Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LEsuwL3e_Z6sSzMWJ_yiW3djJjw.roa
File: LEsuwL3e_Z6sSzMWJ_yiW3djJjw.roa (raw, json)
Hash identifier: O+pbQ1OrFyf1bLwY18zfLoq4OegRU+GV3+ysN8IO2HI=
Subject key identifier: 2C:4B:2E:C0:BD:DE:FD:9E:AC:4B:33:16:27:FC:A2:5B:77:63:26:3C
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC7277D31F36F61B147D1B27C800D7979
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LEsuwL3e_Z6sSzMWJ_yiW3djJjw.roa
Signing time: Mon 01 Jan 2024 22:31:43 +0000
ROA not before: Mon 01 Jan 2024 22:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206337
IP address blocks: 188.93.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:7d:31:f3:6f:61:b1:47:d1:b2:7c:80:0d:79:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c4b2ec0bddefd9eac4b331627fca25b7763263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:44:53:e8:07:60:92:82:eb:0d:c0:7f:1f:
a9:0f:cd:e3:99:2d:bb:15:5f:49:21:94:a6:37:57:
4a:04:7a:7a:b7:dc:3c:af:d7:0e:b6:33:62:ae:3c:
f8:f6:2f:ab:7e:c1:8c:30:41:bc:22:13:43:87:35:
1c:bf:4e:63:19:3e:92:1d:de:43:4c:6a:73:d0:7d:
c7:38:20:fb:a7:95:6f:a7:56:d7:48:eb:c2:53:be:
5e:3b:b4:f2:15:d2:6f:69:05:18:a7:8f:d8:a5:a8:
d3:10:cb:58:6d:61:46:50:d3:b8:41:c1:4a:16:71:
05:f9:b9:52:6c:68:2f:bc:3a:20:a2:ea:e5:0f:2c:
a2:a3:a7:13:09:b7:19:40:d0:71:f6:b4:b3:3a:c8:
67:3f:00:f2:d5:53:c8:2a:a5:d4:2e:b8:a5:7d:37:
f7:6a:c7:ab:c0:e8:ba:a3:16:0d:1c:53:77:24:4d:
0c:64:e3:a0:f9:48:4c:0c:fb:d4:83:ca:d1:e0:ad:
47:88:e8:d3:ef:dd:31:8e:e8:f7:79:05:2f:ee:41:
4d:32:ff:c4:73:77:d9:d2:ff:11:25:cb:2a:dc:0c:
70:f0:f1:c5:6b:bd:3e:28:5e:aa:2a:dc:47:15:fa:
f3:18:af:0d:f5:dd:e5:ac:fa:53:65:f3:47:fe:a3:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4B:2E:C0:BD:DE:FD:9E:AC:4B:33:16:27:FC:A2:5B:77:63:26:3C
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LEsuwL3e_Z6sSzMWJ_yiW3djJjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.106.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e1:4b:1d:7a:8f:60:2c:c1:0b:bc:7e:9b:2e:e9:a2:af:1c:
92:d5:e5:d9:3a:e7:92:02:49:ca:76:90:30:01:03:80:bf:43:
5f:94:39:b0:dd:7f:a2:f9:b6:50:6c:87:fd:a1:e5:68:ff:4e:
34:83:67:57:d4:de:3d:f1:3b:7d:36:38:b5:a6:0a:07:45:ff:
15:e1:fe:23:82:4d:70:03:01:dc:d5:94:7d:6d:58:f8:e9:df:
d6:7e:95:3c:7c:f4:db:ae:44:80:9e:33:b2:ef:62:89:3f:87:
d8:d5:13:99:67:57:70:48:52:d8:06:43:6f:17:8b:29:fb:ae:
81:9b:c1:c6:db:89:bb:bf:a3:c7:e6:df:25:80:e5:e9:46:6c:
9a:2b:16:08:7b:b8:e8:94:16:34:4f:82:05:03:64:69:c3:c7:
05:b2:a9:59:58:69:b9:a3:9d:c5:64:1f:e0:20:68:1c:a9:70:
b8:7f:ec:1c:4c:29:bb:fc:64:0b:26:09:e4:06:0d:4a:5f:e8:
43:94:e7:8c:9f:7a:77:29:e4:a5:ac:89:8d:83:03:f8:08:ef:
b3:1b:4e:9f:17:d9:dc:50:13:83:1c:59:ef:06:c9:6a:74:63:
ad:0e:08:d0:e5:5c:73:b8:a2:28:3c:63:f4:51:d5:5e:b6:94:
9b:7f:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:16 2024 by rpki-client on console-ams.rpki-client.org