Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/lFt-UctOIc6ld3x4xwqTqLfSISw.roa
File: lFt-UctOIc6ld3x4xwqTqLfSISw.roa (raw, json)
Hash identifier: dYpGJZ0//WDLRbJqJrFK7mwR3El0Ed3kvomESapS7f4=
Subject key identifier: 94:5B:7E:51:CB:4E:21:CE:A5:77:7C:78:C7:0A:93:A8:B7:D2:21:2C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 018CC8DD8F97C2BABC551CDF653523755013
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/lFt-UctOIc6ld3x4xwqTqLfSISw.roa
Signing time: Tue 02 Jan 2024 06:30:12 +0000
ROA not before: Tue 02 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8399
IP address blocks: 87.247.224.0/24 maxlen: 24
185.197.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:8f:97:c2:ba:bc:55:1c:df:65:35:23:75:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jan 2 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=945b7e51cb4e21cea5777c78c70a93a8b7d2212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:73:81:7d:ea:c1:15:97:a9:c9:77:eb:c9:
e8:e1:c6:25:d7:90:24:fd:4e:e6:a3:ae:59:c1:13:
9b:5c:d1:15:e8:f0:f9:2b:a8:76:b9:b0:d9:40:d4:
cb:d8:95:ec:4e:c6:62:d4:d3:be:b4:ae:d4:24:12:
97:d8:5f:86:5d:3c:62:e5:eb:f3:53:29:6d:2a:28:
18:91:da:8c:d6:a7:3c:f7:83:a9:1f:9b:3c:54:2a:
32:41:ea:92:ac:34:2b:99:4d:b0:ad:ad:6f:bf:c2:
ed:ca:c8:28:d1:49:2e:df:a8:7f:e0:af:4e:a9:1f:
11:77:20:f7:e8:25:31:d8:38:ba:33:db:95:7a:b4:
00:76:a7:68:52:51:22:6b:2a:6b:af:0e:d4:a4:33:
20:f2:0f:a4:ab:62:83:48:95:a6:a2:b4:c8:12:c1:
37:d5:eb:9c:e2:e2:36:c1:11:8a:b5:97:b2:12:f2:
34:d9:97:5d:e7:f6:be:bd:5e:2a:0e:32:40:df:49:
e2:13:fa:be:2a:a2:b7:4e:8a:0c:4d:50:c9:44:92:
1b:d3:c8:ea:78:4e:56:17:91:2a:bc:d0:b5:af:d9:
c4:77:e4:13:27:c3:ae:7c:24:02:36:7b:88:57:bd:
ea:1b:d6:d7:2d:80:02:63:73:62:2a:cb:6c:78:a2:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:7E:51:CB:4E:21:CE:A5:77:7C:78:C7:0A:93:A8:B7:D2:21:2C
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/lFt-UctOIc6ld3x4xwqTqLfSISw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.224.0/24
185.197.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fd:05:2a:0f:0b:bf:13:57:b4:c1:3e:e1:50:c8:aa:a9:ce:
fd:62:2e:d7:47:0f:af:cf:a6:5a:10:d4:1e:f2:a4:29:1b:56:
b0:4b:f9:93:6a:96:26:3e:6e:d5:78:53:44:e7:fa:98:b2:87:
ee:59:ec:71:04:40:53:73:5b:ed:a2:02:8c:0e:81:49:8f:12:
0f:12:2b:f3:8f:ec:e5:fd:22:90:41:37:4b:4c:b5:7c:a3:c4:
2e:1f:67:94:71:aa:ca:b6:36:05:28:2d:bf:4e:18:3f:cd:94:
bf:48:86:82:55:58:da:57:be:c0:e0:38:9b:d7:d2:c0:84:96:
c3:46:6a:97:4f:bf:59:02:34:39:f4:c3:1a:f5:7f:19:0c:f2:
6d:db:85:ab:6d:9e:f2:39:05:0b:ba:8e:68:e1:b5:55:b7:b9:
92:14:b3:0f:13:05:54:5a:47:e8:98:61:80:54:2b:05:e0:f5:
a4:a7:fb:e1:de:8c:77:96:a9:f0:b5:6d:3e:60:e9:84:43:c1:
bd:c0:a5:b6:1f:42:29:02:5d:3c:1a:dd:bf:12:5d:2a:5f:3d:
f0:a5:3a:c5:bb:c7:b8:71:e1:10:b7:2c:91:4e:20:6d:03:46:
24:0e:c9:7c:60:cf:6b:6d:fb:29:1d:30:41:82:d0:0e:42:9e:
5d:3c:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 08:37:46 2024 by rpki-client on console-fra.rpki-client.org