Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/LnPFoc4cGs4GWw-mRQ0VGV9iebU.roa
File: LnPFoc4cGs4GWw-mRQ0VGV9iebU.roa (raw, json)
Hash identifier: ZFmBo/66RmkoLk16gsrD6+aEEV9Bm5QIhLbS00/4VhI=
Subject key identifier: 2E:73:C5:A1:CE:1C:1A:CE:06:5B:0F:A6:45:0D:15:19:5F:62:79:B5
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 018CC6B8F98DCC697E0D15D6C568F7072EF0
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/LnPFoc4cGs4GWw-mRQ0VGV9iebU.roa
Signing time: Mon 01 Jan 2024 20:31:00 +0000
ROA not before: Mon 01 Jan 2024 20:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48823
IP address blocks: 95.129.48.0/21 maxlen: 24
134.0.24.0/21 maxlen: 24
185.11.136.0/22 maxlen: 24
2a03:2900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f9:8d:cc:69:7e:0d:15:d6:c5:68:f7:07:2e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jan 1 20:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e73c5a1ce1c1ace065b0fa6450d15195f6279b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:a2:46:a5:1a:fe:7d:9d:a0:7f:67:c0:d0:
50:f2:24:7d:47:03:f0:33:21:6f:36:c8:10:d5:ba:
61:0d:e6:61:86:72:eb:6c:a1:f3:3e:d4:76:1f:01:
ae:00:b5:87:3e:a7:fa:ae:d3:66:80:d2:54:a3:83:
ff:33:e8:b2:49:1e:2c:47:8c:ad:59:8d:fc:2b:b4:
f2:bc:fc:df:34:19:62:ed:1c:7b:01:e6:b6:0e:57:
f1:6d:eb:5b:c6:8d:73:f3:4c:30:21:39:1e:10:02:
bf:8f:1b:4b:dc:52:0e:03:9d:bc:21:02:a5:06:62:
c5:81:83:ce:3f:73:6f:45:36:69:c5:14:d7:6e:36:
a0:6c:83:0e:46:fe:40:10:26:9e:02:af:a9:c3:5b:
bd:79:1f:78:14:04:10:73:3b:10:51:65:97:4b:ad:
62:1a:3d:3d:68:c9:c3:de:92:50:60:3f:53:5f:74:
f4:0e:bb:38:78:08:c1:dd:05:a5:dd:9c:44:df:ae:
19:27:ba:af:79:61:e1:e4:69:e8:a0:6e:a9:06:7f:
08:a3:22:ba:cc:49:0d:1e:6e:08:b6:a0:2c:60:d7:
ef:f0:84:00:3b:38:2d:5b:bb:a5:18:35:2a:e6:bb:
2f:20:c9:98:23:07:3a:48:a5:a6:72:09:9c:1b:61:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:C5:A1:CE:1C:1A:CE:06:5B:0F:A6:45:0D:15:19:5F:62:79:B5
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/LnPFoc4cGs4GWw-mRQ0VGV9iebU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.48.0/21
134.0.24.0/21
185.11.136.0/22
IPv6:
2a03:2900::/32
Signature Algorithm: sha256WithRSAEncryption
a0:34:b7:37:83:2f:17:8b:37:60:cb:c7:fe:b0:9b:6f:86:32:
22:7f:ee:20:37:21:e1:9f:58:f5:7d:75:dd:cb:32:01:02:b2:
bd:e1:66:a2:5b:47:74:f7:32:0a:9b:24:6a:49:a1:05:0c:3b:
b0:a8:5a:3a:7a:a4:d7:bb:98:f4:bd:9f:8e:7c:f5:d4:fb:05:
0f:63:0b:3e:eb:78:ea:2d:5f:ab:37:02:23:e1:65:13:6a:47:
6b:3e:15:4a:e9:83:f9:bd:4e:04:7d:22:07:70:9b:bd:dc:b2:
10:03:76:c2:9d:8f:1e:98:49:d7:12:c4:f5:ec:af:af:e9:b5:
f4:69:01:c7:ef:42:54:8f:88:f4:57:8f:9a:75:30:2a:96:28:
7d:6a:d1:22:32:eb:7d:12:30:83:b2:e3:75:c2:97:74:8d:ad:
83:ca:62:4b:e1:9a:ef:6b:69:43:8c:01:ec:a2:98:2e:b2:43:
68:90:70:ed:18:77:0c:6f:38:47:57:e0:03:1d:75:79:06:c1:
95:8f:c8:a3:32:b4:0c:e3:49:3f:96:75:fa:6b:5f:da:79:fb:
83:31:2d:46:b1:d5:b0:25:51:f6:2e:30:6c:3b:80:1c:ba:26:
cd:08:fa:40:60:6a:ab:ae:2c:53:59:95:d2:89:6a:3a:bb:76:
cb:69:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 06:23:56 2024 by rpki-client on console-ams.rpki-client.org