Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ljpY5ujByJ0zT5XfwKoKWJl-UrU.roa
File: ljpY5ujByJ0zT5XfwKoKWJl-UrU.roa (raw, json)
Hash identifier: TTtTv4KiuU9QNZ1icGbYNnxZrUMvfNsO4dY2FpYJxlg=
Subject key identifier: 96:3A:58:E6:E8:C1:C8:9D:33:4F:95:DF:C0:AA:0A:58:99:7E:52:B5
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 018CC94BE48287425786AC9CD12BFD5D13CE
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ljpY5ujByJ0zT5XfwKoKWJl-UrU.roa
Signing time: Tue 02 Jan 2024 08:30:43 +0000
ROA not before: Tue 02 Jan 2024 08:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200590
IP address blocks: 91.192.82.0/24 maxlen: 24
213.183.34.0/24 maxlen: 24
213.183.35.0/24 maxlen: 24
5.188.175.0/24 maxlen: 24
5.188.174.0/24 maxlen: 24
93.189.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:e4:82:87:42:57:86:ac:9c:d1:2b:fd:5d:13:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Jan 2 08:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963a58e6e8c1c89d334f95dfc0aa0a58997e52b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:af:d9:b9:68:3c:a8:6b:82:dc:92:41:59:
78:eb:ed:da:29:a7:d7:d1:41:a9:5b:e2:62:65:cc:
0f:ed:16:2a:39:14:96:46:75:6e:f5:3d:2f:f4:dd:
b9:db:e3:e1:d6:59:e8:f8:96:8e:36:86:7e:70:ec:
9a:c5:9c:f9:b4:77:8d:33:72:73:2b:a5:b0:e9:a2:
e4:26:50:d5:b3:34:c3:08:60:2d:60:d0:89:f4:5d:
5e:1f:9c:f1:18:43:f2:2f:36:5d:2b:41:d6:76:2d:
44:b0:39:7c:c3:3b:bc:3b:07:25:d4:6b:f4:10:7e:
ff:6b:f0:87:9a:f4:41:60:81:19:e2:b0:79:f3:bb:
f8:06:9d:a1:dc:9d:7b:6d:bd:d3:4b:84:92:cb:70:
94:cc:2e:4e:39:6e:f4:77:b0:a6:bc:d6:e2:75:1b:
09:60:35:78:10:06:63:04:24:59:7a:8b:be:37:43:
0d:47:c7:6d:67:30:d9:22:8f:5f:c6:b8:7d:07:b3:
ee:a7:c9:59:e0:85:71:50:da:00:23:b2:5f:56:a6:
31:5b:b3:02:8f:4f:0e:bf:ca:c8:e3:6c:77:8d:66:
a6:48:ca:1c:79:dc:4d:a7:55:7a:6e:65:b5:3b:9f:
71:5e:a4:5b:0f:51:75:25:f7:4c:d8:54:33:7a:8b:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3A:58:E6:E8:C1:C8:9D:33:4F:95:DF:C0:AA:0A:58:99:7E:52:B5
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ljpY5ujByJ0zT5XfwKoKWJl-UrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.174.0/23
91.192.82.0/24
93.189.59.0/24
213.183.34.0/23
Signature Algorithm: sha256WithRSAEncryption
04:87:8b:30:a0:24:61:be:8d:e7:f2:12:37:94:32:15:df:0b:
82:bd:ea:45:41:2c:2b:27:f2:26:0a:e9:28:80:ca:28:49:7d:
e7:93:28:7a:6c:a0:45:e8:35:3e:5f:a0:df:c1:e7:66:19:7d:
cc:28:ff:f5:56:09:a8:08:c9:a4:6e:42:8d:2a:93:00:f0:48:
4f:e0:d5:0b:a9:86:b6:df:64:2a:cd:b9:0b:7f:0c:96:87:1d:
57:0f:1b:ef:41:b5:86:ab:42:c7:a3:3d:b9:55:b7:fa:dc:d8:
9e:b2:09:a3:3c:d2:e0:f2:a7:5e:98:d2:56:49:ce:e3:1f:32:
9b:97:fc:5b:fb:09:af:0e:bb:38:dd:d2:d9:55:1f:1f:c5:a5:
b0:38:d0:30:61:df:97:c9:5f:13:18:e1:c5:f5:34:99:89:df:
15:a5:a8:59:58:91:47:48:b2:86:3e:1a:f6:96:b2:1b:fa:10:
34:5b:df:20:fb:8c:b9:95:58:1c:9c:cc:4c:68:8b:bf:b0:13:
d1:6b:f4:3f:a8:06:1c:8d:ec:66:7d:0f:4b:5e:5d:5f:55:f5:
c6:bd:5f:0e:74:70:db:b1:bc:c0:5b:65:01:20:20:14:37:80:
c3:03:25:71:83:11:56:75:17:ea:c8:76:63:fa:2e:5d:84:47:
a7:b2:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 19:36:57 2024 by rpki-client on console-fra.rpki-client.org