Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/LmShfnxJ3bFq-MOmey1Ri_DnuwI.roa
File: LmShfnxJ3bFq-MOmey1Ri_DnuwI.roa (raw, json)
Hash identifier: PF3VuibycRIof6e2VR5nchHPh4s533jKGzhaJodZBYs=
Subject key identifier: 2E:64:A1:7E:7C:49:DD:B1:6A:F8:C3:A6:7B:2D:51:8B:F0:E7:BB:02
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018CC56EDEA7D6EBEAE2DF5B7EFD51929AC1
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/LmShfnxJ3bFq-MOmey1Ri_DnuwI.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197860
IP address blocks: 109.105.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:de:a7:d6:eb:ea:e2:df:5b:7e:fd:51:92:9a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e64a17e7c49ddb16af8c3a67b2d518bf0e7bb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:81:95:de:09:3b:45:3b:b7:9c:c9:3b:b5:
77:26:4f:5d:e3:4c:da:77:68:50:94:ba:20:45:4f:
aa:fa:cc:c6:1e:e6:b8:65:d4:a3:15:e0:e1:81:a7:
b5:48:c0:34:f1:15:fe:37:a1:a2:bf:35:33:1a:2b:
e2:f1:87:95:91:04:70:b5:51:e2:06:11:e3:5e:16:
58:7a:e4:df:3d:91:17:f3:d6:fe:0c:a0:de:e1:04:
18:ec:d9:58:77:1f:ef:d9:7a:b7:72:6d:3e:6b:fb:
07:aa:8d:d7:b5:b1:da:d0:a5:06:15:4d:14:ed:db:
bd:ae:40:fe:49:a5:ec:fd:8a:aa:49:c9:dd:33:02:
b7:ef:9d:73:e7:cf:40:12:e2:2d:bc:1f:82:c2:23:
0b:cd:a6:e4:9e:3c:37:ec:65:da:a6:54:6e:ed:da:
16:4d:e5:7e:54:97:d8:e1:cc:d2:e2:9e:30:3a:73:
f1:7d:16:91:84:57:e1:77:d3:1e:03:c2:c5:1d:e8:
21:77:c5:c5:c0:af:ea:d5:f0:45:dc:e8:53:d9:48:
d0:6b:ba:7a:68:5d:30:9c:c5:cf:c8:17:c5:f0:9e:
ee:b3:24:1c:da:78:dd:e4:d4:5d:35:92:62:99:db:
ec:72:08:aa:12:33:fe:af:39:1b:14:cd:55:78:fd:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:A1:7E:7C:49:DD:B1:6A:F8:C3:A6:7B:2D:51:8B:F0:E7:BB:02
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/LmShfnxJ3bFq-MOmey1Ri_DnuwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d8:38:fa:26:f9:7a:b2:3b:b1:c2:0f:78:9d:39:4b:6a:39:
13:ae:5f:9e:fc:54:ac:34:ed:91:6c:c3:47:43:33:66:9c:f9:
25:05:1c:00:f6:5b:6a:c0:51:3d:9d:7b:14:ec:24:a9:bd:b1:
92:09:85:8e:c4:30:9a:e2:77:c3:47:ed:5d:a6:4b:6d:24:53:
44:fa:0a:be:5a:6b:59:ea:dd:e9:83:4b:4e:f5:2b:4e:fe:bb:
c1:6b:3b:ff:b7:c6:af:8b:da:06:0e:a0:c4:bb:82:cd:05:62:
25:82:08:1e:3a:de:42:69:87:fd:ba:36:80:32:4f:58:19:40:
ad:93:f8:d4:29:af:0e:19:6b:55:3d:34:37:e4:3d:cc:17:df:
d8:fd:c8:0b:18:e2:f4:4b:b8:53:f0:e5:a5:6f:14:42:c5:06:
f1:71:14:3d:6e:11:4a:84:9c:f0:1e:40:b3:5d:8e:ef:97:c5:
4b:a6:22:89:23:ce:d9:51:5f:8e:d6:82:cc:41:51:a9:f7:e1:
cd:2b:d4:f2:d8:71:5b:c0:87:1b:a2:04:f4:38:fc:b4:12:99:
dd:88:42:43:50:f6:1d:48:15:7f:bc:13:90:72:c9:4e:b4:d9:
a6:19:ef:cd:9a:03:f6:19:97:b5:08:7f:b0:52:c3:7e:40:96:
4e:88:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:58 2024 by rpki-client on console-ams.rpki-client.org