Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/LfEFKfDN105i8PGNZbJVUCv3mmM.roa
File: LfEFKfDN105i8PGNZbJVUCv3mmM.roa (raw, json)
Hash identifier: nrPJ9XCwacdagPpt2E4Hxv0tKA1o8y7i1cDFTOhYkrs=
Subject key identifier: 2D:F1:05:29:F0:CD:D7:4E:62:F0:F1:8D:65:B2:55:50:2B:F7:9A:63
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E8EBAA838C2B7B4D7DD50D403E564
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/LfEFKfDN105i8PGNZbJVUCv3mmM.roa
Signing time: Mon 01 Jan 2024 14:30:06 +0000
ROA not before: Mon 01 Jan 2024 14:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200005
IP address blocks: 217.112.151.0/24 maxlen: 24
217.112.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8e:ba:a8:38:c2:b7:b4:d7:dd:50:d4:03:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2df10529f0cdd74e62f0f18d65b255502bf79a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:a1:aa:d8:87:20:98:5e:3e:6b:99:74:00:
0c:0c:57:83:e9:c1:9d:0a:bf:41:77:38:57:e8:af:
c0:b9:69:73:46:6f:48:bc:f0:0d:54:d3:15:e5:4a:
c3:57:bb:a8:76:83:52:d0:e2:d1:6f:47:ca:6c:f2:
c7:6d:f7:c2:fd:f7:67:5d:fa:50:5a:99:13:1d:4c:
0a:fe:61:42:f4:01:91:ed:80:f1:3f:48:13:82:70:
8e:c2:07:41:3f:57:d3:0a:d6:10:de:2b:0d:a3:01:
62:5e:8e:3a:c9:67:53:aa:81:da:1b:e2:7c:c4:f7:
51:e0:fa:d9:83:27:c8:e7:42:7e:38:86:a2:3a:91:
ca:38:e3:a6:a3:24:c0:f1:c2:06:3e:9b:14:90:ce:
05:ad:56:3f:56:60:41:f8:81:f4:c0:4e:a6:e4:47:
1b:b0:0d:90:c1:f7:ab:d7:33:80:7f:21:3b:f3:ad:
d0:0d:02:33:a4:de:1c:f2:c7:ef:39:6e:09:0d:38:
cb:d6:7d:8e:c7:da:ba:df:ae:f0:75:b4:b4:be:24:
d2:20:1a:c5:a7:75:2c:d9:44:ef:81:71:b4:4e:13:
70:6b:5e:3f:5f:5e:bb:3f:b2:07:10:34:04:00:2a:
28:2f:e0:46:d2:f6:30:2f:e0:4d:7c:0a:2c:85:19:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:05:29:F0:CD:D7:4E:62:F0:F1:8D:65:B2:55:50:2B:F7:9A:63
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/LfEFKfDN105i8PGNZbJVUCv3mmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.112.151.0/24
217.112.158.0/24
Signature Algorithm: sha256WithRSAEncryption
22:59:56:29:28:35:84:63:2f:2e:59:ee:d5:95:58:0c:00:38:
d3:93:1e:42:b8:8f:b6:e4:49:bb:2f:b3:1b:7d:41:96:93:b3:
fd:09:80:a8:07:1b:f8:e0:a8:50:a2:f9:45:78:75:9e:d2:51:
8b:56:00:eb:e9:07:6b:ea:9d:0c:f8:f0:33:9e:74:44:ef:39:
13:7d:2c:84:0c:ba:eb:aa:56:63:27:0f:fd:3f:de:dd:ca:f1:
c3:a5:ed:ca:c5:e7:b5:40:cc:e9:28:67:ce:5e:fe:d3:62:61:
c0:e4:7e:53:16:ad:d5:e3:35:1e:df:c3:fb:42:a2:4f:be:8a:
14:01:6d:d3:f9:3e:02:2c:b8:a2:b5:5d:cd:2f:bd:47:4d:b9:
45:a3:32:2c:18:ae:cc:91:79:88:99:29:3a:57:91:d1:58:4b:
47:4c:28:44:5c:79:03:63:47:0d:5f:5d:ca:6a:26:9f:eb:62:
3e:20:25:0f:f5:b6:6e:5c:44:5d:cd:a7:a3:6f:4a:d8:54:2e:
23:af:77:cb:90:81:5a:c1:50:42:62:49:86:84:62:1e:1b:21:
dc:ed:a1:77:d9:58:09:6c:c5:bb:9c:e1:ae:7c:8a:9f:2b:6c:
54:a4:de:b7:51:ca:18:82:13:7e:3d:e1:26:81:1a:b7:b0:26:
94:da:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:09:18 2024 by rpki-client on console-ams.rpki-client.org