Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LYYsra63oE1Epx7LpIHiP0_Z3u8.roa
File: LYYsra63oE1Epx7LpIHiP0_Z3u8.roa (raw, json)
Hash identifier: LhM1rC5usSeKY9USyuI/0gHoQ+C6b4rVckiDf7YhDMQ=
Subject key identifier: 2D:86:2C:AD:AE:B7:A0:4D:44:A7:1E:CB:A4:81:E2:3F:4F:D9:DE:EF
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018D3AA0797FFC97E653FC2C2CE90F643441
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LYYsra63oE1Epx7LpIHiP0_Z3u8.roa
Signing time: Wed 24 Jan 2024 08:40:11 +0000
ROA not before: Wed 24 Jan 2024 08:40:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21700
IP address blocks: 159.148.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:a0:79:7f:fc:97:e6:53:fc:2c:2c:e9:0f:64:34:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 24 08:40:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d862cadaeb7a04d44a71ecba481e23f4fd9deef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:36:d8:18:2e:90:08:48:c4:9a:48:d7:f5:
4d:fe:f3:a5:86:f7:31:f5:45:3e:89:8b:de:3c:42:
be:d7:67:13:28:88:b7:9d:ab:ee:32:bc:31:81:9a:
a7:d1:16:95:ea:fb:7b:f6:d9:9f:4c:a8:40:e1:78:
89:a2:a5:ec:7a:26:74:c8:c5:7d:c0:72:f9:d8:63:
c4:55:fe:e3:c8:64:e5:a9:6f:5f:2a:a0:9b:49:0a:
7a:16:9b:52:85:90:3a:b8:8b:3b:07:48:37:51:d4:
6d:ed:c3:57:46:d1:d3:36:ed:16:12:80:03:93:3d:
88:11:c5:33:e7:22:fd:ec:c7:f8:34:40:93:1a:bb:
11:3a:00:76:17:1f:4d:de:7d:8a:f1:52:cd:b8:49:
1d:9a:4b:85:d1:fe:41:1f:26:bf:02:dd:b1:ab:48:
9c:8f:fd:b7:f7:5b:47:0d:bb:e4:42:04:dd:c2:c2:
94:ed:a6:8c:ed:81:a2:61:be:1f:90:75:0b:1e:29:
40:10:80:54:ca:d9:5c:ee:da:d1:a6:e0:c7:91:d0:
e6:76:e9:fd:62:b2:0f:14:34:9e:d8:68:54:41:5e:
88:5c:46:6f:5b:4c:91:28:b5:f7:80:94:2f:8a:13:
86:5f:e8:04:48:ae:20:96:39:ab:f5:03:12:6d:ed:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:2C:AD:AE:B7:A0:4D:44:A7:1E:CB:A4:81:E2:3F:4F:D9:DE:EF
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LYYsra63oE1Epx7LpIHiP0_Z3u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.114.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c9:86:00:ab:88:5a:ce:1e:cb:71:33:d5:a7:c2:40:32:0b:
49:61:60:af:9b:0e:99:8a:fe:f7:e7:ab:ff:c1:36:28:12:7c:
c7:b7:f1:0c:7a:b7:40:2a:40:d4:52:45:bc:4f:87:8d:28:13:
c5:8f:f4:6f:0f:43:e9:3f:02:33:b3:01:fe:ac:3c:ed:30:fc:
8e:80:17:99:63:5c:6d:37:a7:e1:1a:65:0c:6b:1e:4e:b7:c7:
11:c8:20:ec:6e:00:24:ee:b5:36:74:b2:56:4a:50:b1:4d:d0:
6e:94:a3:62:1a:5f:57:23:c7:e0:d3:51:bc:4c:33:e4:0c:19:
e8:11:1a:06:b6:3b:7a:6d:d8:c0:59:58:9f:98:c8:e1:d0:12:
3b:35:20:24:3b:7a:0f:93:48:99:cc:70:b8:dd:67:d0:1f:b7:
c8:a5:2c:68:3c:6e:4a:82:32:d9:5a:0e:1d:e3:13:42:45:88:
b0:a9:12:14:04:da:c5:8e:11:2b:ad:df:d9:82:56:f2:a1:fc:
7b:e6:e9:3f:41:08:d0:4e:b8:bc:3d:31:ce:8d:ff:c6:7f:94:
3c:59:78:30:d3:cf:ac:bd:41:07:ac:b7:8f:24:8a:0d:d5:ff:
8c:6b:57:bb:42:52:36:c3:34:d7:39:ec:e8:85:15:05:d4:e9:
a6:12:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:30:38 2024 by rpki-client on console-ams.rpki-client.org