Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LFlmyoDBxqg3rTWFl-nhobPneEs.roa
File: LFlmyoDBxqg3rTWFl-nhobPneEs.roa (raw, json)
Hash identifier: RwvpbDEv3NbJMrHnQFSmzeX+PpyRYH815wIZmgUZuBo=
Subject key identifier: 2C:59:66:CA:80:C1:C6:A8:37:AD:35:85:97:E9:E1:A1:B3:E7:78:4B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC23BDF1BEB20204443F6BCBD5455F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LFlmyoDBxqg3rTWFl-nhobPneEs.roa
Signing time: Tue 02 Jan 2024 10:33:19 +0000
ROA not before: Tue 02 Jan 2024 10:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41108
IP address blocks: 2a0f:ea40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:23:bd:f1:be:b2:02:04:44:3f:6b:cb:d5:45:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c5966ca80c1c6a837ad358597e9e1a1b3e7784b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:54:94:34:33:71:e4:7c:86:cb:6e:45:14:
69:bb:65:60:20:08:34:ad:88:b6:eb:0b:e5:7f:26:
80:9f:91:21:1b:fe:b9:f8:89:da:6f:e7:9d:3f:5f:
f1:76:d7:3e:ab:18:4b:6c:ab:a9:4d:c6:69:96:09:
4b:87:99:3b:8f:20:47:04:fd:b4:a7:d4:ed:75:c5:
be:4a:ff:ed:41:a8:bb:5c:28:3b:6e:f1:37:e1:cc:
b1:63:85:d6:86:77:16:c8:0b:2c:f2:10:38:64:a8:
20:79:d2:ad:6f:7d:68:bc:2c:39:36:fb:e0:a7:9c:
46:65:0b:88:19:f7:19:3e:0b:18:7c:37:d2:65:b6:
b7:0a:9d:6e:1c:1b:88:53:e3:75:b7:79:5b:0f:bf:
0d:00:07:1b:79:e7:4b:cf:36:64:ff:92:8d:a2:ed:
27:e8:4a:2c:59:c1:0d:88:b5:51:66:3d:ce:74:ea:
71:e7:90:eb:a8:aa:cd:9e:87:86:e7:13:a6:9a:b4:
58:71:6e:cc:52:b6:ea:19:c9:5b:46:b1:c2:53:ed:
ad:58:b4:45:24:5b:38:a6:86:a9:08:e4:87:5c:0b:
2f:76:4c:72:a9:11:35:a4:aa:15:1a:7f:13:a2:23:
0f:ef:b8:58:c5:f6:88:de:e6:de:01:e6:3f:cb:b6:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:59:66:CA:80:C1:C6:A8:37:AD:35:85:97:E9:E1:A1:B3:E7:78:4B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LFlmyoDBxqg3rTWFl-nhobPneEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
ad:66:d6:55:4b:4d:98:f0:3a:75:be:66:29:0d:a7:b1:91:ad:
92:04:43:1f:2e:2a:46:27:89:e4:ef:21:c7:92:50:e6:89:10:
08:42:11:17:30:7c:16:f3:fe:a1:c4:0f:ff:82:ef:bc:18:81:
ce:90:48:da:d4:45:f0:d7:a1:2d:2b:45:ec:50:47:d4:4e:80:
19:e1:3d:cf:4b:9e:3f:fc:a4:e3:76:6b:95:15:76:b2:72:db:
ac:22:a7:0f:ec:7e:0e:15:00:3f:c6:b5:6b:20:67:a7:ba:87:
5b:90:6c:9e:b9:25:57:5f:9d:fa:24:8a:a8:2e:4f:7a:97:cb:
8b:e3:1d:51:db:e2:ba:e5:dd:fa:03:46:20:3d:1b:24:68:8c:
aa:87:99:e9:7b:09:30:24:5c:6e:89:d5:0b:fe:7c:27:03:49:
db:18:46:ea:1e:03:69:05:85:1a:88:2b:17:fa:58:8f:f4:f9:
a3:34:14:65:1b:67:b2:e8:25:b0:bd:6a:6b:12:6b:c6:a7:6d:
6c:fe:70:c0:be:95:83:3f:23:49:00:ad:2e:0c:e3:ea:bf:4b:
f0:5d:25:76:6a:17:eb:c8:6a:e8:79:d1:18:4d:62:c8:45:10:
87:4e:e5:c1:ad:ed:6d:c7:ae:2e:bd:23:92:0c:e9:93:b2:86:
38:3f:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:29:13 2024 by rpki-client on console-fra.rpki-client.org