Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/lui4PsXgt62757wq-Y_MVdqy_KA.roa
File: lui4PsXgt62757wq-Y_MVdqy_KA.roa (raw, json)
Hash identifier: taxhKPzURzOxpSb6K7ariyOXJGsFF71SxuQrNSo3LXA=
Subject key identifier: 96:E8:B8:3E:C5:E0:B7:AD:BB:E7:BC:2A:F9:8F:CC:55:DA:B2:FC:A0
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 018CC94E4C226F48B12F8D2C9D15E3FEE7D3
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/lui4PsXgt62757wq-Y_MVdqy_KA.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42009
IP address blocks: 176.98.44.0/22 maxlen: 24
91.103.176.0/21 maxlen: 24
2a01:308::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4c:22:6f:48:b1:2f:8d:2c:9d:15:e3:fe:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96e8b83ec5e0b7adbbe7bc2af98fcc55dab2fca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:36:5c:28:b4:2b:ac:f6:75:a8:82:b9:cc:
7d:a0:d0:47:b6:5a:1d:24:2a:05:98:d3:11:ca:69:
d9:3e:b0:84:4d:2e:13:9e:0a:ea:22:50:93:74:75:
3c:b1:3e:43:33:ba:92:cb:ac:c7:a4:a6:62:38:13:
c9:6d:da:24:9e:a4:ac:b1:e5:f7:2b:90:9f:8c:74:
88:97:2f:64:28:d3:de:7d:3d:07:37:9f:2c:18:a3:
21:32:5a:b0:61:da:a3:f3:f9:d2:10:ac:fc:c5:45:
e4:46:92:62:e1:2e:53:66:80:5f:0f:9b:bf:df:07:
e2:38:bf:89:31:c4:27:1b:d8:b4:5b:4d:fe:8f:2e:
e2:26:c8:fd:1e:d3:25:95:81:e4:39:27:7b:48:90:
90:f9:08:a8:6f:fb:e0:15:e5:f6:29:c7:55:10:8f:
72:5a:c9:bf:dd:68:22:cb:2a:ad:98:a4:4f:6a:a0:
85:f2:e1:7e:17:35:eb:fb:c1:79:53:0b:c1:37:eb:
60:7f:4e:c2:a9:0a:db:9f:83:57:8c:c9:59:ee:2c:
5c:4a:b6:b1:bf:bc:56:6d:d3:bb:10:64:20:30:8f:
8a:07:f4:46:15:27:ba:8f:80:8b:99:04:93:fb:c6:
19:76:df:c5:c4:e6:b1:4a:7a:71:70:0e:36:6e:c3:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:B8:3E:C5:E0:B7:AD:BB:E7:BC:2A:F9:8F:CC:55:DA:B2:FC:A0
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/lui4PsXgt62757wq-Y_MVdqy_KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.176.0/21
176.98.44.0/22
IPv6:
2a01:308::/32
Signature Algorithm: sha256WithRSAEncryption
84:f8:9f:f9:e9:08:72:12:5c:4c:b2:ca:e7:82:2d:2c:a0:b4:
17:80:48:00:5b:65:f2:2a:41:64:48:de:dc:4d:09:f8:45:5a:
67:df:a5:26:79:b7:c5:df:a8:23:d3:c3:44:d7:55:7c:22:2b:
63:d9:35:e4:ed:a7:57:ea:59:45:38:76:6b:89:bb:10:cf:40:
4f:da:19:cb:d0:57:dd:da:f6:e8:4d:c4:bb:f9:f4:22:5f:54:
e4:a5:93:31:2a:77:e7:93:92:07:ee:b8:a5:5e:98:8a:0d:36:
ca:5d:12:ed:38:68:50:1f:32:85:e0:f0:46:48:37:00:38:69:
a9:2f:cb:a3:eb:5a:86:78:de:43:35:56:bc:da:48:d0:08:a8:
a2:9d:92:fb:1e:03:af:db:bb:9d:07:ca:78:fe:b6:12:cc:ba:
8f:32:4c:0b:47:8f:ea:7e:a4:4d:12:fe:5a:ca:9b:dc:58:6a:
bd:2c:d8:50:b5:28:ed:e7:71:2a:9c:80:46:37:50:c0:e0:7b:
6d:ac:5e:5a:09:14:be:10:d7:eb:b6:cb:fb:27:77:83:4b:73:
33:70:5f:26:76:c8:2a:dc:49:9a:4e:72:d1:1e:18:7a:ba:8c:
9c:6c:67:19:28:8c:d0:41:a1:bb:49:a5:83:c2:10:9c:84:03:
05:fb:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 09:16:19 2024 by rpki-client on console-fra.rpki-client.org