Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/LL-rE8Ift4ZPeyhd9UmYy0HYNis.roa
File: LL-rE8Ift4ZPeyhd9UmYy0HYNis.roa (raw, json)
Hash identifier: EiByAbBu+KIKZYGzzXnd7UphitMDFtHQfJIRi8ZJ3wY=
Subject key identifier: 2C:BF:AB:13:C2:1F:B7:86:4F:7B:28:5D:F5:49:98:CB:41:D8:36:2B
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 018CC6B90FA65B88C1F99A4599E948A504CF
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/LL-rE8Ift4ZPeyhd9UmYy0HYNis.roa
Signing time: Mon 01 Jan 2024 20:31:05 +0000
ROA not before: Mon 01 Jan 2024 20:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131222
IP address blocks: 193.219.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0f:a6:5b:88:c1:f9:9a:45:99:e9:48:a5:04:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Jan 1 20:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cbfab13c21fb7864f7b285df54998cb41d8362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:c1:5b:cd:6a:6b:01:9d:3f:d6:d1:bb:e7:
50:6f:07:7f:a3:85:8e:e0:44:a6:a9:da:38:e2:36:
40:cc:30:69:84:60:c1:97:2e:1b:b7:f7:26:0f:06:
74:b9:d2:d0:8d:bf:7c:d1:27:53:c6:b1:65:70:e4:
52:ff:a3:ce:92:25:87:e2:c4:c4:fd:6f:d3:82:59:
22:6b:3a:93:1c:1a:b6:05:db:5c:52:b6:75:7b:70:
ce:0f:21:3d:f9:46:04:e0:91:e5:7f:97:c2:b6:f5:
85:49:21:42:7b:fd:03:e5:0a:6c:e3:db:bd:82:6d:
49:3f:b9:3f:95:99:8d:3a:fd:a1:c4:92:96:21:de:
43:50:a4:a9:4d:9b:fc:ab:b3:66:4c:00:41:7b:26:
19:9d:a0:0a:dd:48:6e:e1:29:6e:6a:0f:64:10:30:
d8:8d:b5:9e:9c:1c:ec:86:02:7d:a4:4b:81:3a:31:
66:52:97:c4:49:fd:29:c0:ad:49:2b:6d:84:14:51:
13:51:5a:20:07:16:bc:2e:a6:d9:3c:92:78:18:7b:
9d:d6:ab:b5:8a:64:f9:3a:d8:97:a3:a8:b0:72:99:
14:1b:72:76:7f:e8:98:8e:21:ae:3f:0f:b4:f2:13:
6b:fe:d3:b2:15:11:01:df:ff:80:d0:ca:76:9a:5f:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BF:AB:13:C2:1F:B7:86:4F:7B:28:5D:F5:49:98:CB:41:D8:36:2B
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/LL-rE8Ift4ZPeyhd9UmYy0HYNis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.98.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8b:33:57:0b:58:b0:2b:e9:38:a5:39:5d:8f:d4:3f:cc:52:
05:b6:fe:6d:49:1d:8d:35:27:de:4e:67:1c:6b:4d:19:10:c5:
bc:16:55:0a:54:b9:36:c4:b3:15:f8:14:82:b1:4c:30:4c:c0:
b5:15:68:25:a1:dc:11:b9:c8:41:ba:59:c2:f9:ae:67:9e:d8:
64:22:a0:f7:c3:88:23:31:0b:3f:7c:33:5e:69:38:66:d8:ae:
60:ca:3e:2f:7c:9c:10:c4:c5:60:ca:31:71:82:1b:bb:ff:c1:
3d:15:e9:54:f1:f4:43:26:f9:3a:8f:3e:6b:00:62:1f:9c:a2:
db:03:41:12:65:82:17:f7:04:e7:6b:11:25:c5:dd:67:23:c1:
28:12:d1:3b:4f:b6:70:94:f3:22:a5:64:5d:b2:b9:14:a7:b8:
55:11:67:4b:f5:16:c1:03:87:df:5d:2a:70:3d:4b:53:4a:aa:
e2:62:bf:42:6f:2a:b0:46:7e:5b:b9:68:0e:c1:37:e1:f1:db:
06:20:10:8e:6f:2a:a6:b5:40:11:d0:3b:76:2c:6e:bb:c4:ba:
3b:b4:22:62:e4:21:bf:13:fd:44:5a:16:69:85:61:b1:b7:95:
dc:78:89:4f:ea:ea:7d:06:30:63:6e:14:48:bf:08:ed:f6:93:
21:b5:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:20:04 2024 by rpki-client on console-ams.rpki-client.org