Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/LDTaeJbQpJUwuNZLODwg-VIF4S8.roa
File: LDTaeJbQpJUwuNZLODwg-VIF4S8.roa (raw, json)
Hash identifier: 2fPn+YeLLs5OBIHHpMfc7pk16u1qIVvznkkfqHdNzLA=
Subject key identifier: 2C:34:DA:78:96:D0:A4:95:30:B8:D6:4B:38:3C:20:F9:52:05:E1:2F
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 018CC64B6C670599E2CF5A42D9833699F6B6
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/LDTaeJbQpJUwuNZLODwg-VIF4S8.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31615
IP address blocks: 178.224.0.0/13 maxlen: 24
95.98.0.0/15 maxlen: 24
91.141.128.0/17 maxlen: 24
89.205.128.0/17 maxlen: 24
84.241.192.0/18 maxlen: 24
188.88.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6c:67:05:99:e2:cf:5a:42:d9:83:36:99:f6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c34da7896d0a49530b8d64b383c20f95205e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:e4:0c:0f:2c:4c:8d:86:81:8e:2a:f9:9c:
6f:d2:f2:90:19:4a:5e:06:f6:2c:f8:66:ca:30:cf:
39:fc:5a:27:61:4a:92:7a:48:b7:58:74:13:c9:8b:
b2:bb:f7:41:7b:9d:a7:dc:a2:a4:8b:8d:cf:f6:e5:
e8:f3:26:77:98:b5:3f:47:b9:4f:1c:8a:f9:25:99:
4e:7a:9c:c5:77:b1:6d:19:db:8a:00:38:fe:fa:0e:
fc:39:5d:f6:f6:1b:f6:d2:8f:78:24:2e:e1:d2:e5:
8c:a6:b4:86:f2:43:d6:e3:31:56:69:8a:0b:42:6a:
95:2e:80:2a:3e:55:11:bb:85:f4:e6:2b:bc:d0:09:
71:0a:62:74:a6:23:bc:7c:00:6d:11:08:b4:97:08:
02:c1:d8:01:9c:5e:81:4a:09:48:df:66:bd:d1:3c:
8e:81:a5:96:25:57:42:4d:c6:2c:61:c3:4d:20:15:
68:ec:df:2f:58:fc:16:52:71:2f:3f:75:33:2a:e7:
a1:91:82:7d:58:36:0d:50:dc:02:ee:0c:c8:9e:92:
df:b1:b1:cd:b9:5b:35:5a:ec:b6:15:89:2b:81:51:
82:4e:e7:7b:49:16:7e:66:81:fe:e0:e9:ec:8a:12:
a8:60:be:b2:d5:a4:60:16:bb:92:5d:df:61:81:ae:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:DA:78:96:D0:A4:95:30:B8:D6:4B:38:3C:20:F9:52:05:E1:2F
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/LDTaeJbQpJUwuNZLODwg-VIF4S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.192.0/18
89.205.128.0/17
91.141.128.0/17
95.98.0.0/15
178.224.0.0/13
188.88.0.0/14
Signature Algorithm: sha256WithRSAEncryption
09:58:53:d6:e8:cb:87:8e:db:19:52:95:0d:cc:d2:6b:31:d0:
77:1a:f6:d6:2e:ce:e5:96:dd:93:19:5a:57:31:a2:bf:79:f9:
f1:3a:45:28:78:c5:91:b1:72:84:80:f5:2a:e6:23:32:f9:d9:
6e:05:36:fe:d9:5c:a8:85:36:10:0d:44:67:b8:ce:b7:d7:b1:
d6:59:6d:0a:57:54:df:1a:a1:78:e1:ff:b3:1b:21:aa:0f:ab:
53:40:95:08:4c:56:23:7b:16:68:61:18:26:0b:ed:03:1a:f7:
cf:03:41:f8:f0:01:aa:c8:66:a1:37:0c:92:c7:61:de:fa:af:
c4:ad:14:16:27:ed:2c:46:88:05:61:00:c8:1e:e6:af:e5:ce:
f4:fc:bc:ee:ce:be:51:18:b3:29:5a:3a:7c:09:c8:66:fb:0f:
95:62:81:08:44:a6:35:6c:c6:26:ce:f4:31:01:66:e1:81:6b:
a4:15:50:09:52:c8:2a:42:82:ca:9f:b0:43:85:88:7a:6d:e0:
e4:5e:2d:dc:1c:50:6d:a0:1e:6c:aa:b3:52:af:e1:b0:7c:50:
37:ee:f4:bc:bd:7e:a7:d9:f6:21:db:30:82:4d:8d:91:49:39:
72:08:10:24:5e:c8:d7:f8:47:b7:8a:8d:f1:fa:0b:58:ed:8b:
d1:0e:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:46:54 2024 by rpki-client on console-ams.rpki-client.org