Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ljErZIQ9clzEzn49eM6c8voNk-s.roa
File: ljErZIQ9clzEzn49eM6c8voNk-s.roa (raw, json)
Hash identifier: 9ntGoDtDwvb/cekg1nOWuu+4MJOEpG0mVAnyAT7jlco=
Subject key identifier: 96:31:2B:64:84:3D:72:5C:C4:CE:7E:3D:78:CE:9C:F2:FA:0D:93:EB
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 018CC3490579E2E7D7F3CEAAD71CC64BB6E9
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ljErZIQ9clzEzn49eM6c8voNk-s.roa
Signing time: Mon 01 Jan 2024 04:29:51 +0000
ROA not before: Mon 01 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20978
IP address blocks: 213.161.151.0/24 maxlen: 24
213.161.153.0/24 maxlen: 24
213.161.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:05:79:e2:e7:d7:f3:ce:aa:d7:1c:c6:4b:b6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 1 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96312b64843d725cc4ce7e3d78ce9cf2fa0d93eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:5c:a3:e4:fb:2e:1e:fe:ca:17:f8:60:1b:
c3:c2:2a:48:f2:18:2e:ae:d6:89:03:1a:18:c7:9b:
a5:0d:28:db:b2:61:03:b3:71:54:dc:94:8a:a0:c2:
b0:80:c9:e3:37:b1:ab:d3:09:b6:5d:7b:e1:1d:24:
40:65:9d:36:7c:ae:a1:be:f2:9d:ee:c5:01:2f:a8:
f8:66:d4:f3:ee:19:05:31:d0:6a:df:98:ce:b6:0b:
b1:c7:41:59:fb:c7:b7:24:c6:97:c8:78:5d:6b:e3:
87:0e:51:b1:bb:e0:42:58:8b:4c:38:3c:87:ae:03:
12:4f:5e:7c:4d:11:e0:11:0d:b4:5b:95:f4:a3:a7:
f9:a2:89:80:ba:20:cd:11:9a:e4:8f:e4:28:b2:41:
3e:04:17:b3:6f:5f:1d:0c:5f:99:4f:f9:b1:77:e7:
2e:92:1b:5e:02:30:d5:aa:10:15:bc:bc:1d:a0:11:
b4:0c:21:ab:3f:31:98:1b:d0:2e:40:3c:fd:8f:77:
59:96:5c:57:ee:09:9e:5b:f5:39:3d:f9:5e:6c:33:
d9:5b:de:02:33:49:2f:70:ef:fc:87:e6:fe:8d:20:
3a:19:9a:c8:01:d6:bc:3b:0d:4d:50:8f:8e:9d:41:
5b:fc:7f:49:5a:04:0c:e1:b4:31:2d:9e:df:d3:fc:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:2B:64:84:3D:72:5C:C4:CE:7E:3D:78:CE:9C:F2:FA:0D:93:EB
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ljErZIQ9clzEzn49eM6c8voNk-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.151.0/24
213.161.153.0/24
213.161.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d7:f0:4b:16:a0:ef:51:7b:a0:13:35:a2:72:57:2d:08:fd:
28:38:b7:61:01:ee:75:c5:3d:ea:6e:9f:3a:8d:27:91:a3:34:
c6:01:13:7a:c5:e7:58:3f:e1:27:ff:d9:b3:80:ea:25:e9:e7:
e7:9b:1a:b0:64:56:f4:40:45:23:07:c5:a4:d2:4c:1c:a6:ba:
95:69:41:65:cd:41:02:7f:36:d6:ea:5b:45:53:f7:0c:9b:2f:
37:12:51:f0:aa:98:aa:e6:6f:ea:44:25:79:61:3a:f7:2b:61:
41:b3:7e:b4:46:67:a6:0c:9d:09:a5:cc:fe:b6:84:40:b7:33:
90:36:28:48:59:25:e8:ed:19:dc:1a:a8:ce:7a:46:f1:4a:5e:
af:0b:4b:11:c0:64:3a:81:23:5f:1c:b3:d7:59:ab:6e:5c:19:
c5:7a:8b:b6:aa:7c:3e:00:75:ac:20:fd:de:15:ea:dd:6c:5b:
f8:a0:4e:2a:c4:87:4c:5d:fb:28:60:44:a1:d8:52:03:e6:b4:
a0:cb:eb:ff:55:f0:45:09:6c:42:90:b3:99:45:91:3a:6e:c2:
e4:5a:30:6c:da:47:c4:eb:04:f2:e1:39:f0:bd:d1:e1:7e:ea:
e4:c1:24:6d:96:3c:6a:8d:9e:32:8c:24:64:5f:0b:2e:a7:10:
9a:05:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:24:02 2024 by rpki-client on console-fra.rpki-client.org