7EAF767276E632BA24B1F00AECB
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa
Signing time: Mon 01 Jan 2024 06:29:36 +0000
ROA not before: Mon 01 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 141.43.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 13:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a7:ea:f7:67:27:6e:63:2b:a2:4b:1f:00:ae:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2db312cd68e3d1bed103285513faf05f47a826c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:ec:17:28:65:df:ee:c6:ec:9f:71:d1:07:
de:7e:9f:58:fe:0b:72:3b:eb:cd:58:5c:01:4c:2e:
69:b5:78:04:60:7b:62:97:7b:3e:8c:2b:73:8c:ee:
7f:56:35:9c:8d:76:d9:e7:dd:a9:ea:40:04:2e:e1:
b7:30:87:36:8b:02:10:f4:fa:0c:5d:f2:fc:e3:2d:
15:29:df:40:e8:c3:15:c2:90:ea:c5:90:48:41:a7:
c3:a0:92:7f:03:7a:63:08:cf:cd:33:96:48:c1:29:
83:51:8e:17:8d:8a:a2:05:46:17:0b:64:81:ee:60:
79:c0:c9:ef:ba:70:1c:b0:61:3a:14:ce:74:a4:63:
3f:bb:36:d3:32:fb:b6:3d:33:b3:d6:2a:9b:80:ba:
5b:4a:e5:8a:f3:3c:2d:98:b9:c9:7d:07:06:08:fa:
01:76:55:fd:93:5e:7d:ea:6a:10:32:8d:f5:9f:ea:
2f:97:8f:4c:d2:2d:1d:16:8f:7f:b1:e7:08:db:05:
3b:e7:7f:a9:0f:e1:7a:c4:eb:a3:71:49:3e:59:b7:
38:9c:8f:87:36:73:00:88:ce:16:e1:3d:71:17:fb:
4c:91:bf:45:0b:5e:f2:88:e9:70:23:48:6d:4a:59:
3c:ff:7c:75:7e:72:00:53:33:2b:7a:e1:e6:52:b1:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:12:CD:68:E3:D1:BE:D1:03:28:55:13:FA:F0:5F:47:A8:26:C1
X509v3 Authority Key Identifier:
keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:2a:f4:59:f7:af:99:28:98:f0:a8:b9:01:73:50:6d:e5:e2:
a4:49:ef:36:d8:32:a1:eb:93:16:fc:14:ec:4c:1e:3e:eb:09:
c4:04:9b:fb:f1:40:60:44:f6:88:6f:55:77:86:39:ec:d4:fd:
c0:1f:93:ad:2d:b0:57:4d:d5:bf:33:cc:b1:13:95:ed:a8:e2:
54:87:b9:34:1b:26:7a:1c:4f:89:7c:ec:b9:a1:16:a9:bb:06:
4f:30:b9:2c:23:9a:8c:86:19:1c:de:68:33:d1:79:81:06:3c:
7b:7b:d4:8d:16:51:bf:64:f2:49:4b:50:3f:0d:23:4a:8d:07:
2c:f6:7c:e2:d2:fc:20:2b:0c:fe:5c:a1:1b:69:c5:52:ff:a8:
a8:32:42:54:f4:fc:41:24:4a:64:e1:58:62:7d:4f:ca:af:93:
09:4a:00:57:ca:86:5e:f2:73:b9:aa:8d:53:09:ed:e3:17:57:
a4:99:8b:21:f7:ad:0d:81:cb:5d:6d:9a:40:42:c4:6b:2b:bc:
ab:57:75:ec:97:50:10:fb:dc:18:27:fa:e2:0c:86:b1:19:3c:
c6:90:49:fc:6b:31:36:f3:bf:c0:17:42:fe:e8:d8:fb:bb:67:
b4:16:de:94:5c:16:35:86:74:74:a8:9e:fe:2a:59:ae:8f:b3:
86:3c:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:08:31 2024 by rpki-client on console-ams.rpki-client.org