Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/Ldc4o9L-5HMwL6CiKLTPZNj10t4.roa
File: Ldc4o9L-5HMwL6CiKLTPZNj10t4.roa (raw, json)
Hash identifier: MnLWlh0g5BLxsxCKq3v+1BT4h2/+3tXxViOM9GFNaDw=
Subject key identifier: 2D:D7:38:A3:D2:FE:E4:73:30:2F:A0:A2:28:B4:CF:64:D8:F5:D2:DE
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018CC64A7687396707F125AF37F143C326E1
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/Ldc4o9L-5HMwL6CiKLTPZNj10t4.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30880
IP address blocks: 194.236.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:76:87:39:67:07:f1:25:af:37:f1:43:c3:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dd738a3d2fee473302fa0a228b4cf64d8f5d2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:df:19:cf:22:22:79:7a:be:66:84:c0:95:
bc:35:61:c2:07:bf:8e:d9:43:30:7c:84:a8:b4:54:
af:4a:7d:ec:dc:05:92:3f:0d:d9:8d:5c:68:2d:c0:
ce:eb:c1:d2:62:c6:6d:f8:05:0e:ff:62:7f:07:d5:
75:84:d3:3a:28:68:d6:fd:1d:bb:79:d0:f5:9a:37:
4b:dd:42:c8:6d:f3:d2:09:92:39:ac:2f:19:9c:df:
52:e3:ac:00:44:44:8c:ab:18:4a:7f:c7:e3:e3:b0:
bc:c3:57:05:67:68:8a:23:4a:d6:fd:eb:c0:ad:81:
05:7f:f6:bb:c2:a0:5d:8e:86:c7:aa:b4:b5:cb:5b:
a8:39:4b:34:e9:98:aa:d2:02:ce:69:5c:8a:49:64:
b4:70:38:c4:00:ee:45:c3:c1:cf:77:61:12:ef:24:
34:94:c2:5f:3f:cd:9f:8c:68:27:81:e4:73:09:2e:
4e:f5:25:8c:e1:ba:73:6b:eb:40:9a:34:af:c4:79:
55:68:77:da:1c:19:73:78:58:21:1d:46:0b:64:6b:
ed:41:c3:ac:ce:7c:5e:46:a9:f7:8f:b9:c6:76:69:
db:98:61:9f:36:d6:68:3a:04:9d:be:52:71:a3:89:
77:a0:23:a8:86:c4:42:4d:b3:e3:16:26:e1:9f:63:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:38:A3:D2:FE:E4:73:30:2F:A0:A2:28:B4:CF:64:D8:F5:D2:DE
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/Ldc4o9L-5HMwL6CiKLTPZNj10t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.236.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:20:d5:49:c0:f3:2c:1e:d5:c5:89:3e:93:7e:35:8d:a1:44:
e8:07:8b:29:3b:36:82:77:8a:be:13:ae:35:ea:23:f6:d8:f4:
a9:05:a7:83:a4:30:68:37:4a:90:80:84:0b:5f:4d:2b:cc:bb:
19:a2:29:f8:62:c7:cf:1c:3c:ad:63:c0:ff:71:76:20:2a:f2:
b2:14:20:f2:d0:6e:7b:e2:82:e9:77:26:c0:5e:c3:26:21:93:
7b:71:c2:d0:c4:26:a5:e5:64:4e:8f:1e:35:c2:a9:e1:2c:0e:
70:dd:d5:f9:17:f6:1f:e4:91:65:a7:c8:66:7f:51:9a:c4:2f:
23:8c:fe:48:ab:8d:3c:11:be:8a:4a:0e:42:3f:f7:34:de:fe:
4d:84:0b:c6:60:48:b7:d6:de:cd:98:93:8a:af:57:ec:7d:0d:
81:38:1c:2d:48:8e:62:1b:56:a1:65:50:62:4f:f2:fb:8b:ef:
0f:94:bc:6d:a8:35:1c:ad:fa:4b:aa:cf:20:f0:5f:fc:05:9d:
9a:dc:4d:00:18:42:05:08:6a:c2:5f:75:4d:b1:9a:01:cd:e6:
b5:22:b1:b8:54:e6:93:69:b8:d6:28:92:71:af:59:e7:a1:25:
85:fe:8d:57:6f:b6:9d:10:01:09:04:55:ef:7b:2a:17:35:bc:
c1:96:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 17:04:57 2024 by rpki-client on console-fra.rpki-client.org