Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/LJN-Q6_cA7EHl3tl0JilNBul6l4.roa
File: LJN-Q6_cA7EHl3tl0JilNBul6l4.roa (raw, json)
Hash identifier: d3kDJJ83pI+gu4UalpKpd0PvEmc3jP11DfMPKuf2Uns=
Subject key identifier: 2C:93:7E:43:AF:DC:03:B1:07:97:7B:65:D0:98:A5:34:1B:A5:EA:5E
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 018CC6B83CFC5164493FB34D26270DE181F0
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/LJN-Q6_cA7EHl3tl0JilNBul6l4.roa
Signing time: Mon 01 Jan 2024 20:30:12 +0000
ROA not before: Mon 01 Jan 2024 20:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207967
IP address blocks: 77.73.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:3c:fc:51:64:49:3f:b3:4d:26:27:0d:e1:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 1 20:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c937e43afdc03b107977b65d098a5341ba5ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:e8:f7:e0:7d:85:5f:04:15:57:f8:0d:d6:
90:d9:88:85:78:a7:24:ab:f4:c3:4a:23:72:c9:29:
9c:a9:c7:41:80:51:97:e9:00:2e:a8:70:d1:da:ed:
df:f4:76:3b:e4:84:c0:82:40:dd:51:bc:65:b2:a5:
af:53:bd:59:03:93:01:15:43:a0:53:92:e3:21:23:
63:b7:64:a6:bf:7b:02:cb:17:e3:98:4b:1a:e0:cb:
94:2d:72:8d:a1:1e:ce:81:ab:65:48:d3:50:95:a9:
18:36:3d:77:49:39:fb:4e:a7:ac:84:20:a4:20:5d:
bb:ce:3e:8b:ed:76:2c:14:01:a0:40:20:74:f9:c4:
ed:e6:9f:80:e7:c5:ea:eb:af:93:73:6f:f9:d1:11:
71:fc:c4:7f:fd:7e:95:e7:a8:a3:82:a3:72:82:01:
41:74:f5:f6:a2:df:26:75:ee:7a:41:e2:e3:5a:cb:
1b:0d:37:01:66:88:88:fe:9b:70:d0:3c:ee:44:7d:
fd:08:7c:ac:cc:6e:1f:78:ac:f4:78:9b:2a:64:74:
93:0c:a7:58:55:79:b0:d6:7d:ca:e0:9a:d8:7e:c3:
ca:87:78:a8:64:b3:85:93:41:eb:38:05:b3:27:9a:
7f:15:e2:0f:df:5c:03:30:69:dc:f1:b9:c3:03:54:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:7E:43:AF:DC:03:B1:07:97:7B:65:D0:98:A5:34:1B:A5:EA:5E
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/LJN-Q6_cA7EHl3tl0JilNBul6l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:60:f0:74:6c:8f:ad:38:16:b2:19:3e:17:87:48:49:24:70:
1c:99:82:72:3e:7d:dd:5d:b7:ba:8a:4e:11:f3:25:90:73:2f:
7b:d7:01:66:5e:13:f8:c0:6e:00:64:f1:a5:bb:7d:29:da:ff:
75:59:28:b0:b1:7d:60:38:1a:d0:09:fd:6b:80:75:b6:0f:c8:
0b:a4:94:9d:af:19:09:74:1e:b2:e7:e1:cf:80:38:ba:4c:8a:
ef:4e:6f:db:1b:03:5c:17:c1:d0:23:53:20:25:ae:3a:6b:87:
e2:90:23:b0:cd:aa:76:a4:47:0a:0d:97:d0:bc:38:79:04:f7:
3a:c3:ad:c0:ff:ad:1b:76:ea:63:af:39:63:e1:ec:1c:24:9c:
3d:48:78:86:e8:7d:3e:a0:dd:f3:11:6f:31:df:dc:ed:5c:62:
4d:2b:66:0b:21:29:dc:98:73:8d:cd:7b:3c:1f:9d:21:de:d9:
cb:99:30:af:02:dc:c1:15:50:e7:ee:6d:54:b9:a3:c1:21:fb:
81:5e:e2:d0:e2:b1:10:85:9e:d5:50:cd:f1:61:09:aa:31:7c:
f2:e9:eb:54:6a:21:59:b6:34:a1:87:f2:81:14:60:24:5a:92:
53:fb:ee:59:07:4c:38:b2:f5:b3:83:47:c7:7f:c4:c1:5c:68:
8a:3c:6f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:46:41 2024 by rpki-client on console-ams.rpki-client.org