Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/LY6CJubpXMTh2GGwCiVBGtMjVU8.roa
File: LY6CJubpXMTh2GGwCiVBGtMjVU8.roa (raw, json)
Hash identifier: gWBcSUpI9PFSlQGjkW1oL9Cnkbdo3dxI4KyZmQRVwJY=
Subject key identifier: 2D:8E:82:26:E6:E9:5C:C4:E1:D8:61:B0:0A:25:41:1A:D3:23:55:4F
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 018CCA2B89E1A2E0544FA28033AB47FD6F1C
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/LY6CJubpXMTh2GGwCiVBGtMjVU8.roa
Signing time: Tue 02 Jan 2024 12:35:00 +0000
ROA not before: Tue 02 Jan 2024 12:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33946
IP address blocks: 193.26.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:89:e1:a2:e0:54:4f:a2:80:33:ab:47:fd:6f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Jan 2 12:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d8e8226e6e95cc4e1d861b00a25411ad323554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:b9:80:c7:51:d5:5d:e7:5a:3e:2a:98:b9:
9f:60:a1:c7:7d:b7:d3:61:7f:bd:99:55:93:8b:32:
8d:24:91:42:ff:a7:27:14:da:d9:3b:6b:e3:f0:5e:
84:7e:7a:8a:84:04:e9:2f:fd:13:85:64:7b:fd:fc:
c5:e9:7c:53:4b:3e:56:ba:5f:c2:a0:00:c8:3f:16:
1e:8a:5d:d8:38:9b:b9:a7:6b:75:00:5b:89:9a:1d:
cf:a2:09:e8:67:ed:38:c2:60:a2:53:4f:74:0f:6c:
42:40:66:c0:65:5e:79:b3:b0:25:8d:b4:16:0a:97:
3b:b2:1b:8e:56:a2:6e:60:72:be:42:2b:9f:d1:82:
f9:cf:0e:c6:24:a0:07:09:91:c5:ea:f9:73:66:48:
ec:3a:3d:30:a6:2f:9b:8a:b2:46:dd:ac:94:b5:28:
4e:63:41:ac:5f:9e:9f:dc:90:03:45:7a:c1:bc:3e:
ba:37:72:74:f5:98:01:7f:f9:88:0c:4f:60:c4:06:
8c:08:09:62:38:cc:23:ae:3b:ae:f0:34:f8:17:34:
00:74:22:d7:0f:30:db:35:11:2d:c5:84:43:71:d9:
ea:05:a8:52:8c:e3:fa:27:16:16:07:1a:dc:89:f7:
c6:93:3c:53:e1:e3:19:fe:39:d4:80:b6:4e:e7:cd:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8E:82:26:E6:E9:5C:C4:E1:D8:61:B0:0A:25:41:1A:D3:23:55:4F
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/LY6CJubpXMTh2GGwCiVBGtMjVU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:a5:18:6c:0c:b6:db:ca:a8:fa:9b:b2:d5:2b:4a:9a:75:
ec:3d:23:b4:fa:bd:d8:7f:32:cb:1d:4c:48:94:9b:aa:86:c1:
e3:11:9f:02:69:91:48:29:65:fd:3d:7e:b9:cc:f9:45:42:25:
81:48:9b:d3:fa:cb:f7:e0:70:47:f0:b9:cf:05:e2:0c:39:17:
a9:51:e5:b0:7b:12:89:ea:be:a2:70:99:36:7e:f5:0c:bc:40:
72:9a:91:c5:4b:9c:49:cf:1f:34:c1:ad:a0:22:55:3c:eb:51:
fc:0a:e5:24:fe:ea:71:35:4d:d3:14:03:06:fc:96:84:14:7a:
75:aa:b8:d0:18:66:e1:c5:29:e4:dc:2c:a4:da:85:57:85:9a:
82:26:40:5f:39:86:22:54:12:5b:eb:85:18:6f:4c:ba:e7:08:
75:ec:1e:4b:bb:ca:dc:36:05:de:14:24:9d:f5:7b:44:a7:cc:
08:18:25:96:7b:65:f1:5c:59:3e:f3:bb:65:0c:90:e2:e0:cd:
fb:f9:72:2a:e5:ad:13:d3:7e:8b:99:4b:69:54:a9:6e:07:ae:
c0:d3:02:68:85:1c:f3:ce:19:96:a7:2b:88:36:d4:6d:47:ac:
67:76:70:b6:77:dd:b1:c4:04:21:f2:a8:f8:5e:d9:d7:7e:36:
9c:db:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:24:54 2024 by rpki-client on console-ams.rpki-client.org