Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R_lpJZwlw9160iBgSilNJ1F9yTw.roa
File: R_lpJZwlw9160iBgSilNJ1F9yTw.roa (raw, json)
Hash identifier: MfH2NcbUzuVcpV7v4R0LBAVV8AgQqwK71zptXn5k/7Q=
Subject key identifier: 47:F9:69:25:9C:25:C3:DD:7A:D2:20:60:4A:29:4D:27:51:7D:C9:3C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018D88C878B58B4C6D4CE42A71B0E946ACB7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R_lpJZwlw9160iBgSilNJ1F9yTw.roa
Signing time: Thu 08 Feb 2024 12:54:15 +0000
ROA not before: Thu 08 Feb 2024 12:54:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51634
IP address blocks: 194.71.27.0/24 maxlen: 24
194.132.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:c8:78:b5:8b:4c:6d:4c:e4:2a:71:b0:e9:46:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 8 12:54:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47f969259c25c3dd7ad220604a294d27517dc93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cf:5b:ec:2c:8a:67:25:6d:05:f0:37:54:01:
6e:18:5c:ac:08:d7:be:80:15:20:c8:e0:b5:cc:18:
e0:e6:bb:f5:6f:ab:a9:d0:bd:e3:3d:5f:2d:75:13:
fe:69:31:ea:e3:f1:cb:27:5a:10:cd:41:5d:18:15:
ee:19:bf:5a:94:89:f0:9e:7e:f8:f4:78:b9:26:f0:
c0:b6:9c:b7:b6:be:c1:15:10:80:d5:7a:9d:08:74:
3b:74:23:03:52:80:20:05:8a:53:3b:2c:57:22:01:
13:d7:d5:ec:2a:24:a0:90:88:ea:46:dd:c0:53:6c:
11:a0:61:aa:6e:0a:c6:bd:6c:d8:4e:65:81:de:db:
9f:a1:d2:1a:d8:3f:72:59:ab:68:53:80:32:df:43:
32:cf:21:9f:6a:6b:d5:23:a4:78:b6:30:a3:70:b1:
9e:b7:e1:1f:6d:80:e6:7b:ef:67:8a:4a:f0:4f:8f:
fb:a3:a7:45:a9:9c:3e:c5:f4:0f:0f:8d:ff:16:ee:
f7:93:4d:41:98:53:7c:82:a9:32:28:d8:92:2b:de:
6f:ab:3e:67:02:3f:20:a5:d7:c2:4c:7c:a1:d9:59:
55:ac:ca:0c:a1:c0:d6:3d:b6:7f:85:6b:63:69:59:
44:a5:6f:95:40:3d:d3:19:f7:64:6c:1f:3a:dc:8e:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:69:25:9C:25:C3:DD:7A:D2:20:60:4A:29:4D:27:51:7D:C9:3C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R_lpJZwlw9160iBgSilNJ1F9yTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.27.0/24
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:91:17:af:aa:3c:46:e4:a3:bd:9b:00:14:88:78:05:26:1f:
99:75:b2:fc:b5:a8:ec:26:74:51:99:b1:24:8a:ca:d8:7b:e5:
8f:76:f1:2e:9f:67:3c:f0:5c:1f:3d:80:56:64:4c:a8:28:82:
d0:ba:d6:f1:0d:3e:a2:c2:ce:cd:f6:e7:07:40:3a:a3:fa:de:
c1:21:9b:c6:30:7b:f9:04:b0:f4:c9:5c:95:b9:21:2b:87:a4:
40:b4:48:ae:c5:f1:1b:54:8a:9a:f8:77:39:f2:6e:f1:eb:e3:
41:de:bd:2b:ee:e9:d6:1f:1c:e8:eb:8e:56:02:db:81:ce:69:
d2:fa:91:03:de:35:f4:97:b3:b9:65:56:aa:4f:c7:a3:47:6b:
bc:41:31:c0:ca:29:e5:71:fe:ed:41:b0:2c:b8:a2:e5:6c:58:
52:67:5b:5f:03:16:7b:a7:d7:21:11:b9:b6:29:ea:26:74:e4:
ee:10:36:91:44:ef:c2:96:74:74:ad:71:7b:e7:05:3f:3c:e3:
2c:03:0d:72:69:ab:9b:b0:c0:60:18:81:37:22:03:7b:f6:3b:
ed:e8:d5:fb:2b:75:46:62:7d:89:bd:a5:2b:c2:47:6f:43:f8:
4f:62:86:a0:86:db:6c:39:ba:11:03:8b:cc:44:f6:59:cc:de:
5d:43:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:30:49 2024 by rpki-client on console-fra.rpki-client.org