Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/Lt1W5fFoSCEBk9FXBi-wWDlviKw.roa
File: Lt1W5fFoSCEBk9FXBi-wWDlviKw.roa (raw, json)
Hash identifier: SfnV0Z9TMiGlFeeuBPLi5Ux2KTKMczLkkz1LTU8HtLQ=
Subject key identifier: 2E:DD:56:E5:F1:68:48:21:01:93:D1:57:06:2F:B0:58:39:6F:88:AC
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 018CC26D17E927676424E368797E9E4F350A
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/Lt1W5fFoSCEBk9FXBi-wWDlviKw.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42568
IP address blocks: 194.0.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:17:e9:27:67:64:24:e3:68:79:7e:9e:4f:35:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2edd56e5f16848210193d157062fb058396f88ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:8e:f0:9c:05:38:b6:ed:14:97:82:6b:b7:
14:6f:ad:0a:d9:df:68:6c:ad:13:59:ce:3f:29:31:
d7:13:7d:3a:2f:7d:7c:0b:9a:21:fc:11:50:5a:de:
77:72:88:a0:8e:b2:ad:be:9b:e0:42:12:50:16:ed:
3f:34:bb:50:c1:b6:b9:28:e6:24:f3:4a:a3:0a:a8:
57:d8:21:f8:a8:41:a1:f3:bf:16:68:1a:5f:5f:1a:
07:1f:02:20:0c:5e:e5:53:36:1e:60:14:d1:15:3c:
5a:ca:1f:8a:a7:57:3f:8a:21:d4:ca:eb:ab:78:2b:
43:56:55:22:7f:8e:cc:d3:17:01:bc:e8:07:39:47:
9d:23:48:59:03:43:43:8e:2f:ca:a7:9a:ee:92:5a:
86:ed:36:8b:1d:fb:a3:8b:de:a0:10:77:7f:72:8e:
10:c9:dc:df:8e:3c:ef:4a:12:9e:55:a4:69:cb:77:
8c:8b:5a:92:61:4c:30:15:e2:b2:2c:3b:9f:cb:b6:
6c:3c:ba:9a:72:76:74:ec:de:ee:41:31:96:df:79:
0a:03:02:12:73:f6:34:b0:ec:ba:17:bd:9e:bb:e6:
37:f5:46:78:fb:fe:95:d0:08:2c:fd:ee:18:4b:99:
04:c1:c5:94:10:88:8d:1b:72:c5:fc:01:a9:b7:66:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:56:E5:F1:68:48:21:01:93:D1:57:06:2F:B0:58:39:6F:88:AC
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/Lt1W5fFoSCEBk9FXBi-wWDlviKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:38:8f:0d:72:b7:a3:fe:35:b5:3c:c7:52:28:ac:78:7e:cd:
29:87:a1:1f:69:5c:72:38:f3:db:9a:fb:5d:3c:4f:5c:c1:4c:
4a:8f:4c:bd:ba:52:3d:b0:0e:00:87:27:86:2c:f4:6e:50:4a:
b8:10:6f:f6:5f:ad:f7:c1:ea:d0:ca:08:0b:ff:d4:af:9d:e7:
51:69:23:8b:aa:2e:b9:31:c8:1a:06:27:74:60:2d:ed:34:1d:
48:48:c5:93:e8:24:74:7f:a2:5c:b3:74:8f:89:d5:5f:d1:19:
55:9e:02:1f:62:8e:ec:83:cc:de:98:d7:29:40:95:14:7b:fb:
ef:dd:b5:20:da:84:c3:3e:7e:2d:0b:3b:8e:5e:c5:b7:a6:99:
d1:b7:64:71:63:89:34:69:f7:e7:a8:00:62:6c:5a:21:81:e9:
fa:c2:0c:a7:49:e2:ef:97:47:fb:e4:55:7c:56:96:4c:c2:c9:
b1:bb:e2:0d:e4:e2:18:92:eb:5b:bf:73:90:23:b0:6d:f4:a8:
5e:54:b0:bb:2e:a5:be:01:6e:80:13:a4:a8:65:cc:dd:9b:c5:
b9:c5:90:15:f6:d5:2f:bc:82:03:24:9d:55:44:50:74:d4:52:
29:18:05:58:d8:76:16:22:e4:77:dd:99:5e:8c:51:83:10:ec:
12:1c:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 13:05:11 2024 by rpki-client on console-fra.rpki-client.org