Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/L0CUjuF1aGVClAO2_nhsJcCy-6Y.roa
File: L0CUjuF1aGVClAO2_nhsJcCy-6Y.roa (raw, json)
Hash identifier: zewS1FtW6lbA4f6HMfpZt7dDe3hkmmHfj5TveLv2TTU=
Subject key identifier: 2F:40:94:8E:E1:75:68:65:42:94:03:B6:FE:78:6C:25:C0:B2:FB:A6
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 018E60FEF3CBDDEAD3BD41431A79D2CA19B1
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/L0CUjuF1aGVClAO2_nhsJcCy-6Y.roa
Signing time: Thu 21 Mar 2024 12:31:44 +0000
ROA not before: Thu 21 Mar 2024 12:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29243
IP address blocks: 80.83.0.0/20 maxlen: 20
109.163.208.0/21 maxlen: 21
185.168.212.0/22 maxlen: 22
2001:1430::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:fe:f3:cb:dd:ea:d3:bd:41:43:1a:79:d2:ca:19:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Mar 21 12:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f40948ee1756865429403b6fe786c25c0b2fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:38:a1:2f:3c:d9:9b:64:68:5b:f6:11:56:
ee:d3:3c:d1:04:98:11:fe:34:21:5f:a5:74:b8:8b:
75:bc:00:30:58:4b:2b:64:38:d1:23:14:ff:fc:2b:
f6:1f:40:f5:a7:fd:29:76:60:b9:dc:44:c9:db:46:
32:7a:bc:c6:94:31:40:2b:0d:57:80:b6:90:46:63:
ea:83:fb:cc:48:f0:ed:a7:73:13:ef:c0:18:c5:45:
f0:69:bb:0e:c8:eb:6e:88:de:44:bc:9f:57:4f:d3:
9b:ad:b0:d9:a3:b8:06:2b:ed:8c:47:4e:46:75:aa:
94:7c:49:39:76:d9:d5:8d:bf:86:6a:b3:c3:8e:44:
27:b7:69:5c:a8:41:1c:ac:f0:c7:09:dd:2b:1b:cf:
17:69:ed:06:5f:77:fc:84:64:b5:f5:80:f6:bf:d4:
56:d1:72:ed:a2:9f:b0:ab:41:4d:e6:2d:ef:58:33:
a6:5c:fc:73:7d:fc:cf:4c:e7:85:4b:24:ec:4e:b7:
b2:23:4d:7d:94:63:39:19:65:b1:3a:87:4a:0f:9a:
44:dd:49:26:c8:ab:94:ad:6f:3d:42:3a:82:df:05:
46:ff:10:a7:c8:37:e4:11:19:27:6c:dd:8f:4e:5d:
da:b0:8d:46:ac:e4:c7:65:d2:cf:cd:4c:35:f5:9d:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:94:8E:E1:75:68:65:42:94:03:B6:FE:78:6C:25:C0:B2:FB:A6
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/L0CUjuF1aGVClAO2_nhsJcCy-6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.0.0/20
109.163.208.0/21
185.168.212.0/22
IPv6:
2001:1430::/32
Signature Algorithm: sha256WithRSAEncryption
02:32:42:d2:ec:a5:11:72:b1:d6:9c:a2:8e:af:e1:df:f3:e5:
f9:65:f7:0c:ba:5d:b4:0b:ff:de:57:9a:23:3a:dd:3a:05:b9:
91:d9:b9:53:8a:90:62:94:16:2f:60:56:4e:4f:72:a6:be:90:
1e:ea:02:6b:87:a9:7c:4a:a1:07:dc:69:f9:ff:dc:20:03:fa:
7f:5b:9d:3a:2a:c7:85:a3:b6:a1:90:6a:2a:a1:11:e7:ed:cf:
b9:b8:23:fb:33:35:cd:90:c4:eb:9d:71:6a:a1:81:fd:3c:14:
6d:f3:f9:9b:e1:45:b9:c9:f9:88:b5:c5:8d:c7:a4:8a:af:24:
00:a6:86:cf:70:5a:b7:24:f6:87:a0:46:c5:22:f6:4d:f6:49:
b4:f9:2a:9a:d3:a1:e2:01:4b:84:c3:80:53:bf:9e:96:5e:00:
c6:40:2f:54:3b:a8:02:96:e1:1b:af:a9:9c:91:e1:75:7c:3c:
03:1a:02:8a:67:db:36:3f:bc:2f:c3:42:40:af:17:8c:17:7b:
a7:ae:48:22:32:e2:66:7d:e1:76:57:00:42:b3:7d:52:b8:39:
96:36:06:c7:73:e1:33:d3:3b:87:7b:2f:e1:08:ec:33:b0:81:
1e:77:f7:76:96:40:fc:f5:b5:1a:1d:07:a5:75:bb:27:27:65:
fd:45:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:21 2024 by rpki-client on console-fra.rpki-client.org