Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/lsmhbGlscHUEyKznAVZQkBw1trc.roa
File: lsmhbGlscHUEyKznAVZQkBw1trc.roa (raw, json)
Hash identifier: r/HBK5vJX9LTbfOhhX8j+1uHX5flFgGLiNwzmpbeBas=
Subject key identifier: 96:C9:A1:6C:69:6C:70:75:04:C8:AC:E7:01:56:50:90:1C:35:B6:B7
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 018CC42533C2458C5CE01C83BC820A5D2AF6
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/lsmhbGlscHUEyKznAVZQkBw1trc.roa
Signing time: Mon 01 Jan 2024 08:30:21 +0000
ROA not before: Mon 01 Jan 2024 08:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201494
IP address blocks: 31.177.60.64/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:33:c2:45:8c:5c:e0:1c:83:bc:82:0a:5d:2a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c9a16c696c707504c8ace7015650901c35b6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:42:4f:ae:72:b9:db:b5:e0:10:85:c8:c8:
45:80:a9:8d:a1:61:ff:42:05:17:4a:0e:50:10:87:
e8:a3:cd:66:a0:63:d4:04:6f:ef:59:29:0e:b4:61:
a5:b3:2d:ea:6d:d3:fb:ed:2a:e7:51:8e:02:0f:3e:
4f:ba:41:60:26:a5:be:fd:34:1d:01:95:27:7d:62:
23:db:00:22:dd:15:a4:a6:a2:c5:27:2a:4b:a4:9b:
a1:c1:a9:03:c6:f2:0d:49:24:1a:1a:9e:d3:65:fd:
9d:16:5d:0e:5d:b9:8d:95:f7:ab:f0:9a:e2:61:b2:
69:ba:28:66:a3:b0:2b:b5:bf:7a:2a:a0:a1:a2:44:
09:be:d1:45:c0:e6:6b:12:1e:2e:75:2b:2e:7e:18:
e1:49:05:7f:90:80:80:b1:01:56:2d:cd:17:93:b3:
49:fb:ad:5c:32:b5:90:c7:83:fe:c5:59:2f:8a:84:
83:8f:6a:a3:74:bf:49:25:92:73:a9:0b:0c:ff:ce:
a0:ce:49:38:e5:77:43:93:61:3f:e2:43:f2:cb:a1:
63:6e:e1:b4:93:0f:b5:db:d6:e1:81:97:17:c3:d7:
b2:aa:a8:d5:60:c5:44:aa:6a:25:9e:74:f5:27:04:
ca:bd:b2:08:84:46:84:e6:aa:8a:fb:7f:5e:bc:93:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C9:A1:6C:69:6C:70:75:04:C8:AC:E7:01:56:50:90:1C:35:B6:B7
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/lsmhbGlscHUEyKznAVZQkBw1trc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.60.64/27
Signature Algorithm: sha256WithRSAEncryption
94:99:76:88:cb:c8:81:0a:e3:64:64:67:ea:38:1c:dc:6a:fb:
7b:bd:15:fa:c6:02:bf:e6:8f:e6:9e:ee:e1:88:48:d3:8a:5d:
ee:7d:cc:67:0d:e7:1f:16:54:ef:b2:4e:b7:97:3f:f7:36:5c:
29:31:ea:3a:3a:bc:2a:b0:70:4f:62:ea:44:98:a8:79:93:1a:
7d:79:d1:bd:53:67:81:a1:62:e9:5a:d4:12:aa:27:83:be:d9:
56:5d:59:7c:f9:89:d7:44:3a:99:2d:b8:16:cb:db:d7:f7:49:
44:2b:aa:15:b1:9b:f0:73:01:00:85:dd:cf:a0:cf:81:0a:3b:
1b:ea:0c:88:03:16:33:e7:c9:e0:41:fd:bd:b2:c3:dd:8f:8d:
52:12:b3:0e:3d:6f:60:e4:7a:c0:94:3b:72:b0:03:9a:fd:e8:
2a:df:16:cc:53:cc:04:4b:8d:af:a8:77:63:c5:f8:13:b1:3e:
cf:a5:0e:b2:21:0e:fa:fb:73:df:92:af:7b:cd:61:fd:7e:d2:
d0:11:09:16:8c:ab:1b:45:07:5f:23:b9:6d:01:d7:2e:50:90:
fa:ec:78:52:b8:ce:9b:34:a9:88:a3:9a:ae:3b:ff:8e:65:7a:
df:2c:06:29:53:aa:93:34:3d:b6:18:29:1d:73:94:94:7d:a2:
e5:08:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:34 2024 by rpki-client on console-fra.rpki-client.org