Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/LlwRjf77hNr3O3DXi61qwgGDLfQ.roa
File: LlwRjf77hNr3O3DXi61qwgGDLfQ.roa (raw, json)
Hash identifier: m2PzaDWZrdO4oNu4mPH/U2kv3SSh+OsP0MHKqEfAYMw=
Subject key identifier: 2E:5C:11:8D:FE:FB:84:DA:F7:3B:70:D7:8B:AD:6A:C2:01:83:2D:F4
Certificate issuer: /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial: 018CCA2A7528D8D0B31A81D99A15DB485E05
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/LlwRjf77hNr3O3DXi61qwgGDLfQ.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 906
IP address blocks: 45.88.192.0/22 maxlen: 24
2a07:aec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:75:28:d8:d0:b3:1a:81:d9:9a:15:db:48:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e5c118dfefb84daf73b70d78bad6ac201832df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:68:42:0a:61:da:52:a1:fb:64:5a:1e:6e:
69:1c:3b:e5:f0:4a:62:2a:18:62:c6:8a:0c:87:23:
9b:a9:39:b2:a8:7f:82:75:c5:7c:32:1f:03:66:50:
1c:5f:0b:20:f6:60:07:8b:52:9e:3a:7c:1e:31:04:
f1:73:7f:a4:47:c6:6e:5c:50:35:3f:c5:f3:02:0d:
0e:59:ae:e4:5e:9d:6d:8b:ae:57:49:30:b0:56:23:
af:55:23:9f:03:a2:78:10:32:d4:20:7b:0f:9f:b2:
61:ac:ce:51:c9:75:8b:ce:de:6c:22:68:5b:16:02:
dd:8d:f8:ca:7c:32:3f:b2:32:6b:0b:43:79:30:1a:
ae:b8:27:a5:73:db:68:59:d0:1a:1d:12:11:33:9b:
a1:12:a9:f4:d3:f4:37:f1:15:f0:b3:4e:8f:65:67:
e2:c8:98:ab:3c:93:16:ba:a3:62:a1:f4:29:d1:4d:
ac:dd:e8:76:ab:52:6d:76:7e:65:e9:d3:0c:01:32:
39:06:d2:5a:ab:c8:9d:3c:97:a5:4f:bb:10:32:05:
cf:84:f6:c5:77:88:9a:f7:5b:59:d7:c3:d3:f1:d9:
57:68:63:75:75:0f:e4:5d:46:66:90:ea:dc:96:84:
18:70:8b:5a:88:9e:15:45:24:d4:37:d4:d6:7e:9d:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:11:8D:FE:FB:84:DA:F7:3B:70:D7:8B:AD:6A:C2:01:83:2D:F4
X509v3 Authority Key Identifier:
keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/LlwRjf77hNr3O3DXi61qwgGDLfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.192.0/22
IPv6:
2a07:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
41:d9:08:b5:2d:59:92:70:10:79:39:74:d7:22:27:41:0b:53:
7a:af:90:44:56:e8:92:df:ce:84:66:20:ca:37:96:8d:65:a6:
64:7c:08:99:f3:d6:c4:03:a0:8c:58:4c:76:70:0f:a3:ce:0f:
c8:f1:eb:05:7e:e6:8c:81:56:7a:d5:a1:f3:21:53:de:09:40:
fb:e4:8a:03:8c:f2:09:a9:ba:a3:82:e3:29:7e:61:0f:80:61:
ab:85:89:a1:1c:27:af:7f:7c:5d:07:29:0c:ba:15:26:c1:03:
93:1f:0f:1a:fc:1f:43:a2:1e:c8:01:5d:df:d8:20:80:cc:8d:
68:24:cb:10:bb:09:98:c8:fb:e9:26:1b:82:d8:49:3a:b2:38:
12:20:a8:47:ce:d4:fe:e9:49:cd:46:9b:67:25:5b:e7:ba:34:
b0:f4:12:ab:f1:b5:da:f1:04:44:fa:2b:72:39:7f:ac:85:7c:
75:1c:f2:34:96:ec:a2:05:28:86:d3:6b:0e:0a:64:4d:47:d7:
e7:9f:d4:cb:37:c6:f0:0b:f5:e6:b2:dd:8f:d4:71:80:4e:99:
12:ff:f6:71:67:65:0c:c5:e2:fc:a7:b0:4d:0d:51:69:e2:7a:
d0:a6:86:1a:d6:14:78:9e:e6:38:35:5f:0e:2e:4c:9b:58:dd:
32:40:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:13 2024 by rpki-client on console-ams.rpki-client.org