Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/LgCqIewWg94XWtcIa4RwY7W4yBE.roa
File: LgCqIewWg94XWtcIa4RwY7W4yBE.roa (raw, json)
Hash identifier: BXTi+VXHZtdKnp3uLD88kvLLZuednl9ao3sw+YbfPhY=
Subject key identifier: 2E:00:AA:21:EC:16:83:DE:17:5A:D7:08:6B:84:70:63:B5:B8:C8:11
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018D5EE718832FCFFEFD33C8994CA979EFCD
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/LgCqIewWg94XWtcIa4RwY7W4yBE.roa
Signing time: Wed 31 Jan 2024 09:43:39 +0000
ROA not before: Wed 31 Jan 2024 09:43:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.69.0/24 maxlen: 24
91.221.80.0/24 maxlen: 24
185.83.230.0/24 maxlen: 24
195.64.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:e7:18:83:2f:cf:fe:fd:33:c8:99:4c:a9:79:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 31 09:43:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e00aa21ec1683de175ad7086b847063b5b8c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:c5:af:c1:1e:2b:ef:ab:db:65:d1:87:14:
6e:2f:98:b2:6c:5c:98:44:51:01:af:72:e0:da:fa:
8f:a9:c8:b7:1a:8b:c1:68:f3:74:9d:08:bb:8f:99:
f3:e4:28:b5:66:47:08:e1:22:79:e2:98:3b:c8:39:
9f:0b:ba:ea:f4:81:46:13:a7:39:0f:44:9a:06:68:
a0:4e:b1:ac:15:19:03:26:da:44:9c:cc:5c:ca:52:
eb:7d:a6:39:1f:d8:bd:73:96:13:35:a7:f6:aa:c3:
08:86:e0:b5:31:1b:3e:f4:69:e6:6d:3a:74:cb:b9:
ff:4e:4e:04:8b:46:cb:20:4a:14:17:e9:bd:54:d7:
3e:e0:7d:99:8b:0f:7b:da:97:ed:29:e4:ce:77:b3:
1e:67:6a:24:0e:ed:38:ad:d6:7e:08:17:92:84:ad:
4a:89:52:de:be:06:6a:96:4d:cb:f5:e0:84:ec:e8:
bd:d3:77:23:e0:25:76:02:7a:0e:6b:dd:f2:67:eb:
62:18:af:36:e6:b6:61:7a:e9:4d:00:18:cc:36:26:
bc:ac:73:18:0e:e4:bc:6b:fc:7c:9b:c1:bb:fe:f9:
8a:c7:5b:a2:c0:62:2e:c1:2b:87:ec:8e:30:8f:5c:
f8:7f:b9:b2:d8:fa:b0:8c:d7:c9:78:0c:53:d2:e1:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:AA:21:EC:16:83:DE:17:5A:D7:08:6B:84:70:63:B5:B8:C8:11
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/LgCqIewWg94XWtcIa4RwY7W4yBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.69.0/24
91.221.80.0/24
185.83.230.0/24
195.64.108.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5f:f3:06:5e:0f:e5:65:87:fb:03:36:c3:c1:47:28:7a:f4:
d4:e6:d7:42:b8:05:13:91:6c:17:2e:af:04:8a:a9:f7:98:22:
20:aa:1f:eb:14:67:81:57:b2:31:e3:ed:49:c8:4c:d2:00:70:
b3:5b:00:b3:12:4e:d6:b7:6c:f5:3b:9f:f4:ce:48:8f:59:e8:
cb:1f:fb:38:14:28:52:45:ef:b5:2b:3d:6c:d0:de:2e:bd:13:
39:11:76:9d:8f:f4:02:ea:7e:d7:73:c7:1a:59:8d:0a:dc:fd:
be:29:b6:fe:52:3f:6d:43:91:19:dd:73:6c:a0:48:6a:90:2d:
47:00:86:61:f7:5e:e9:12:7f:37:32:38:7c:b0:69:9a:61:63:
a4:0e:61:32:ac:ae:62:89:45:32:2f:f5:1f:a1:1f:93:bf:04:
6c:98:47:6b:fa:4c:b6:4b:a3:ed:d3:fd:97:e8:02:9d:fe:75:
05:91:1a:e5:d4:ab:46:97:28:62:04:69:c3:58:11:d2:cd:43:
1a:0d:b6:10:cc:ae:cf:ff:23:81:f3:d0:b9:24:df:83:eb:73:
2d:5a:24:be:4e:a3:64:73:54:6c:41:d2:86:5b:f0:d3:d7:c2:
59:4c:27:1a:4a:3f:77:56:fa:9d:1f:43:a0:2f:d5:25:40:d8:
32:72:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:48:15 2024 by rpki-client on console-ams.rpki-client.org