Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/ldeOsLdYM03ynw_eV3MwBSjMfd0.roa
File: ldeOsLdYM03ynw_eV3MwBSjMfd0.roa (raw, json)
Hash identifier: vFBaQEVynj70DmkSeyY+88/cGPBk8g45Fqg+j+D3/+k=
Subject key identifier: 95:D7:8E:B0:B7:58:33:4D:F2:9F:0F:DE:57:73:30:05:28:CC:7D:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 018CC500D8A60487FFD9A483EAF953B595EC
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/ldeOsLdYM03ynw_eV3MwBSjMfd0.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20845
IP address blocks: 91.135.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d8:a6:04:87:ff:d9:a4:83:ea:f9:53:b5:95:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95d78eb0b758334df29f0fde5773300528cc7ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:1e:f4:be:09:49:b8:d5:8d:b5:13:26:22:
61:54:62:7e:d1:86:86:0a:b1:85:b9:32:4c:9a:bb:
21:2f:29:03:3b:57:23:4f:cb:4e:a7:29:44:6f:78:
08:e6:c8:60:95:f5:7e:ca:4e:93:2a:89:ac:dc:ce:
de:8a:f0:c5:c6:44:0b:77:7d:a6:36:52:c2:e5:02:
7f:ae:d3:9f:30:6a:af:a2:43:9e:d8:4c:b1:7f:35:
0b:4d:36:ed:af:7c:18:82:e7:df:64:ec:27:c8:a7:
87:96:81:99:97:7e:ae:5c:b9:95:3d:63:44:97:34:
68:d6:de:c8:12:db:04:9a:91:7c:46:53:e2:d6:d2:
e5:13:32:ef:83:52:ab:64:3e:7a:f3:ce:58:f8:21:
07:85:0c:45:be:84:e1:8f:49:e9:bd:d4:eb:fd:e7:
e5:52:8e:e1:b1:69:20:e3:b0:57:03:e7:6a:f7:1d:
5f:f4:4c:b3:c4:89:4d:c5:f6:c5:ac:6c:ef:3b:09:
54:4a:fc:43:94:4c:65:6b:2f:c4:d9:1d:d0:91:ce:
dc:df:54:f9:0a:d1:88:7a:63:a1:15:2a:81:06:2f:
e1:f6:b1:09:32:66:59:9f:56:36:7d:8c:3e:30:9e:
b5:d3:95:93:13:cb:33:eb:92:ac:6c:ab:43:51:7a:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:8E:B0:B7:58:33:4D:F2:9F:0F:DE:57:73:30:05:28:CC:7D:DD
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/ldeOsLdYM03ynw_eV3MwBSjMfd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
18:99:25:85:4f:ca:27:8a:50:b2:bd:93:fe:f7:ee:c8:0d:8a:
b2:a0:85:38:df:f0:aa:b5:e3:b6:3e:85:e7:62:fa:8e:25:1f:
66:6d:a6:0d:cc:f0:f4:d7:f5:e1:c3:e8:30:2f:01:77:fc:28:
1a:cc:01:10:d9:65:14:ce:6f:d3:3f:d8:db:15:01:88:b2:26:
1b:12:d8:b1:9c:ae:4a:50:ad:f9:84:3b:0f:a1:c3:27:84:b5:
fe:d9:98:a8:91:2e:ac:14:b7:80:c7:76:06:46:97:53:83:4c:
d5:6b:56:ce:49:c7:aa:7e:78:1c:c4:cf:14:7c:8c:ca:1e:62:
37:f2:2e:2a:52:51:b8:32:38:3f:64:42:be:c0:d1:4c:69:45:
5f:d1:b7:5f:6d:e7:f7:e1:29:6e:b9:90:27:43:8e:ad:4b:2a:
14:25:09:40:cb:b0:e3:00:4b:16:34:a8:54:92:c3:5a:b1:12:
2a:00:f0:bc:d9:54:0e:91:32:74:29:82:63:09:96:f6:7b:61:
4f:0e:80:5f:14:b0:1d:b0:ae:35:27:8a:e2:ef:3c:5f:e6:e0:
52:bf:63:c8:5c:20:52:80:cc:9a:39:58:31:22:2a:ba:48:27:
62:5c:f0:25:7e:1d:df:96:1c:d1:7c:74:f0:0d:fd:1b:dc:a7:
e5:fd:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:42:48 2024 by rpki-client on console-fra.rpki-client.org