Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/llFGH8urj5iar5Vx967WXVcJGzM.roa
File: llFGH8urj5iar5Vx967WXVcJGzM.roa (raw, json)
Hash identifier: 9hm1Mb0do8HIozKCabIcq+968yFpgw9XQkqO8g/4ZfQ=
Subject key identifier: 96:51:46:1F:CB:AB:8F:98:9A:AF:95:71:F7:AE:D6:5D:57:09:1B:33
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 018CCA2A1C5ECEBE6DB5608F606BB2DB0111
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/llFGH8urj5iar5Vx967WXVcJGzM.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200482
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80:402::/48 maxlen: 48
2a12:3e80:200::/40 maxlen: 40
2a12:3e80:300::/40 maxlen: 40
2a12:3e80:500::/40 maxlen: 40
2a12:3e80:200::/39 maxlen: 48
2a12:3e80::/40 maxlen: 48
2a12:3e80:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1c:5e:ce:be:6d:b5:60:8f:60:6b:b2:db:01:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9651461fcbab8f989aaf9571f7aed65d57091b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:1b:ee:69:a9:9a:50:a2:99:8e:63:fb:62:
33:d4:3a:a7:e2:56:2f:7d:c1:06:6d:85:66:d7:d4:
4c:bd:d8:de:35:e5:cd:b0:27:63:c7:b6:fd:d4:26:
2b:22:e0:8c:e9:5a:c3:f5:3f:30:27:2e:a6:3e:97:
df:d9:ab:70:c5:89:bb:d4:80:4f:a0:98:e5:3e:01:
29:74:c0:74:53:6f:2f:08:5e:43:ad:9f:11:db:8c:
f0:2b:a4:0a:49:eb:78:91:80:b1:64:76:b1:88:2d:
a7:f2:3f:50:01:27:67:3a:60:a9:4e:42:06:b1:64:
72:ff:57:ca:3a:9d:33:45:42:ed:b3:12:8d:96:12:
4a:d7:44:73:f0:6b:c7:6d:c4:5f:11:70:5f:86:27:
c1:45:d0:46:7d:ac:58:8d:8c:80:e2:4c:62:c3:2a:
4d:a0:de:3c:f0:b7:08:fd:e6:78:73:a3:0c:42:be:
f2:2e:86:6f:23:e8:88:7f:ed:9d:2e:ea:99:f1:5e:
71:80:b2:4e:ae:74:60:07:87:8e:9c:10:b2:94:eb:
77:35:54:23:50:96:09:d9:98:23:43:9c:19:ad:bb:
e8:05:fa:12:0a:9e:2c:00:c9:b8:48:db:21:5c:51:
50:32:49:36:b1:14:49:cf:87:c4:45:2d:21:62:61:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:51:46:1F:CB:AB:8F:98:9A:AF:95:71:F7:AE:D6:5D:57:09:1B:33
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/llFGH8urj5iar5Vx967WXVcJGzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80::-2a12:3e80:100:ffff:ffff:ffff:ffff:ffff
2a12:3e80:200::/39
2a12:3e80:402::/48
2a12:3e80:500::/40
Signature Algorithm: sha256WithRSAEncryption
5e:1c:d0:a4:5a:c7:10:6c:4e:f3:49:bc:5d:23:13:61:09:b9:
98:c2:68:24:71:50:c5:a8:90:53:29:b0:4a:2a:3e:95:56:31:
b5:4e:39:6c:9f:39:e3:0f:b6:79:9b:ed:22:ed:08:95:88:ae:
ce:a0:1b:3b:b3:52:de:a1:f0:a7:9a:15:4a:1f:b1:ba:90:61:
c3:55:5d:8f:05:d0:03:bb:99:5c:00:59:8c:3a:1e:78:3f:22:
8d:74:9a:b3:88:24:cf:37:aa:c4:d6:85:a5:fd:7f:24:ac:ab:
97:39:06:fe:4b:b1:f1:6b:18:ca:ed:99:0c:4d:00:48:af:e6:
02:63:0c:0e:68:00:a9:0e:0b:a0:4e:ad:48:7c:8a:3d:fc:e6:
57:d1:15:af:08:90:01:e8:f7:7c:13:39:9e:2b:ad:89:2a:5d:
bc:96:26:13:f3:64:b0:4a:e9:ac:72:f2:d4:dc:07:6a:ec:e8:
5e:bc:f7:93:6d:59:19:8b:cf:4b:04:91:ad:f2:f0:5b:58:30:
67:a7:19:c5:89:af:1b:42:be:54:ef:5a:56:5e:b7:7f:8b:e4:
bb:54:15:9e:11:87:99:0c:82:d1:b6:51:51:ab:99:42:f9:c8:
e3:56:7a:0c:48:a1:ad:a8:e9:24:37:ea:07:e5:7b:c5:ae:db:
26:7a:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:20 2024 by rpki-client on console-ams.rpki-client.org