Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/lrogFmyX4sTB3IkWct1SZZ1P_Uk.roa
File: lrogFmyX4sTB3IkWct1SZZ1P_Uk.roa (raw, json)
Hash identifier: XeNrtpzKKHaNWbxqjSbF28pLmWygQ6WrE8Lipd59t6w=
Subject key identifier: 96:BA:20:16:6C:97:E2:C4:C1:DC:89:16:72:DD:52:65:9D:4F:FD:49
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018DAC97BD29C6229D2CCACB3BFA940F7C01
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/lrogFmyX4sTB3IkWct1SZZ1P_Uk.roa
Signing time: Thu 15 Feb 2024 11:47:21 +0000
ROA not before: Thu 15 Feb 2024 11:47:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215493
IP address blocks: 2a0d:f407:1006::/48 maxlen: 48
2a0d:f407:1017::/48 maxlen: 48
2a0d:f407:1025::/48 maxlen: 48
2a0d:f407:1033::/48 maxlen: 48
2a0d:f407:1049::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:97:bd:29:c6:22:9d:2c:ca:cb:3b:fa:94:0f:7c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Feb 15 11:47:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ba20166c97e2c4c1dc891672dd52659d4ffd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:5c:b1:dc:51:e6:12:ed:bb:c7:e1:24:b7:
fc:c3:2f:0a:b6:4b:ef:e7:bc:0b:a0:e0:7b:a7:9a:
3c:9d:11:c8:0a:f3:cb:0b:37:fa:fe:ed:0a:f6:22:
e4:6f:d5:28:dc:59:e3:c1:dd:81:b6:d7:19:ae:7c:
49:de:b5:b9:21:c3:d2:40:0e:8e:ea:b9:a7:10:5e:
15:0b:31:3d:98:3f:3b:54:25:56:9f:67:0f:ad:6d:
a7:48:89:0e:53:4e:a8:64:d9:b2:95:33:e9:21:0f:
b7:3a:76:fb:0e:7b:d7:a6:23:33:d5:b4:8c:5d:6f:
c2:27:e2:ab:c6:5c:82:22:6d:06:1d:1c:ec:9f:22:
95:e2:bb:c0:86:6a:f6:eb:76:69:54:f7:a5:dc:cb:
b0:56:8c:d1:7e:d5:0d:29:de:f5:2d:11:5f:a5:8e:
a2:2f:93:e7:ba:49:3e:03:9b:67:18:1d:ef:09:87:
91:ea:44:f4:d6:27:c9:47:1a:cf:1f:9c:be:3a:4c:
53:88:23:e9:56:50:b3:ca:0c:6d:a0:39:b1:52:7a:
e8:54:1e:38:14:14:63:0c:ba:8e:cc:a7:2c:a1:91:
ec:3d:95:4f:44:01:c3:aa:f6:00:bf:d8:25:68:05:
4f:3f:99:d3:e5:c2:b4:a1:9e:93:c4:28:be:d4:d7:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:20:16:6C:97:E2:C4:C1:DC:89:16:72:DD:52:65:9D:4F:FD:49
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/lrogFmyX4sTB3IkWct1SZZ1P_Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1006::/48
2a0d:f407:1017::/48
2a0d:f407:1025::/48
2a0d:f407:1033::/48
2a0d:f407:1049::/48
Signature Algorithm: sha256WithRSAEncryption
b0:1d:a1:ba:4f:a7:2a:64:88:67:83:52:65:36:41:e3:45:42:
f0:d4:0a:3a:79:e0:67:8f:d1:63:3f:86:78:e4:92:2e:53:72:
86:02:08:81:9e:c4:4b:37:9a:80:60:66:57:99:53:14:33:15:
86:99:c6:6e:d3:dc:88:82:18:13:66:31:04:f3:f1:b2:06:b9:
d9:7a:02:4f:90:86:86:ad:4e:d4:49:37:c5:31:72:9c:15:fd:
fd:f5:f2:bd:e2:a4:58:46:97:ff:34:54:0a:e4:f6:c8:ef:51:
2f:5e:5b:22:f3:28:97:55:04:81:c0:e8:58:29:17:40:f2:09:
50:b1:c0:71:cc:95:de:96:38:15:a5:45:92:3c:6c:11:be:8e:
38:16:65:14:68:4f:99:04:b4:1e:df:22:d7:73:11:64:c1:58:
32:62:70:2b:db:ea:98:3f:80:31:29:e1:16:b2:0d:c1:da:8d:
13:ba:53:6e:74:55:5d:67:6d:49:f7:91:33:fb:d4:18:5b:57:
4d:47:fb:cb:55:97:8d:dd:8a:6d:90:83:01:26:00:73:c9:ef:
7e:3d:43:71:61:62:ae:31:14:95:ab:de:26:41:3f:3e:a0:9a:
c7:ee:7d:94:81:cc:ee:a0:9f:20:30:d2:16:3a:a2:76:48:6a:
b7:02:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:03:08 2024 by rpki-client on console-fra.rpki-client.org