Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/LULDteje3LFqcHafBJ7oelyF6c8.roa
File: LULDteje3LFqcHafBJ7oelyF6c8.roa (raw, json)
Hash identifier: 5riwAVZdigF0OPrZB1FEsZO/ZAVl/4Ftk61QPZ53pgw=
Subject key identifier: 2D:42:C3:B5:E8:DE:DC:B1:6A:70:76:9F:04:9E:E8:7A:5C:85:E9:CF
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF358A8DA026269563F9F66781042
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/LULDteje3LFqcHafBJ7oelyF6c8.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 46.34.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f3:58:a8:da:02:62:69:56:3f:9f:66:78:10:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d42c3b5e8dedcb16a70769f049ee87a5c85e9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:8d:86:f6:17:1a:a1:da:07:40:e7:ad:69:
b5:e9:a5:80:91:9e:02:c9:a6:90:2b:5f:d8:44:ad:
bb:b0:82:c3:6e:7e:ea:d8:6d:4c:4b:4d:74:d7:e6:
9d:b3:2e:1a:71:66:df:f3:b3:88:41:88:00:9d:7c:
2b:f1:0e:53:b4:d3:cb:7f:5a:dd:05:91:60:83:73:
6a:d2:14:44:13:e9:6f:30:15:dc:0e:ad:87:8b:93:
e8:6a:72:c9:d0:3f:78:93:28:10:18:43:c6:56:16:
c5:ea:f5:90:2c:3b:bc:4c:ec:e8:38:f8:10:97:c5:
9a:74:d2:cb:b3:a6:4c:d6:25:3b:1a:82:78:f0:21:
cc:09:0f:f7:62:d2:49:b2:73:24:9c:0d:bc:bd:a4:
c3:49:be:ac:a6:16:ae:37:4b:12:ea:f8:81:8a:80:
b4:48:fa:0e:0c:31:26:90:53:4a:dd:90:85:f7:dc:
b8:6f:38:7b:1c:97:2c:7d:38:3c:97:35:65:6c:6d:
53:4a:46:35:c6:8f:1f:b9:ed:c5:7d:5c:ac:b1:53:
05:c6:dc:24:b9:a6:c4:d9:53:bf:6d:b4:9c:a4:aa:
b6:81:a2:3e:96:99:51:ae:2b:41:e7:35:e9:98:07:
08:3a:cf:97:71:04:5b:e5:8e:cd:b1:99:7e:9d:09:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:42:C3:B5:E8:DE:DC:B1:6A:70:76:9F:04:9E:E8:7A:5C:85:E9:CF
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/LULDteje3LFqcHafBJ7oelyF6c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e3:9c:7c:4a:c5:f1:05:82:ee:86:4e:06:4b:dd:d3:03:22:
93:37:a1:6a:3d:68:51:d1:f3:8c:94:d7:b5:29:3d:fc:2b:05:
2c:c8:60:29:a3:e6:51:97:fc:66:88:02:51:48:99:35:4b:3f:
23:b0:09:d6:a2:47:f0:40:dc:a6:73:b0:99:d7:68:f1:c7:00:
bb:91:a3:0a:de:10:82:ca:79:5d:0f:96:3b:53:6c:56:eb:cd:
9f:00:28:67:05:e0:99:ea:8d:93:66:ef:20:3e:cc:3f:3d:d5:
4a:d0:d5:58:0d:bf:96:87:30:78:a4:69:ee:0f:52:41:97:96:
73:f7:90:1f:be:8a:ec:40:03:ca:23:4f:1f:1d:75:a9:e1:0a:
a4:07:fd:07:8d:e5:93:e9:0f:f8:b7:69:d5:80:96:08:cf:f5:
32:e7:0d:52:3b:ea:bc:92:42:70:31:8f:8e:bf:45:fe:43:ec:
f8:18:93:bc:08:09:cb:82:3e:fd:c8:84:d4:80:72:8c:cb:bc:
87:78:f8:7f:66:b1:3f:4e:c8:eb:8b:f6:de:59:d7:e6:63:ee:
e9:e0:2f:b2:40:f8:4e:78:d5:9a:51:22:5e:95:03:4f:be:93:
f7:f6:e3:69:95:4b:4f:63:ce:8b:47:1b:12:54:42:52:92:f1:
cc:4a:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:33:19 2024 by rpki-client on console-fra.rpki-client.org