Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/LBg399Zim8fIErdK6Yjh9besgj8.roa
File: LBg399Zim8fIErdK6Yjh9besgj8.roa (raw, json)
Hash identifier: osVObfLf66JuxuXDyTksSPkSVVTfmdMCq40UM8LHFks=
Subject key identifier: 2C:18:37:F7:D6:62:9B:C7:C8:12:B7:4A:E9:88:E1:F5:B7:AC:82:3F
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 018CC26D19EE183ECA54F05745F16574C83C
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/LBg399Zim8fIErdK6Yjh9besgj8.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 91.199.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:19:ee:18:3e:ca:54:f0:57:45:f1:65:74:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c1837f7d6629bc7c812b74ae988e1f5b7ac823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:cb:49:37:72:2b:90:05:66:ff:f5:ad:f2:
90:54:16:08:af:0a:69:72:9d:83:a9:70:84:0a:31:
5b:c9:1d:21:e6:61:6e:77:e3:0d:21:4d:a2:35:a3:
d7:e4:a4:d5:cf:28:62:2b:0a:f5:a9:ce:12:04:01:
1e:fd:c1:21:ac:39:6c:6d:dc:7c:95:49:b1:d3:f2:
8b:af:55:eb:ea:b1:2e:2f:f2:13:fc:1a:db:1a:c0:
43:93:13:fa:d7:13:f8:6c:34:d1:73:68:84:29:05:
bf:9d:83:4d:e4:d4:b8:82:90:23:e5:1d:d0:f8:e3:
72:f8:ae:d6:5e:d8:25:3f:3a:4e:7c:ad:ff:29:f1:
e3:1c:06:26:60:24:b2:ea:58:b5:6e:d4:57:1d:d1:
4f:65:d1:29:c7:5e:34:f1:d8:10:12:d2:18:07:cd:
5e:31:ba:51:f1:99:76:39:e5:03:db:8a:d9:64:b2:
55:98:94:37:bc:3e:51:a8:b4:2f:e7:4b:67:3d:af:
04:dc:ff:58:41:ee:9c:15:7e:9f:2f:76:77:46:6c:
4f:55:a2:a1:69:cd:80:7d:75:db:85:9c:6b:e0:10:
47:04:ab:ca:1f:3a:1c:11:a4:f0:ab:18:e9:fa:22:
65:19:55:93:a3:8b:16:cd:c5:d1:e6:89:7c:71:03:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:18:37:F7:D6:62:9B:C7:C8:12:B7:4A:E9:88:E1:F5:B7:AC:82:3F
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/LBg399Zim8fIErdK6Yjh9besgj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.211.0/24
Signature Algorithm: sha256WithRSAEncryption
be:9e:31:77:6e:66:05:61:ae:61:f1:0f:f0:5c:51:9e:68:4c:
c9:79:a2:ee:a7:ef:a9:1e:a9:fb:36:68:b7:25:b4:d3:c8:bd:
a2:f5:f1:d3:99:bc:32:89:98:02:88:43:e9:d4:93:9b:be:fb:
ed:6e:14:b7:4f:c8:ab:b8:c3:61:65:30:ba:76:62:f7:c0:41:
4a:25:25:20:ad:29:89:96:b8:93:ed:46:cf:7d:74:08:1e:e1:
9b:43:a9:d3:6f:57:32:f1:8d:c2:de:f9:4a:4f:1d:f4:17:75:
88:d6:d1:f5:26:87:70:9d:8e:9e:2f:cc:83:95:1f:cb:f6:1c:
b8:49:22:72:bc:85:1e:a2:42:67:1c:4c:27:2c:65:5b:ff:4b:
90:61:8b:b4:af:ae:ff:9a:7b:80:d5:fb:00:f0:ff:38:5a:95:
e9:6a:10:f9:62:b8:36:78:54:ac:ad:9e:f5:d7:31:b2:fb:44:
be:b3:51:0d:eb:d4:c6:d3:9f:cb:ba:5c:33:37:fe:10:b7:cb:
b0:dd:83:db:b1:e5:0a:3b:cc:5d:d8:3a:22:24:ac:9f:c4:b9:
95:81:fd:93:a0:3d:66:7f:b9:44:40:79:ca:87:4f:91:c2:84:
5e:fc:74:9b:58:7e:e2:0f:a6:ec:7c:9f:26:04:4e:36:74:13:
28:a6:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:45:53 2024 by rpki-client on console-ams.rpki-client.org