Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/L7lo6xCMcN9h5HzkPecZQbWmZlE.roa
File: L7lo6xCMcN9h5HzkPecZQbWmZlE.roa (raw, json)
Hash identifier: CALmqYd8w2/9CNPzyE+i7j4M0r02O9Z7hSZclAJFmrI=
Subject key identifier: 2F:B9:68:EB:10:8C:70:DF:61:E4:7C:E4:3D:E7:19:41:B5:A6:66:51
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 018CC42521329030D4F6602F98F05C9E39D9
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/L7lo6xCMcN9h5HzkPecZQbWmZlE.roa
Signing time: Mon 01 Jan 2024 08:30:16 +0000
ROA not before: Mon 01 Jan 2024 08:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 146.66.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:21:32:90:30:d4:f6:60:2f:98:f0:5c:9e:39:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jan 1 08:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb968eb108c70df61e47ce43de71941b5a66651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:bd:c2:c4:96:fa:c1:f6:47:05:2c:0e:85:
31:a5:59:3b:8f:98:2c:07:10:01:1d:19:69:4c:d5:
b4:20:1f:75:e0:2f:7e:67:47:81:21:4e:e8:13:f6:
44:a1:52:f1:ae:ad:61:c1:b7:3d:17:32:54:a4:b7:
12:ec:2b:19:b7:c9:62:f7:f2:5a:7a:4c:b7:f1:52:
65:7b:79:b4:ea:9a:29:c3:7d:1f:df:4e:3c:9c:50:
9c:12:48:a7:cd:81:5b:6e:73:04:e9:46:42:2a:8f:
ee:04:f0:9d:f2:1e:e8:74:29:3d:f0:b3:fe:57:24:
b9:e8:bf:c7:db:96:5d:e4:a0:cd:da:e0:96:de:69:
50:ed:b7:6b:e2:97:99:ad:90:eb:e1:cd:99:51:bb:
ca:e4:9d:17:37:07:05:b6:43:8b:9f:ae:1e:04:67:
b0:88:4b:f3:36:53:16:b3:91:74:5b:b8:01:13:a3:
4d:c2:0f:47:3d:6c:56:dd:4b:15:aa:cb:f8:9e:04:
1d:bc:6b:12:0a:e8:77:fe:fe:5f:45:aa:b8:91:56:
6b:ba:e0:73:08:7f:43:4c:e1:33:46:d0:a7:e0:e1:
ec:2a:70:e5:34:04:17:6c:d7:f0:c6:7b:2a:3a:8f:
9d:0f:4f:a4:68:12:1c:3a:a0:8b:03:8d:94:43:33:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B9:68:EB:10:8C:70:DF:61:E4:7C:E4:3D:E7:19:41:B5:A6:66:51
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/L7lo6xCMcN9h5HzkPecZQbWmZlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.3.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9d:f9:ea:dd:f5:9d:fc:ac:cc:9e:fa:47:37:6c:04:c1:fc:
95:0f:62:0f:15:f2:6f:58:70:c1:5f:06:e0:b9:d4:c3:7b:ef:
5b:95:a3:77:4b:bb:eb:80:45:44:fa:8f:55:9a:18:e3:dc:5a:
76:cc:32:ca:66:44:6b:16:ea:4c:54:c1:77:62:d4:2d:31:4d:
28:b0:ce:5c:a2:2f:ce:a0:c4:37:0b:ab:3e:7c:2b:7d:ab:74:
cc:0e:3a:57:ba:2b:d7:5b:f4:f9:76:b8:2e:55:14:6c:92:5f:
32:0d:d5:44:7a:11:81:c2:8b:1d:9d:9c:4f:39:45:85:f9:fb:
99:d0:88:2f:42:cc:64:53:ca:59:5c:77:d1:02:3e:c3:ef:16:
f4:35:ca:67:8a:07:62:9b:0e:b4:68:d1:8e:1f:a8:c5:70:cd:
c6:60:eb:eb:9f:39:cf:7e:0c:4e:be:4b:2f:0b:59:73:dd:ee:
12:1f:67:a7:85:0b:28:b4:ad:e5:fb:65:d2:25:36:bd:87:e2:
93:95:be:72:d5:6d:d2:4a:9c:bd:c5:7d:ed:9a:1a:e2:69:98:
0d:70:e2:07:d8:d8:ff:52:7a:f8:5c:61:e9:c5:4f:b4:ab:e8:
b9:aa:4b:3f:8a:8c:13:05:ef:6a:25:cf:52:7e:28:c1:4e:c0:
6f:9e:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:57:35 2024 by rpki-client on console-ams.rpki-client.org