Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/LSPPCdR7ndRuzHRFL_KMzKb1FnM.roa
File: LSPPCdR7ndRuzHRFL_KMzKb1FnM.roa (raw, json)
Hash identifier: eJnG3LZbJGrzURd7j5QEhkbE/MoUlDQaJd/GqNDEkfE=
Subject key identifier: 2D:23:CF:09:D4:7B:9D:D4:6E:CC:74:45:2F:F2:8C:CC:A6:F5:16:73
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 018CC56ED5944CA5360FF9B4B86BC9B047E9
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/LSPPCdR7ndRuzHRFL_KMzKb1FnM.roa
Signing time: Mon 01 Jan 2024 14:30:24 +0000
ROA not before: Mon 01 Jan 2024 14:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216458
IP address blocks: 2a13:ce40:6666::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d5:94:4c:a5:36:0f:f9:b4:b8:6b:c9:b0:47:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d23cf09d47b9dd46ecc74452ff28ccca6f51673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:cd:12:56:3d:3e:29:89:03:77:35:86:e9:
03:5b:f8:07:29:9c:e9:02:ac:3c:42:6e:a5:87:c5:
1f:b9:33:5c:89:bb:02:0c:a8:8c:c3:00:c3:f5:ec:
9d:70:80:46:17:a6:e1:fd:51:7e:ce:b2:1c:cb:59:
0b:6a:cd:4e:06:a0:8c:85:7a:09:0e:05:29:f2:59:
50:23:87:8b:f7:f7:d7:38:34:31:23:6c:3f:46:2b:
56:3d:59:a8:aa:b6:4d:76:9d:12:45:02:a5:77:bb:
01:8a:43:b5:1e:87:cf:dc:f2:22:a1:54:ae:53:65:
ed:c7:7f:27:52:72:36:8d:98:50:bc:4f:f6:53:e4:
9c:0d:a0:67:f7:47:e5:87:36:ea:3b:dd:f5:a2:d6:
67:1c:48:f3:cd:a5:2d:94:9c:c7:e4:2f:7a:da:c0:
e2:2d:16:62:ec:9a:30:9c:1a:12:9c:9d:29:31:12:
c3:ee:d9:3d:8e:0e:b3:9b:f7:dc:e8:70:5e:95:22:
6b:d4:c0:94:b3:22:26:c8:82:a5:4a:ec:19:66:46:
55:5b:7c:e7:d1:8b:95:b9:75:70:4f:a7:20:18:a6:
e7:a5:29:58:c1:8b:bb:c2:c0:09:5b:9b:75:8e:07:
a4:be:60:bc:e4:c7:6c:ef:fa:19:52:9c:1a:ce:84:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:CF:09:D4:7B:9D:D4:6E:CC:74:45:2F:F2:8C:CC:A6:F5:16:73
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/LSPPCdR7ndRuzHRFL_KMzKb1FnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ce40:6666::/48
Signature Algorithm: sha256WithRSAEncryption
64:12:f2:1b:8f:d9:e1:3d:27:76:57:28:46:37:a4:89:7c:bb:
6f:c8:30:30:0a:e0:87:ae:65:07:10:5b:eb:79:7d:c0:24:a2:
b9:f7:68:5a:7c:8b:d4:b4:dc:a8:eb:85:a6:1d:ea:07:01:cb:
36:d3:a5:b9:96:09:59:0a:15:18:d9:7b:de:00:0a:cd:c6:18:
df:87:09:b8:48:3c:1e:f0:9b:ae:3c:94:26:18:4a:53:8b:f7:
8b:dd:1b:7e:22:89:e6:39:10:28:cb:2a:3b:0c:96:c0:ba:87:
41:10:f3:00:ae:63:a8:50:f3:10:40:38:19:ce:f7:cc:44:c7:
9c:8a:e1:9f:fb:eb:5e:86:72:07:4e:e3:8c:47:9c:46:df:3c:
a0:3b:3d:66:ea:38:c2:b8:53:dd:59:19:20:1f:0b:e8:f4:40:
75:c2:cc:6e:0c:96:e4:f1:6e:43:45:3a:19:6d:b2:f6:31:dc:
02:a7:14:04:f6:ab:38:ac:72:50:28:30:2c:12:a1:8e:26:00:
b7:f7:10:57:a0:db:9f:b4:6c:5b:ee:5a:cd:82:6d:43:ac:cc:
89:8f:d1:c2:6f:e9:4d:03:a4:44:3b:3b:9e:42:30:4e:1f:fb:
0c:ad:4a:e2:46:75:87:d4:ba:e8:c3:21:74:4a:a9:25:5c:03:
66:3a:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:21 2024 by rpki-client on console-fra.rpki-client.org