Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/lmieNRMEAjnct4jRloIpt_ITj_Q.roa
File: lmieNRMEAjnct4jRloIpt_ITj_Q.roa (raw, json)
Hash identifier: QdFNZdlosp0GUDraRk/9zsgb4YQh6ddMJb3pOfa6IjY=
Subject key identifier: 96:68:9E:35:13:04:02:39:DC:B7:88:D1:96:82:29:B7:F2:13:8F:F4
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 018E7DD798BF688CFF4A63583C637A78DCE9
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/lmieNRMEAjnct4jRloIpt_ITj_Q.roa
Signing time: Wed 27 Mar 2024 02:57:45 +0000
ROA not before: Wed 27 Mar 2024 02:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.33.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7d:d7:98:bf:68:8c:ff:4a:63:58:3c:63:7a:78:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Mar 27 02:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96689e3513040239dcb788d1968229b7f2138ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:9c:48:79:9d:62:a4:b7:ff:6e:bd:fa:be:
93:c6:ba:a0:dc:71:87:e8:93:6b:61:7c:b2:0d:67:
43:c6:27:3e:8a:88:92:70:b4:bd:e1:a6:44:5c:93:
10:58:6c:ed:74:c7:e6:52:15:a2:90:96:cf:4a:fb:
a1:3d:c6:e6:dd:18:19:c6:3a:37:17:70:9c:65:b2:
b1:85:43:cd:17:40:eb:f9:4f:4d:9b:16:89:8c:3c:
69:9b:e3:c5:13:c4:63:aa:90:1c:6f:cf:53:70:60:
24:df:17:1c:93:dd:58:48:54:cc:28:3e:bd:fe:cd:
9f:60:de:1d:69:d0:36:80:7d:58:41:6d:f0:56:8e:
32:c6:50:e9:89:00:c6:20:f3:0f:84:6a:d8:6e:8b:
44:db:f8:f2:f8:d9:b0:12:f0:7e:c4:d9:e3:24:5d:
ab:4f:18:37:9f:ad:7c:bf:f6:9f:ac:00:df:3f:ea:
65:50:8a:c1:d2:7b:a4:9b:13:2e:ca:2b:13:f9:52:
95:1a:42:40:ff:cf:63:ce:c0:b8:ca:cc:4f:4f:2c:
cb:61:ea:33:a0:d1:6a:a6:1a:ae:f4:5e:43:ac:34:
17:84:6c:81:38:c6:2b:8a:d2:75:f9:69:92:fb:f5:
1f:3a:a4:d3:96:9a:bb:b0:77:98:82:a4:bb:b6:92:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:9E:35:13:04:02:39:DC:B7:88:D1:96:82:29:B7:F2:13:8F:F4
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/lmieNRMEAjnct4jRloIpt_ITj_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.92.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:b4:a8:49:ac:fb:8b:c7:31:ba:e2:54:5e:5f:e5:63:85:c5:
44:7e:26:7b:72:62:b7:7b:21:a9:e4:86:5c:0d:c9:4d:68:3e:
42:e6:50:17:ac:f1:8b:c4:e0:41:0c:80:3c:c4:db:49:43:a6:
c1:b8:f8:15:94:dc:05:0f:36:54:09:f5:f4:0f:4d:18:a3:51:
91:b6:b8:33:00:5d:bb:2a:14:49:17:79:62:b9:db:b2:13:89:
05:0d:e2:5c:0b:eb:16:73:07:11:5e:33:17:e2:be:c5:42:b4:
18:1b:ca:51:ab:20:df:5a:13:72:13:58:32:67:09:99:72:56:
eb:b5:12:84:72:0a:28:b8:0f:26:b7:e7:58:8b:18:c4:d3:64:
c1:e3:94:4c:18:41:64:46:e3:5b:97:62:58:3b:83:bd:df:fc:
97:6a:28:cc:1a:b8:6f:9b:6f:59:77:2f:34:b9:fc:06:6b:57:
b1:34:68:bf:59:9e:f3:40:22:e9:43:e5:6c:c7:30:d6:af:21:
23:57:43:8c:c1:23:50:64:ed:5e:31:fd:6c:df:00:99:30:c7:
8a:19:2a:47:07:90:a3:dc:a3:07:f7:61:c2:8e:d4:37:08:0d:
0f:f4:b1:c5:0f:38:dc:70:1f:c1:89:3c:4d:82:02:96:4d:7b:
e1:e3:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:13:35 2024 by rpki-client on console-ams.rpki-client.org