Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/lxSP2u88ktM5ASaTylBEa8rTjAs.roa
File: lxSP2u88ktM5ASaTylBEa8rTjAs.roa (raw, json)
Hash identifier: m4ttu9AnTo1GPo0lpMAowxIx/glx5wcmo1zf5dzxWFs=
Subject key identifier: 97:14:8F:DA:EF:3C:92:D3:39:01:26:93:CA:50:44:6B:CA:D3:8C:0B
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018CC26D35F26BCA6C34CFC6925B3567E5BA
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/lxSP2u88ktM5ASaTylBEa8rTjAs.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19330
IP address blocks: 193.58.199.0/24 maxlen: 24
212.121.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:35:f2:6b:ca:6c:34:cf:c6:92:5b:35:67:e5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97148fdaef3c92d339012693ca50446bcad38c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:7f:ed:c4:8f:d9:d5:b7:43:76:a7:86:e7:
56:43:05:ca:f8:6a:a6:6d:a0:2d:b2:32:1b:28:67:
5c:27:b2:4f:65:58:26:fc:e2:76:6c:f6:7e:f6:f7:
e5:63:d2:88:30:58:52:4b:77:a3:1c:d5:ca:a2:fb:
10:d7:4e:0f:d2:40:0c:ee:81:92:e2:38:7b:85:45:
a8:83:64:7f:95:2f:e2:4c:d1:2e:46:33:be:89:fd:
89:3c:41:e7:e7:3d:79:27:75:21:af:b8:80:4e:31:
4c:46:91:d8:21:a3:df:6a:ab:5e:5d:8a:44:eb:8f:
8f:80:82:94:97:f7:9e:ca:48:f5:8f:dc:b9:08:ed:
2b:a7:70:c6:c3:99:12:1a:6f:25:ac:5a:fa:d1:83:
ab:82:04:4c:61:6b:e2:0b:dc:86:8b:bb:30:99:ec:
8e:89:d1:fa:aa:0c:84:e4:52:ba:53:35:39:10:75:
80:a5:ed:5b:39:4b:2e:ac:f2:01:e4:5d:88:25:88:
d7:b1:01:ea:ff:af:df:03:1d:b5:5c:53:6c:5f:47:
9e:9b:9d:66:aa:41:76:0f:49:a2:11:77:6a:45:56:
ed:4d:2c:26:54:ca:e8:c6:51:ab:e0:fb:6c:fd:3b:
3e:2e:04:17:f4:88:e4:89:bf:dd:24:ad:a8:eb:68:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:8F:DA:EF:3C:92:D3:39:01:26:93:CA:50:44:6B:CA:D3:8C:0B
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/lxSP2u88ktM5ASaTylBEa8rTjAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.199.0/24
212.121.37.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ba:50:77:87:27:d4:aa:87:29:25:72:a2:ef:dc:a0:51:c9:
d0:f1:5f:67:26:74:2f:5d:62:83:27:1f:a9:e6:00:3c:37:0d:
cd:29:98:41:6b:2c:0e:d2:ce:3d:c3:03:c8:7d:77:2e:08:ff:
a9:0c:64:b4:c6:4a:e1:76:a6:a8:70:d6:e8:31:db:bb:e4:09:
5f:ec:ba:42:7c:4e:da:14:99:82:c8:80:eb:ea:82:0c:77:fc:
14:07:10:44:be:62:f8:0a:12:90:4e:58:9e:e1:40:ee:78:8c:
91:d0:f1:8b:af:ee:7a:de:89:2e:b9:e3:0e:f2:bf:21:78:ac:
1a:55:d8:97:ba:e4:61:20:68:60:12:52:67:09:d9:67:e2:28:
19:23:a2:1a:03:c0:14:c7:19:c0:9a:ce:fe:9d:67:f4:d4:fa:
79:d8:36:7c:86:f7:74:b9:10:cc:e9:00:a4:05:88:d5:5b:5b:
c2:0d:2b:be:f0:d2:ed:29:04:09:43:65:ce:99:92:02:55:59:
9c:d3:39:fb:90:4d:63:5c:84:33:02:74:6c:59:23:a1:ce:2a:
c9:66:3c:29:8d:a5:06:fb:3e:b5:eb:28:6a:24:24:3b:ae:a7:
9e:5d:4a:16:60:6f:55:d9:3e:63:92:f1:9a:2c:e6:95:c6:35:
19:b2:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:26:25 2024 by rpki-client on console-ams.rpki-client.org