Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/LIClP0IvyC1kmXelp0F1Bg23KYY.roa
File: LIClP0IvyC1kmXelp0F1Bg23KYY.roa (raw, json)
Hash identifier: ovqCyj6QlKLPA9cXreoKGypgE5xe0ZQGnp0mbZYtlT8=
Subject key identifier: 2C:80:A5:3F:42:2F:C8:2D:64:99:77:A5:A7:41:75:06:0D:B7:29:86
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018CC56DEAEA0F4AAD49A104B514E055B365
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/LIClP0IvyC1kmXelp0F1Bg23KYY.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212322
IP address blocks: 185.148.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ea:ea:0f:4a:ad:49:a1:04:b5:14:e0:55:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c80a53f422fc82d649977a5a74175060db72986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:b7:fb:78:9d:b3:40:67:1b:c5:a3:ae:df:
b7:b8:d6:c4:df:64:be:48:aa:9f:6e:74:67:11:af:
6d:46:23:54:7a:53:ac:55:25:a5:a4:f0:2e:b9:a8:
10:5d:f5:43:c5:86:9c:b3:51:24:9f:58:98:0f:7d:
e1:49:1f:2c:6a:ec:ec:e1:38:94:41:cb:8f:ca:24:
43:a6:b1:88:58:7c:c6:a4:c1:c4:f6:df:a9:74:79:
57:31:62:f8:41:ad:1a:69:32:38:f5:eb:ae:ac:56:
ea:b6:6e:5e:c9:89:ba:aa:42:a7:51:bb:6f:ce:ba:
92:ca:7b:b5:fb:8d:31:9c:81:7f:a1:e3:ce:2c:7a:
70:88:cc:e6:e9:ca:8d:43:97:4c:89:ae:40:c0:b7:
0d:33:f5:d6:82:5c:7a:6b:f5:9e:24:83:ea:c6:d7:
a5:85:e9:d2:c7:31:ce:49:e6:16:c5:24:cc:df:95:
aa:e7:3b:a4:0c:d2:68:0a:9c:93:92:6c:d3:f5:f1:
34:ce:e8:2b:9c:14:be:5f:25:6d:4e:90:8c:c4:6f:
eb:9e:4b:ca:f3:92:7e:20:86:9a:81:b5:a6:82:54:
5f:a1:d1:9f:3e:9c:bc:3a:ff:c8:35:e1:10:fa:2b:
57:03:09:f6:8b:d5:43:a1:90:63:36:3c:8b:65:23:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:A5:3F:42:2F:C8:2D:64:99:77:A5:A7:41:75:06:0D:B7:29:86
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/LIClP0IvyC1kmXelp0F1Bg23KYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.240.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:04:53:9c:69:01:1f:32:24:88:2f:88:bb:72:85:6a:fc:3d:
50:b0:66:1c:ea:5d:1f:23:63:a7:ec:79:e7:a9:b5:ae:84:0b:
a7:62:39:1d:94:da:4d:d0:67:1c:cd:0b:e1:48:cc:a3:65:3d:
00:2d:f4:6d:65:b8:96:1e:41:0f:de:b3:f0:77:f4:a4:f2:98:
cd:b9:c1:74:1c:ea:76:b5:78:28:c1:b1:ee:76:cc:ee:b3:03:
23:2c:d8:f2:9d:11:de:fc:4b:25:af:86:0d:9f:b3:5e:9c:39:
4d:e7:ff:50:dc:0d:7d:c6:e6:f0:2f:a2:c2:e6:c7:ea:10:02:
27:f6:f0:be:20:c3:7f:5e:86:aa:d4:cd:1d:a1:67:19:01:e9:
78:39:ea:74:85:c6:eb:36:91:21:42:22:f0:10:e9:03:f5:cf:
24:6e:31:50:42:c6:74:3f:04:90:41:ae:b5:7a:38:44:ca:c8:
ad:4c:9b:93:32:75:18:2d:9c:4b:4c:ef:60:f7:33:70:11:43:
a4:d1:65:3d:d5:24:f3:6f:73:d4:3e:d2:4e:78:71:37:9a:22:
35:87:c4:c4:89:01:60:22:28:2b:2f:dc:1a:30:51:6d:d0:15:
7f:08:26:28:41:80:34:d9:a6:67:34:d4:12:bb:4f:9b:6a:f9:
ac:3d:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:39:57 2024 by rpki-client on console-fra.rpki-client.org