Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/LSDMCd3vAbraqvBOjsVUO4xE8bA.roa
File: LSDMCd3vAbraqvBOjsVUO4xE8bA.roa (raw, json)
Hash identifier: ocdK6cDSgBsyNTFmw5owpfazZGEBMfYXrO+Is80zjug=
Subject key identifier: 2D:20:CC:09:DD:EF:01:BA:DA:AA:F0:4E:8E:C5:54:3B:8C:44:F1:B0
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018CC4245233244991C2AA396D0222009B5A
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/LSDMCd3vAbraqvBOjsVUO4xE8bA.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24739
IP address blocks: 91.108.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:52:33:24:49:91:c2:aa:39:6d:02:22:00:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d20cc09ddef01badaaaf04e8ec5543b8c44f1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:9b:62:ff:e3:3e:12:26:2e:a6:d8:77:e4:
5b:45:6f:b7:a2:ab:2c:6b:7a:d8:be:dc:4e:f6:78:
f5:bb:1f:38:21:ec:f2:22:aa:16:85:be:dc:88:91:
2c:1e:6d:d5:58:e9:cf:06:81:49:00:d7:32:86:0f:
56:2e:13:2d:7f:c9:ad:fa:85:ab:64:4c:1f:95:dc:
c7:89:05:32:99:f7:8f:4b:c6:d5:f4:d3:bf:d1:b9:
d6:c0:05:ca:ec:4c:3c:a4:40:33:35:82:f3:71:2d:
a6:40:95:0d:ef:5e:60:9b:4b:55:d9:8a:47:16:59:
58:bf:64:28:66:e8:68:17:e6:3a:e8:9f:25:fc:d7:
1e:5b:d3:2e:2c:c9:e2:eb:2d:7e:a0:9f:fb:2e:2c:
34:66:22:bf:b9:58:bc:60:8f:31:4b:19:bb:a3:26:
f5:2d:5c:7c:21:eb:51:03:f9:32:93:e5:6d:ae:04:
60:e0:ed:72:02:66:9b:8d:0e:00:9c:7c:a9:41:f4:
f6:f2:78:b3:87:c9:9e:fb:9b:b8:a2:34:be:c0:75:
f1:73:26:34:43:01:a9:f7:e5:5a:9d:36:90:19:07:
5d:d2:8e:a8:21:03:dd:de:01:1e:75:98:bc:98:55:
29:39:d5:e5:ac:c3:f7:cd:ba:5f:11:a5:2f:3d:ae:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:20:CC:09:DD:EF:01:BA:DA:AA:F0:4E:8E:C5:54:3B:8C:44:F1:B0
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/LSDMCd3vAbraqvBOjsVUO4xE8bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.43.0/24
Signature Algorithm: sha256WithRSAEncryption
20:de:4e:62:cf:30:0f:8b:2b:b6:fb:52:93:0c:9c:6b:5d:ec:
07:cc:46:5d:2d:d5:52:88:ff:99:cf:61:8f:f3:61:48:e1:0d:
7d:e1:0b:60:ab:f4:75:9c:f8:1f:dd:32:2c:74:07:e4:cf:5e:
88:94:1f:d7:ea:d6:29:98:da:00:e1:12:fc:96:b7:d0:df:08:
26:a0:26:f3:b6:6e:61:9b:dc:64:a5:e8:f5:d6:41:75:af:d4:
05:f6:4e:0b:d3:ae:bc:18:79:52:ac:9b:d5:c3:91:e0:18:6b:
85:48:2d:c6:f1:f4:4b:d3:a7:49:97:a0:de:62:fe:90:dc:9f:
cf:ee:0e:8c:c9:59:04:86:20:e3:fb:b8:ce:e8:bc:41:f3:93:
84:fb:78:f1:a9:d5:db:25:44:1a:c8:55:81:30:19:af:1d:d4:
c6:0d:c0:28:41:a9:62:f4:c2:63:21:dd:ce:4f:d8:70:1a:04:
d0:d4:1d:25:e0:71:6f:05:45:83:ca:b2:6d:78:77:59:4e:bc:
7d:5b:22:bc:a7:f9:72:82:e2:3d:74:0c:07:8e:25:87:29:a3:
e5:19:6f:2f:81:3d:df:5c:bb:9e:59:2b:e0:a8:22:dd:35:11:
c7:f2:b0:37:03:f0:47:64:41:72:fe:5c:58:65:3c:b5:ba:7a:
d7:d8:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:05 2024 by rpki-client on console-fra.rpki-client.org