Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/LBbvLSAUlEuG01rn5vP0JXY9KXY.roa
File: LBbvLSAUlEuG01rn5vP0JXY9KXY.roa (raw, json)
Hash identifier: ha+9ZI2lrny2NKu+Mi6OEqV8WZ3Wr1xJK3RHW0oAa/4=
Subject key identifier: 2C:16:EF:2D:20:14:94:4B:86:D3:5A:E7:E6:F3:F4:25:76:3D:29:76
Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial: 018E7C4B2CE2363C276382EB80C92EB9D63B
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/LBbvLSAUlEuG01rn5vP0JXY9KXY.roa
Signing time: Tue 26 Mar 2024 19:44:45 +0000
ROA not before: Tue 26 Mar 2024 19:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a14:2ec0:62b4::/48 maxlen: 48
2a14:2ec0:854e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:4b:2c:e2:36:3c:27:63:82:eb:80:c9:2e:b9:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Validity
Not Before: Mar 26 19:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c16ef2d2014944b86d35ae7e6f3f425763d2976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:47:ea:1f:86:9f:98:e7:68:bc:36:d2:ab:f5:
52:06:58:82:67:03:ef:c1:52:de:59:25:a9:69:51:
0b:bd:6b:8d:30:d9:53:fb:12:dd:b6:3f:41:36:af:
64:41:c7:80:17:dd:6c:40:d9:40:d6:c8:96:cf:4f:
49:74:e1:bb:28:87:f9:81:29:c4:6e:c6:37:60:48:
a7:a4:a8:82:e5:1a:21:6d:5b:db:6f:c6:51:40:48:
0f:59:f0:16:59:9f:e3:09:f6:75:fb:ca:12:f2:79:
7a:cc:d9:d0:ef:4b:51:d9:f3:77:23:b4:fc:6e:3c:
e0:ad:97:52:21:e3:fb:a8:ac:81:4f:3c:0c:eb:cd:
4e:54:f0:91:c7:ea:5b:1f:b2:bc:31:71:7d:98:75:
83:34:cc:6f:92:23:a9:23:10:9e:87:da:a1:f7:ae:
f4:c1:41:d2:95:f5:ae:da:7d:34:da:77:d1:dc:81:
51:10:f7:7f:3f:e4:c2:b3:e1:da:95:53:ca:b0:43:
fb:4a:f8:7e:96:20:b4:fc:b5:25:dc:34:fa:40:cc:
1e:0d:72:94:be:47:6c:c5:48:b4:79:fe:93:e2:bd:
4b:a1:ca:0f:ab:92:30:66:68:f9:c2:bd:d6:e5:0e:
e0:27:a3:8c:51:b3:89:92:79:dc:32:48:dc:c1:93:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:EF:2D:20:14:94:4B:86:D3:5A:E7:E6:F3:F4:25:76:3D:29:76
X509v3 Authority Key Identifier:
keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/LBbvLSAUlEuG01rn5vP0JXY9KXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2ec0:62b4::/48
2a14:2ec0:854e::/48
Signature Algorithm: sha256WithRSAEncryption
89:be:b7:79:5f:43:d2:f9:0b:4b:9c:82:5c:f2:9d:ab:4e:69:
58:9f:3f:64:36:67:d7:8a:7f:b1:28:e3:d6:fa:4f:86:d1:71:
9f:e8:94:0d:b5:43:f3:b3:3b:88:a0:75:d2:73:25:69:d4:a7:
66:0a:35:b9:02:c2:87:98:f6:04:90:a9:ca:2b:af:00:31:01:
fa:a8:98:0b:33:4e:34:30:1a:a4:f4:ee:5a:ca:87:d5:72:b5:
67:7e:92:df:1e:6c:a7:9d:03:09:69:2a:47:01:e7:bd:2e:73:
15:3d:99:d8:43:e1:2d:95:fa:1d:91:67:17:c2:b8:58:82:8a:
99:35:61:46:72:ef:a2:78:18:18:3d:d1:59:fc:f6:87:3f:bd:
34:b1:b8:35:b8:72:06:18:0c:12:d2:bf:9f:27:b0:35:51:3f:
2d:34:a0:aa:59:cc:1f:8f:cd:0b:3c:c2:ce:35:30:5a:cf:7c:
12:37:a8:57:4c:a1:f8:eb:8c:ba:1c:ce:08:39:ff:fc:be:8f:
cb:b5:ca:63:9d:c5:45:fd:06:ea:c4:72:c0:a3:db:2e:64:c9:
20:a1:de:ae:be:b6:72:1f:7b:6a:72:9b:cd:43:a7:11:0f:70:
25:59:7c:d4:45:6a:7d:7e:88:6f:11:4e:ba:d8:f3:6c:b2:7e:
01:54:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:35:08 2024 by rpki-client on console-fra.rpki-client.org