Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/LR_f2qdUOZZygOEBje_tx5p4dzY.roa
File: LR_f2qdUOZZygOEBje_tx5p4dzY.roa (raw, json)
Hash identifier: 7d70dF4QLzsNzEVWqfgnb9vAUVa7BDMQkgPulpKGaZQ=
Subject key identifier: 2D:1F:DF:DA:A7:54:39:96:72:80:E1:01:8D:EF:ED:C7:9A:78:77:36
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018CC6B8C293251B94DEF8E31A2F3DDCF931
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/LR_f2qdUOZZygOEBje_tx5p4dzY.roa
Signing time: Mon 01 Jan 2024 20:30:46 +0000
ROA not before: Mon 01 Jan 2024 20:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211557
IP address blocks: 5.180.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c2:93:25:1b:94:de:f8:e3:1a:2f:3d:dc:f9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 1 20:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d1fdfdaa75439967280e1018defedc79a787736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:45:a7:ba:d7:c5:2b:81:d7:16:cc:99:5e:
dd:77:06:63:5b:5d:8b:11:41:49:94:da:f0:6e:e8:
32:8a:0a:d2:49:3c:66:93:38:5f:cd:42:73:90:d5:
29:13:90:0d:07:f3:38:0f:1a:5d:1d:30:42:0a:b7:
7f:7d:10:82:d8:c6:c7:20:e9:bf:e9:4b:ba:1f:3f:
0c:56:53:1d:ed:0e:ff:0e:93:c3:65:b5:6c:c2:67:
35:31:0d:36:53:1c:57:d7:10:d5:11:6a:3b:0c:4a:
41:fc:b2:ec:7c:48:4f:9f:f2:6d:01:27:0c:0b:3f:
49:c9:19:b4:c2:28:6e:be:a6:81:88:d7:92:9f:74:
78:5e:0d:8b:c8:7a:03:02:62:23:0e:e2:29:01:eb:
a6:44:b0:ce:d4:84:8a:db:fa:11:ab:a8:3a:d6:2b:
03:00:29:de:d3:27:20:0c:92:87:22:b5:18:1a:36:
d8:3e:70:1e:1f:6b:2d:f3:b5:2a:4c:3b:11:16:c5:
ec:a8:c0:3a:3e:14:af:8d:42:ea:33:88:45:3c:59:
0e:8e:5c:43:8a:11:aa:80:cf:17:c3:f3:f9:ea:2f:
46:e2:31:44:72:b4:9d:00:cd:26:86:f3:15:b6:4c:
12:55:e6:d6:75:20:6b:e2:f8:cf:9c:af:fa:98:6e:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:DF:DA:A7:54:39:96:72:80:E1:01:8D:EF:ED:C7:9A:78:77:36
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/LR_f2qdUOZZygOEBje_tx5p4dzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.155.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ab:63:c1:5e:29:5c:ce:69:6f:f0:47:04:62:59:25:3c:47:
03:b2:29:a7:47:30:ed:c6:28:be:97:64:e3:9a:b3:37:37:79:
a0:72:8f:c9:29:12:29:47:00:03:8f:35:5e:d6:85:4c:9d:0f:
b9:df:3f:62:84:d6:ab:26:c6:33:c4:2a:e5:8d:37:8f:05:98:
9a:1d:ca:58:5a:e8:62:e4:aa:8d:6c:b6:d4:b2:4c:c3:33:e0:
ec:b3:be:e0:dc:33:5e:26:81:2c:4e:69:f3:24:f5:78:94:8e:
96:f6:3c:f0:d0:0b:81:7b:f3:53:fc:41:49:27:ab:b0:14:b8:
f3:c5:1c:33:67:1c:9f:1e:f5:e5:78:e6:e0:e3:3e:52:36:4e:
0c:0b:cc:58:d0:ae:9f:a5:10:40:f3:ea:f4:39:1c:99:25:f6:
aa:39:0b:c1:3d:4d:be:6b:28:2b:23:aa:07:71:ef:96:69:1c:
99:6d:a4:f0:05:75:a1:98:1f:b7:f7:be:a3:60:e9:2e:5a:4b:
1a:1b:fa:2d:06:fc:00:c9:33:7e:4a:2d:35:95:cc:dd:eb:fe:
5c:41:f0:7a:a3:d7:a2:fd:92:bc:01:ff:d2:6c:6e:93:e6:3a:
83:4b:57:e3:e5:26:bd:2a:d0:fe:50:fc:31:27:ef:7d:05:64:
44:a1:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:20 2024 by rpki-client on console-ams.rpki-client.org