Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/Azgr-HL2zn213tUe9eNRfKSzHHg.roa
File: Azgr-HL2zn213tUe9eNRfKSzHHg.roa (raw, json)
Hash identifier: xD6hVhqTF3XXPUYnqTtYAfzgGkLAAtrlV+7yYFqVQ/Q=
Subject key identifier: 03:38:2B:F8:72:F6:CE:7D:B5:DE:D5:1E:F5:E3:51:7C:A4:B3:1C:78
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 018CC80130B30E9F715E6591BAFDDFC1991C
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/Azgr-HL2zn213tUe9eNRfKSzHHg.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199553
IP address blocks: 148.222.248.0/22 maxlen: 24
2a0a:e5c0::/29 maxlen: 48
2a09:2940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:30:b3:0e:9f:71:5e:65:91:ba:fd:df:c1:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03382bf872f6ce7db5ded51ef5e3517ca4b31c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:66:af:29:5f:b2:b3:d0:04:59:8c:5d:fb:
09:c0:ed:8a:84:23:d3:33:76:16:9c:4b:d9:65:04:
c8:c0:9a:3b:a2:8a:54:f9:f7:e5:f0:79:31:be:5d:
ed:35:df:14:e1:33:08:bb:54:79:4e:62:73:ce:a7:
91:bb:f3:07:39:b1:6f:a0:bc:e2:6e:40:e4:1b:2c:
9e:bd:9e:08:98:0b:7e:57:ce:58:75:e2:0a:6a:dd:
27:ce:cd:df:02:fe:6d:f4:9e:e8:a5:68:96:99:94:
76:9d:2f:f3:5f:06:03:ea:41:b4:95:c4:b9:b0:62:
fc:20:0f:41:71:ed:3c:2e:ee:23:c0:4b:bb:6b:e3:
46:6b:8e:4a:8a:52:e7:5a:c8:00:7e:19:da:98:a3:
2c:89:41:9d:5f:0c:48:94:18:2d:22:06:50:7c:21:
c6:0e:9b:e0:03:52:5d:bb:64:ea:aa:81:94:9f:49:
78:c8:90:45:2b:a1:fa:35:32:a7:4f:8d:15:15:dc:
e4:55:ee:6d:91:71:7d:7a:d9:e4:34:18:d5:22:51:
44:16:97:8e:07:62:6a:ea:b9:63:1e:bd:d8:93:b8:
44:84:bf:9c:09:8e:79:33:15:91:94:a1:27:55:91:
b6:96:6a:f9:f0:33:ab:b5:14:ca:65:98:b5:15:72:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:2B:F8:72:F6:CE:7D:B5:DE:D5:1E:F5:E3:51:7C:A4:B3:1C:78
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/Azgr-HL2zn213tUe9eNRfKSzHHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.248.0/22
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:0d:0b:42:f2:ea:b3:64:c0:f1:3f:3f:7e:ba:32:41:a6:f2:
e2:23:49:42:b9:e8:45:fd:82:6b:ae:be:15:24:b8:28:00:f8:
f7:a6:ee:20:cd:c9:b0:cf:70:49:05:4b:9c:63:c7:fb:01:dd:
b8:78:6d:6f:0b:02:21:96:b7:18:77:de:83:14:3c:59:4d:4c:
5b:2c:8e:2b:ec:b3:d3:bc:e4:31:e8:bf:b6:52:9d:21:64:e8:
74:15:4d:84:09:f2:28:89:f6:dc:20:49:dd:83:a1:5e:c8:9b:
8b:d4:80:34:c5:8f:8b:86:2b:22:24:b7:b4:74:da:a2:01:33:
5c:1c:6b:ea:a4:80:93:cc:26:03:d9:df:ce:da:64:b1:db:eb:
94:8c:f0:dc:d0:0d:b8:4d:95:df:f3:ab:c7:b8:0d:ff:29:93:
39:5f:93:92:6e:34:de:f1:5d:64:7c:a0:08:33:7f:2e:3f:59:
7b:3c:70:cb:bb:ae:f2:0d:35:38:84:c8:01:77:f7:8c:1d:3a:
74:07:d4:3c:ff:36:1a:b2:17:14:b0:76:d9:f7:fc:37:3f:89:
94:cb:06:d5:bd:fe:cb:9a:cb:6d:a1:77:27:9c:a6:fb:d6:ce:
7f:c7:21:35:18:d6:fb:d3:2c:1d:86:cc:94:b3:a8:72:7d:e3:
5f:51:26:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:14 2024 by rpki-client on console-ams.rpki-client.org