Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/L_GtMC90gubdtmoHvGckZT3RmPo.roa
File: L_GtMC90gubdtmoHvGckZT3RmPo.roa (raw, json)
Hash identifier: S9njVMxN+40fc/sV+WwHgScxZr1+CZGkr5PjXZLi70Y=
Subject key identifier: 2F:F1:AD:30:2F:74:82:E6:DD:B6:6A:07:BC:67:24:65:3D:D1:98:FA
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC7933F2B89142EFF940EC820124C8CCB
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/L_GtMC90gubdtmoHvGckZT3RmPo.roa
Signing time: Tue 02 Jan 2024 00:29:25 +0000
ROA not before: Tue 02 Jan 2024 00:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50495
IP address blocks: 91.223.99.0/24 maxlen: 24
91.223.102.0/24 maxlen: 24
91.223.126.0/24 maxlen: 24
194.39.32.0/22 maxlen: 22
77.83.232.0/22 maxlen: 22
2a09:2c00::/29 maxlen: 29
2a06:ef40::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3f:2b:89:14:2e:ff:94:0e:c8:20:12:4c:8c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff1ad302f7482e6ddb66a07bc6724653dd198fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:eb:48:b6:b3:42:3e:d9:a0:59:cd:32:20:
d9:f3:09:6e:16:a8:02:d9:af:8d:1e:0d:81:76:e9:
8e:e0:30:d1:b7:fd:03:bc:19:13:d9:45:87:d2:25:
e0:7b:35:ca:c3:6e:1f:57:90:f5:fc:5e:95:ee:16:
90:d2:b1:84:95:58:e7:ba:64:fd:4d:99:87:fa:4d:
97:9e:23:4b:9c:4e:3b:ca:e1:5b:ab:50:01:e1:30:
8c:ed:b4:62:a7:64:29:1c:56:47:07:ca:2d:51:00:
2d:5d:77:98:a2:6e:19:08:d0:5e:f9:82:97:3e:ec:
df:8f:a0:35:25:c8:be:55:0c:0d:3b:0d:df:57:6f:
b4:c0:62:3a:3d:1d:c7:ab:7b:50:ea:8a:7e:51:00:
de:9e:f1:96:93:0f:c0:f1:4a:c1:bd:55:9f:74:58:
15:38:36:af:dc:87:28:9f:a3:05:e5:06:4e:a2:44:
8c:02:cd:c9:b0:0d:41:a2:80:ea:f5:ce:84:ce:d9:
61:29:53:e1:10:a8:b0:a9:68:f3:74:38:c5:a8:1d:
76:49:ba:47:6b:a4:81:ee:4c:91:55:75:22:5d:74:
1a:5a:c4:cd:9d:35:78:bf:b1:39:8f:aa:60:a7:9e:
22:8e:7f:0e:31:b2:8c:39:ba:df:49:86:ac:00:d2:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:AD:30:2F:74:82:E6:DD:B6:6A:07:BC:67:24:65:3D:D1:98:FA
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/L_GtMC90gubdtmoHvGckZT3RmPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.232.0/22
91.223.99.0/24
91.223.102.0/24
91.223.126.0/24
194.39.32.0/22
IPv6:
2a06:ef40::/32
2a09:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
bd:4f:c1:c6:b6:be:6b:a9:4c:b4:0c:f1:50:d8:0f:77:13:74:
62:71:c1:29:ce:f8:f2:62:7e:9f:b9:1b:1b:8c:00:50:4d:fc:
80:a9:0f:3f:f2:1a:d3:47:38:55:24:54:35:4d:e8:13:24:97:
bc:33:86:75:21:fc:76:29:a9:13:5c:e4:41:b4:b3:b0:04:41:
13:2d:42:f3:05:8d:11:b0:50:25:b6:c5:82:54:7b:a5:68:60:
53:d1:0d:9d:6b:02:95:46:73:13:96:fb:13:4b:ca:44:51:36:
c5:b5:a9:8a:ac:1f:e4:ef:dc:e1:52:b8:01:e4:b3:4f:af:d3:
fc:17:e7:65:f1:3e:34:71:11:f8:1d:ce:d8:15:c0:ed:b6:5c:
87:a6:8a:fb:0c:67:d6:37:72:30:5c:0b:d2:e0:a8:17:74:47:
04:63:58:c3:07:fb:61:df:16:e0:58:f6:f6:38:20:0f:8d:9c:
78:41:25:12:45:cf:97:87:cb:98:45:a2:3b:7e:c7:5b:11:a9:
56:17:a1:06:36:17:75:86:23:17:20:c9:8d:7d:dc:dc:7c:7d:
fc:12:ac:e1:78:91:73:ab:a3:d2:e1:48:49:50:6a:9b:1f:ff:
e6:fd:4f:c9:31:86:32:7a:be:8a:68:56:56:6b:97:27:e8:9e:
f8:59:ba:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:48 2024 by rpki-client on console-fra.rpki-client.org