Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/LptGUyfPoAX_4OuXh0cwnSMCObM.roa
File: LptGUyfPoAX_4OuXh0cwnSMCObM.roa (raw, json)
Hash identifier: VrBS31jgysyWnVUcV6+lUA7BrCt+/RESmJO9dynLfXw=
Subject key identifier: 2E:9B:46:53:27:CF:A0:05:FF:E0:EB:97:87:47:30:9D:23:02:39:B3
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 018CC49319C0BD534DBDF401F1C7B075858D
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/LptGUyfPoAX_4OuXh0cwnSMCObM.roa
Signing time: Mon 01 Jan 2024 10:30:23 +0000
ROA not before: Mon 01 Jan 2024 10:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212734
IP address blocks: 80.92.203.0/24 maxlen: 24
80.92.200.0/24 maxlen: 24
80.92.202.0/24 maxlen: 24
2a07:3a40::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:19:c0:bd:53:4d:bd:f4:01:f1:c7:b0:75:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 1 10:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e9b465327cfa005ffe0eb978747309d230239b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:e4:21:0a:e5:05:39:f2:a7:7f:ef:4b:04:
f5:96:62:05:e1:59:06:3e:a2:53:9f:70:90:4c:ed:
4d:7d:82:d0:30:c4:1a:5c:5f:ec:aa:93:15:19:33:
44:8c:df:89:1f:9f:9b:73:a2:dd:a9:de:ba:23:0d:
86:26:1a:48:ab:dc:01:38:32:4c:93:ec:a3:47:95:
78:74:50:05:7a:31:3f:be:da:7c:0e:9f:9a:c0:f8:
93:40:4f:af:7d:81:6e:ff:fb:cd:96:9c:dc:7d:47:
a0:8e:40:7f:00:19:8b:2e:c0:fc:5b:e2:4c:5d:13:
1c:ec:4e:a1:21:bd:17:0e:e7:d3:0b:bf:ad:ae:90:
ee:e7:92:ed:21:03:ad:2e:81:21:c5:31:97:2a:b3:
75:ae:47:83:9e:c8:fb:c2:1b:46:c2:eb:19:2f:c0:
38:c7:56:52:e0:ca:f8:dc:79:92:be:1c:aa:3f:2f:
f5:aa:a0:52:b3:1f:0d:95:41:67:73:56:e0:a5:b4:
a3:a0:f9:e3:6e:0a:ef:65:78:4b:99:58:91:bc:64:
c5:7b:89:26:9d:4a:2c:56:b8:7a:7f:eb:3c:15:fc:
21:4e:59:72:f5:e4:41:42:9d:35:f5:28:95:a8:14:
98:14:8c:3c:d0:e7:15:30:10:18:55:80:22:3f:e5:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9B:46:53:27:CF:A0:05:FF:E0:EB:97:87:47:30:9D:23:02:39:B3
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/LptGUyfPoAX_4OuXh0cwnSMCObM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.200.0/24
80.92.202.0/23
IPv6:
2a07:3a40::/34
Signature Algorithm: sha256WithRSAEncryption
57:82:dc:52:dd:88:26:66:27:b0:f2:2f:9f:18:d0:40:ba:8d:
c1:b2:30:78:f2:96:38:01:cd:79:98:ff:85:09:29:0b:aa:4b:
4c:d5:65:22:c5:e4:6c:9f:60:e4:bc:b6:ca:6f:54:c1:70:bf:
6b:e3:e0:be:3a:05:41:a3:95:2c:e3:3d:2a:7a:36:63:ec:03:
f2:df:1f:f2:b3:9b:d4:48:7f:5a:e8:a5:b9:10:a2:fa:9b:11:
01:63:be:53:84:87:cc:24:00:74:7b:f4:5b:5c:dc:5a:0b:fe:
b1:de:00:9e:c4:36:b2:e9:d4:3a:32:6b:56:49:a8:72:b2:69:
dc:59:8c:75:45:f2:ef:1d:69:9c:a4:8d:e5:46:ab:57:80:eb:
8e:2f:4b:49:1a:8e:5d:68:dd:0f:42:53:0b:5c:e4:2f:c3:cc:
bf:f7:0a:07:e9:c5:a8:be:7c:04:d6:2a:5b:9c:5c:39:d6:c5:
3b:46:22:88:11:9f:95:53:ed:96:31:4e:ca:94:f2:99:b9:6e:
1b:7b:41:cd:74:30:86:4c:df:0b:5d:cf:5d:4c:46:fd:ba:b5:
11:31:d4:d6:2a:dd:e2:22:b4:22:dc:13:09:74:ce:83:21:82:
1e:b6:fa:0d:fb:d7:46:e1:64:e8:03:3f:e0:b7:60:ef:c8:9b:
07:e8:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:39 2024 by rpki-client on console-fra.rpki-client.org