Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/LdHM0G00gAp7s7NH_fshDoMWgMI.roa
File: LdHM0G00gAp7s7NH_fshDoMWgMI.roa (raw, json)
Hash identifier: eK2lrS8HOFpDceZOfMdtj0ms/dpiJIB8Sx4elqgfGr4=
Subject key identifier: 2D:D1:CC:D0:6D:34:80:0A:7B:B3:B3:47:FD:FB:21:0E:83:16:80:C2
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 018CC493191B32D41EB5DE14C4240AF97C17
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/LdHM0G00gAp7s7NH_fshDoMWgMI.roa
Signing time: Mon 01 Jan 2024 10:30:23 +0000
ROA not before: Mon 01 Jan 2024 10:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49289
IP address blocks: 193.200.27.0/24 maxlen: 24
193.200.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:19:1b:32:d4:1e:b5:de:14:c4:24:0a:f9:7c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Jan 1 10:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dd1ccd06d34800a7bb3b347fdfb210e831680c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:fb:7b:0b:70:31:71:d4:51:27:42:7b:ed:
c6:42:0f:91:9a:55:09:b9:44:1d:f5:c2:e9:84:ba:
eb:a3:d3:99:73:6e:23:fb:c6:70:9d:7a:ce:dc:4a:
47:c8:a2:ff:99:93:55:e5:28:36:0b:e7:b9:7a:a6:
68:32:68:62:16:1e:59:02:3f:7e:8e:bd:ab:d7:0d:
16:68:aa:0b:e9:ce:6a:2a:ff:83:36:cf:5c:7a:f9:
de:58:36:51:ef:4f:a2:f4:53:b7:0d:8c:0d:89:ef:
52:84:10:07:3d:f4:e0:26:e2:88:9b:a2:41:66:38:
b9:d3:88:c6:9e:0c:a4:61:85:99:a9:80:b0:c3:d6:
d3:6d:f3:58:73:7c:fc:be:1a:45:5a:1c:4d:f1:e2:
01:54:f3:4f:8f:04:9d:d4:99:29:95:be:0a:fd:4d:
d0:17:e9:d0:78:29:a3:93:75:1a:92:ae:e3:98:44:
1a:2a:08:1a:fc:dc:9d:13:c1:64:21:fa:39:66:0e:
26:a1:bf:a9:13:49:53:8a:4e:1a:97:98:0e:a7:13:
a3:04:56:3e:21:3a:d2:f0:37:ea:6f:a9:d4:30:11:
8b:8d:4f:b2:72:c0:f7:79:84:a8:31:45:6b:ed:63:
cd:69:18:51:b8:b1:18:80:36:4d:01:e2:a2:2a:a5:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:CC:D0:6D:34:80:0A:7B:B3:B3:47:FD:FB:21:0E:83:16:80:C2
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/LdHM0G00gAp7s7NH_fshDoMWgMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.26.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:2f:60:c7:21:82:c4:b2:72:df:6f:86:0e:32:2f:44:ce:88:
86:24:a2:e6:78:32:40:ad:f4:25:28:b4:49:12:b8:e2:3e:95:
3f:d3:62:9b:a8:24:33:aa:00:e7:c0:c7:0d:03:be:b3:00:da:
52:eb:aa:ce:90:4f:f9:71:fc:b6:16:82:7d:61:15:8c:45:ad:
ef:3a:ca:db:d5:8a:fe:c3:f6:02:db:2c:8a:86:14:a9:bd:7e:
fd:8e:3a:e1:5d:7b:5c:82:c5:b8:dd:12:b5:7f:4f:27:55:08:
be:3d:53:e2:18:09:35:92:d2:ef:56:78:b6:ce:80:39:16:00:
2a:45:a7:8b:2f:b9:6e:6e:eb:fa:85:ae:49:a7:7c:a0:fa:9b:
ea:66:63:9e:a7:6d:d1:21:81:ee:49:91:b0:1a:ce:03:56:47:
a8:33:e8:e6:1e:5a:c6:88:80:03:51:d4:d4:02:ab:47:39:ac:
04:9f:d9:f7:7d:5e:09:47:0f:15:bb:92:c2:0b:c2:55:fa:de:
eb:7c:fe:a8:8f:37:0b:a4:1f:af:86:a6:34:53:38:e8:da:59:
f1:43:ae:ae:85:ec:97:72:8e:48:07:4c:4d:24:6e:78:dd:ef:
66:58:0f:80:62:44:63:b5:13:78:0a:51:30:26:68:c7:c5:16:
77:78:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:27:48 2024 by rpki-client on console-ams.rpki-client.org