Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/L9xj_s4MQ6Zawr24puH7Xp0O4So.roa
File: L9xj_s4MQ6Zawr24puH7Xp0O4So.roa (raw, json)
Hash identifier: m0PwmCiweKcKgkPU4MCM24lltQAAGVYP4XuwkErZF5I=
Subject key identifier: 2F:DC:63:FE:CE:0C:43:A6:5A:C2:BD:B8:A6:E1:FB:5E:9D:0E:E1:2A
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 018CC94ADE740656D4F4362F27134E356550
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/L9xj_s4MQ6Zawr24puH7Xp0O4So.roa
Signing time: Tue 02 Jan 2024 08:29:36 +0000
ROA not before: Tue 02 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203396
IP address blocks: 145.12.0.0/16 maxlen: 24
145.69.0.0/16 maxlen: 24
145.69.47.240/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:de:74:06:56:d4:f4:36:2f:27:13:4e:35:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 2 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fdc63fece0c43a65ac2bdb8a6e1fb5e9d0ee12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:56:b8:7e:36:fa:fa:0a:ac:a3:03:b0:be:
81:13:83:2d:67:2d:8a:a5:11:87:8b:e6:6b:88:e8:
14:bd:30:2e:7c:14:e3:a0:81:1c:4c:88:66:cd:ea:
8a:bd:a7:96:43:2e:78:9d:92:72:cb:e0:2f:ce:59:
d3:c4:dd:38:3f:e4:58:a6:aa:7b:c7:58:ec:6e:ba:
7f:7b:05:b1:a1:e2:27:dc:c2:be:1c:27:43:e1:34:
42:79:1f:cc:a9:ff:c2:2d:a4:38:10:19:8d:32:57:
13:c0:61:eb:1a:f4:dd:b1:04:21:f1:83:49:c9:c6:
0a:cd:d6:69:b4:9d:f7:fb:c8:45:8c:41:61:96:4f:
46:de:2e:4c:60:8a:32:40:0a:4e:c2:9f:71:a1:8b:
f3:a5:a7:33:ab:10:64:7a:97:d4:40:78:0c:a0:75:
93:94:84:65:5b:8d:2c:03:c4:49:89:b0:2c:3f:73:
eb:c2:1e:95:da:8a:99:64:98:f9:33:19:28:0f:ba:
0a:02:c1:c5:57:08:fc:b5:ea:77:e4:00:0b:dd:02:
3c:e9:24:85:9b:fc:ca:d5:0d:d8:3d:91:2b:1a:16:
29:f1:d6:0e:2f:14:d8:6e:48:0b:9e:e1:e1:c0:df:
61:f0:49:57:be:29:41:f9:78:43:34:db:56:2c:33:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:63:FE:CE:0C:43:A6:5A:C2:BD:B8:A6:E1:FB:5E:9D:0E:E1:2A
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/L9xj_s4MQ6Zawr24puH7Xp0O4So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.12.0.0/16
145.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:43:0f:0b:e5:fa:46:63:8a:5e:af:87:6e:22:19:67:2b:7a:
72:06:9a:e3:50:ae:c0:e3:44:0e:32:42:95:a0:97:e2:e0:62:
8b:0b:c2:f0:01:4e:db:07:c2:48:89:ef:09:d9:ef:81:84:d9:
41:e0:e5:b2:ce:e2:e9:8d:c1:51:97:e7:1d:8c:28:54:42:60:
3e:5e:af:2b:ab:71:b3:0a:6c:37:03:92:ba:67:e1:7b:0c:38:
78:0a:01:a1:5f:4b:ec:73:19:69:6b:b3:5b:c1:e0:d5:d3:7b:
40:5b:20:aa:f7:e5:af:f2:34:e0:75:15:22:d9:81:45:f4:20:
e2:84:46:c6:c0:b7:42:41:cc:e2:46:c3:3d:2c:b3:f5:56:e0:
9b:b9:96:03:1c:4c:84:e7:63:a1:15:99:d4:2b:91:c6:a5:f3:
70:da:bf:8d:73:1e:7d:cd:9e:5a:66:c4:82:c4:6f:de:5d:4c:
a7:7d:65:69:74:a3:48:70:27:74:e6:66:b4:31:df:82:c2:91:
0e:c2:78:fb:a4:8e:ba:1f:01:31:76:e7:18:b6:5e:96:37:75:
95:14:1a:62:73:07:0b:93:6a:34:01:6a:55:dd:69:1a:4c:19:
8b:41:ac:eb:7f:0f:b4:7a:57:3d:bc:bc:ec:ca:83:25:af:be:
86:1a:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:03:34 2024 by rpki-client on console-ams.rpki-client.org