Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/LAGnr5gWKOncbshxEsvULImYbfs.roa
File: LAGnr5gWKOncbshxEsvULImYbfs.roa (raw, json)
Hash identifier: +1AWQB/QpbTpGhHKZP+J3O7A34oi9sEnCSNE4v2z3QA=
Subject key identifier: 2C:01:A7:AF:98:16:28:E9:DC:6E:C8:71:12:CB:D4:2C:89:98:6D:FB
Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial: 018CC794082D9838CD493E1190CFE5212F74
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/LAGnr5gWKOncbshxEsvULImYbfs.roa
Signing time: Tue 02 Jan 2024 00:30:16 +0000
ROA not before: Tue 02 Jan 2024 00:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49539
IP address blocks: 217.78.56.0/24 maxlen: 24
212.106.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:08:2d:98:38:cd:49:3e:11:90:cf:e5:21:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Validity
Not Before: Jan 2 00:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c01a7af981628e9dc6ec87112cbd42c89986dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:5c:a8:a8:cd:f3:f8:7b:bb:87:fb:f0:d6:
f0:3c:12:9b:be:93:39:69:1d:3d:dc:29:e2:2f:3e:
4a:42:51:08:52:b4:14:6b:1a:30:97:60:dc:e8:a2:
27:1a:9e:5c:c3:25:ca:ff:98:83:5c:6b:95:de:aa:
82:9e:3a:a3:5e:20:ee:78:c9:a3:fc:84:b6:28:f4:
80:b2:53:69:10:8b:47:41:e8:25:c5:fb:88:35:fe:
d0:3c:76:f7:52:dc:6b:09:e5:b0:20:19:89:16:30:
ba:0f:20:ed:c7:28:64:fe:d9:05:cc:26:58:41:e8:
5a:09:d7:e6:0b:7a:4c:24:0d:5b:a2:ae:4e:83:4b:
9d:b3:a9:b4:2d:b2:2f:56:d5:02:ae:5a:dd:54:a8:
db:ec:a0:6b:ad:c4:c6:7e:47:a3:6f:f9:6d:a9:3c:
8e:69:91:d0:5f:da:fd:0a:1f:65:62:6b:27:b9:74:
26:ab:65:9c:10:bd:03:25:a9:de:dc:23:81:74:06:
44:fa:f4:12:06:b5:63:9e:02:e3:2c:5c:0d:a1:0d:
5b:25:20:6e:15:ca:81:8c:39:fc:d2:f8:4d:73:82:
86:10:c1:41:06:06:a1:8f:2f:93:12:f5:77:3e:a7:
b4:5e:f2:b5:a9:35:78:f8:4e:80:fd:4c:31:fe:7b:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:A7:AF:98:16:28:E9:DC:6E:C8:71:12:CB:D4:2C:89:98:6D:FB
X509v3 Authority Key Identifier:
keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/LAGnr5gWKOncbshxEsvULImYbfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.106.73.0/24
217.78.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c0:fb:66:83:ee:83:34:6a:d5:56:11:46:ce:a0:cc:69:3e:
68:6e:2f:9a:7a:9d:b1:b5:8e:49:dc:d7:1b:51:af:b1:a0:bf:
2f:ed:08:8d:c5:b2:82:87:54:e2:2a:92:c2:44:7b:10:eb:0d:
67:36:3e:90:44:ce:03:30:ae:2c:12:c7:dd:82:b6:6f:7f:22:
3d:6c:75:4c:60:e9:dd:83:ee:db:bf:a4:26:9a:bc:6c:c0:56:
a5:be:9e:60:e1:c7:6e:47:95:78:c3:24:78:73:82:74:ff:de:
46:a1:25:78:03:4a:67:53:36:e6:e9:16:e4:75:4c:e1:85:31:
84:f7:25:d9:25:b5:5e:b7:18:37:7f:fd:65:57:f6:2b:75:6d:
86:77:37:7e:90:bd:3d:03:8d:c9:ec:73:00:16:7f:b6:8d:df:
8b:be:32:0f:20:67:d2:9c:70:cd:57:44:03:7e:48:45:29:ea:
6e:96:85:23:4b:a0:80:3e:5d:08:f2:7d:18:18:ff:4b:c4:81:
68:60:7f:a7:82:ed:78:ff:03:65:3a:24:6f:25:b7:04:32:3b:
95:23:aa:00:b4:de:2f:38:f5:8b:d4:92:ec:a9:ba:dd:fa:7a:
d3:1f:8f:00:d6:82:2f:eb:d5:3e:59:f9:69:1f:8e:b3:37:ea:
8b:f1:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:49:31 2024 by rpki-client on console-fra.rpki-client.org