Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/LeblHkGAnJpzPlSE591sdoJIzmE.roa
File: LeblHkGAnJpzPlSE591sdoJIzmE.roa (raw, json)
Hash identifier: +oLAVnq4AyrEAO0nXs8nUvs4P5V8OL/EjXr5jRq5phc=
Subject key identifier: 2D:E6:E5:1E:41:80:9C:9A:73:3E:54:84:E7:DD:6C:76:82:48:CE:61
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 018CC34925F44EC444282613AAC3B25BDCEE
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/LeblHkGAnJpzPlSE591sdoJIzmE.roa
Signing time: Mon 01 Jan 2024 04:30:00 +0000
ROA not before: Mon 01 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208242
IP address blocks: 2001:678:b04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:25:f4:4e:c4:44:28:26:13:aa:c3:b2:5b:dc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jan 1 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de6e51e41809c9a733e5484e7dd6c768248ce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:c1:25:b0:9f:76:9b:36:db:85:14:c6:9b:
e7:b8:44:74:53:2d:29:89:0b:ae:12:d4:ac:17:df:
f6:e5:db:3f:df:49:94:ef:8f:cb:bb:a8:0c:cb:00:
41:51:b0:92:a0:00:2a:0c:16:02:76:34:4c:1c:0d:
cc:6c:c9:72:a5:79:69:09:d1:9c:d7:33:62:a7:8e:
f4:2c:1e:21:a1:cc:98:bc:c9:f0:cc:47:8b:db:ab:
d3:90:b2:fe:b0:84:c4:f1:ab:97:c9:ac:6e:08:cf:
19:fe:0c:40:aa:38:5c:b1:2f:a7:3f:76:12:06:c7:
9c:d3:51:38:ba:af:be:3c:a6:83:5d:b1:f3:f1:dd:
33:7d:e1:1f:6e:6e:5b:9b:53:d6:71:51:b4:b4:13:
73:e7:8c:96:61:cd:89:ba:a8:03:cc:c7:2d:af:7a:
a6:aa:7d:8d:04:ac:81:9d:f3:9e:a4:a5:4f:0b:8b:
fe:ba:45:e1:55:64:26:84:f5:94:7e:09:9b:e6:4b:
9d:91:9a:ea:02:51:2e:b3:7e:83:34:f9:a4:2e:e7:
64:33:7c:05:db:3a:00:82:ec:71:ec:a3:12:70:32:
5d:99:af:c9:9d:a0:cc:fe:58:06:88:d3:ad:99:cb:
7b:7e:ad:33:31:eb:a9:43:5e:44:89:a6:d5:87:11:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E6:E5:1E:41:80:9C:9A:73:3E:54:84:E7:DD:6C:76:82:48:CE:61
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/LeblHkGAnJpzPlSE591sdoJIzmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b04::/48
Signature Algorithm: sha256WithRSAEncryption
9c:bc:fd:10:29:01:8f:91:26:95:a8:e6:ea:79:4d:8f:b3:0a:
da:9d:71:f4:8d:b2:00:67:ad:3e:dc:18:55:f1:e0:15:46:8e:
34:53:c2:a5:78:b4:3e:c4:cb:e2:68:bf:bf:8f:85:8b:ec:de:
60:e4:e1:ed:72:60:fd:ec:28:a2:95:dd:57:b2:89:de:50:d4:
08:64:f6:ab:13:4a:ce:e5:26:56:6f:f6:7a:22:ed:1c:0b:97:
f5:96:87:54:3a:39:f3:8b:af:80:03:be:33:dc:82:0a:59:52:
20:ba:e1:ae:6a:fb:2b:64:e0:31:9a:3c:9b:9c:87:7d:32:d9:
9d:2d:e9:6c:fe:5c:8b:e0:dc:df:43:96:de:fa:a0:fd:4e:b5:
ea:97:12:2d:39:ab:3a:2b:d1:7e:fa:b0:f1:f0:61:04:2a:3c:
eb:e5:b0:25:bc:b1:b2:b0:92:1b:2e:97:fd:b3:fe:9a:00:58:
5d:af:28:6a:6f:21:61:48:06:cf:31:16:0a:1b:10:d4:85:fa:
63:6a:71:7e:bc:07:c3:63:de:0b:4e:47:9b:77:e8:00:39:2c:
23:49:be:ee:10:7d:5d:b7:90:f8:f4:cd:87:20:66:ed:f8:68:
d0:49:80:fb:8b:de:64:f7:1a:de:07:00:60:ba:2a:43:aa:65:
ca:fc:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:55:45 2024 by rpki-client on console-fra.rpki-client.org