Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lORdfaLJTSsDUpemWAfYPd3YE7g.roa
File: lORdfaLJTSsDUpemWAfYPd3YE7g.roa (raw, json)
Hash identifier: hk1VxgkjQw4V6PJl3cPT+ITviZcfXJb/Vhcf55fu19E=
Subject key identifier: 94:E4:5D:7D:A2:C9:4D:2B:03:52:97:A6:58:07:D8:3D:DD:D8:13:B8
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D567F88A4D285180813AB5B77FEAE
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lORdfaLJTSsDUpemWAfYPd3YE7g.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39135
IP address blocks: 212.5.130.0/24 maxlen: 24
212.5.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:56:7f:88:a4:d2:85:18:08:13:ab:5b:77:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94e45d7da2c94d2b035297a65807d83dddd813b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:10:00:44:8d:02:55:dd:f9:f0:5c:c8:eb:
96:92:fa:ec:55:3b:ec:55:e4:ea:97:70:a1:c4:b6:
fa:33:3c:5f:8d:89:4c:51:b5:0f:d2:52:b8:8e:2d:
62:8c:d7:7c:0a:f9:f9:fa:8a:e4:ac:4b:c1:08:1f:
eb:f3:a8:21:c7:a3:57:d7:56:a9:b5:cb:f0:d1:4e:
7d:14:64:d7:85:4c:5e:6c:d1:33:1e:c1:8c:cc:c0:
dc:ea:5e:0e:5b:96:31:33:17:bb:8b:6d:e4:82:84:
84:3d:de:6c:de:25:2e:20:6b:4a:fb:11:04:8d:3c:
c2:a3:f7:6f:d1:9b:f8:2c:cd:43:9f:74:fb:2f:ba:
c8:c6:7e:0f:c4:c4:ee:e5:6a:69:06:b2:b8:cf:26:
27:40:ab:82:2c:b7:4c:e5:1a:f1:25:18:61:1c:11:
c4:0e:43:e7:b7:e5:6c:4c:6f:19:ae:99:89:da:58:
81:a5:ab:21:dc:82:0a:45:2e:a6:e7:39:e1:66:e1:
e8:2b:63:a8:13:dc:1b:86:0e:70:63:26:af:a2:75:
56:fd:bf:cf:3a:a5:84:f5:c7:e0:a7:b4:63:01:02:
b0:7d:7c:ca:c7:fc:b9:47:81:62:ce:a8:45:56:6b:
ab:30:4c:59:3f:33:a6:1a:d7:e8:be:dc:c3:71:63:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:5D:7D:A2:C9:4D:2B:03:52:97:A6:58:07:D8:3D:DD:D8:13:B8
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lORdfaLJTSsDUpemWAfYPd3YE7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.129.0-212.5.130.255
Signature Algorithm: sha256WithRSAEncryption
a0:6a:99:d1:b8:29:8b:8d:62:99:8b:06:f7:b5:e5:57:1e:0f:
c4:ed:9a:32:71:c5:7b:c5:26:5e:6a:8e:cf:0e:8f:1c:b6:f9:
08:0f:0a:f1:af:8b:34:40:94:c1:96:bb:b7:21:25:56:21:00:
47:ed:06:97:fc:1c:41:c8:7d:71:ed:ec:88:3e:05:1a:54:1a:
91:de:5e:22:8e:fc:54:cb:74:76:37:4e:84:af:fd:fe:c9:67:
05:01:ad:84:c1:4c:c9:79:4c:9f:91:c9:e7:0c:1a:f1:70:1d:
b9:45:51:eb:69:88:56:4c:a4:ce:d6:c1:bd:e4:cd:d8:df:97:
02:cf:0b:8c:93:c1:d7:eb:13:33:3e:44:cd:08:18:18:47:15:
01:71:53:5f:7f:0c:fc:79:ac:a4:f1:3d:ef:ab:2f:78:60:0a:
66:61:c9:0a:f0:9f:79:a0:6e:78:fc:39:2b:71:b2:e1:3f:a0:
53:70:d2:d5:3a:3a:d0:62:92:7b:63:67:83:d0:7f:4a:d8:96:
6d:bd:47:58:96:b3:9e:9a:61:f4:cc:8a:1a:48:5f:d5:37:f0:
1e:c0:fc:d9:07:36:47:85:45:c0:93:2a:45:e8:11:f1:63:37:
b4:f6:0f:b4:fd:ee:ce:7e:0e:26:86:6d:20:10:94:6c:1e:3b:
24:b0:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:21:23 2024 by rpki-client on console-ams.rpki-client.org