Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/LD3lOEV10uIkcFbzMROz1z4RvzA.roa
File: LD3lOEV10uIkcFbzMROz1z4RvzA.roa (raw, json)
Hash identifier: oHODW5fU0hPCgdgiarNC11OfTCrn8TJ39Y+wC0DW930=
Subject key identifier: 2C:3D:E5:38:45:75:D2:E2:24:70:56:F3:31:13:B3:D7:3E:11:BF:30
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 018CC50027BEC6D8C47E9EAB76427DC18EBF
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/LD3lOEV10uIkcFbzMROz1z4RvzA.roa
Signing time: Mon 01 Jan 2024 12:29:30 +0000
ROA not before: Mon 01 Jan 2024 12:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133480
IP address blocks: 185.54.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:27:be:c6:d8:c4:7e:9e:ab:76:42:7d:c1:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c3de5384575d2e2247056f33113b3d73e11bf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:29:9f:01:41:70:95:c5:b4:a1:72:d0:a5:
bc:08:fc:9f:77:94:be:94:90:c6:e1:28:44:15:92:
f8:ca:35:dd:ee:b6:73:6a:46:8f:a0:d3:95:59:09:
3d:0f:1b:03:2a:5b:d7:db:94:1f:2d:d7:ab:90:bc:
f7:58:30:18:35:64:de:d6:b9:4e:62:78:d9:f0:cc:
2c:cc:bc:42:62:d9:50:6d:3e:b2:61:b3:a2:be:d1:
da:59:28:46:4d:d6:cb:38:f0:e0:99:20:b5:e7:a0:
01:e3:82:33:bd:93:54:03:b2:d6:cb:07:f4:6f:1c:
e8:51:9d:94:f2:24:18:c8:80:60:5c:0d:1a:9b:e9:
2b:f6:04:98:d0:b9:69:b8:13:18:08:b1:2f:6c:c4:
66:d2:20:6f:ed:2c:9c:2e:ab:0e:ff:d3:54:87:08:
78:6f:dc:8a:53:14:50:79:43:26:e3:5f:53:62:5f:
0e:ac:4b:a4:1b:0c:18:97:dc:ac:73:ac:4c:b0:f3:
e9:49:22:cc:05:4b:e9:73:f3:0b:fc:b0:58:11:d6:
95:d0:19:ce:b7:8c:65:16:71:cb:16:c7:c5:b9:12:
d7:a1:74:83:dc:b2:c5:b0:db:3d:34:83:ff:7a:4c:
f6:f6:3b:f3:23:82:33:a1:8b:be:64:0f:0f:d4:2c:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3D:E5:38:45:75:D2:E2:24:70:56:F3:31:13:B3:D7:3E:11:BF:30
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/LD3lOEV10uIkcFbzMROz1z4RvzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.228.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ea:05:3b:bd:a9:27:1b:58:94:be:ae:12:4a:40:ef:3a:b6:
b7:52:08:65:6a:87:b3:3e:b0:5d:0c:0e:88:f7:44:21:8d:ff:
fa:f2:77:be:31:a2:fc:71:47:a0:fa:40:08:3e:34:0d:bb:b8:
a3:8b:e2:d3:97:32:97:2c:98:8f:b1:b5:a1:6f:85:0c:be:83:
18:a9:c4:4a:9b:ef:4a:b0:56:91:76:6e:e7:54:1e:ec:ea:cc:
92:81:31:b9:55:63:38:bb:30:54:f0:45:8a:82:2a:76:48:4b:
68:61:31:1e:3e:64:1f:d3:fe:7c:87:d1:e9:48:da:59:fb:4b:
f1:48:e0:b6:f6:79:3c:d7:19:1b:c7:7c:78:2e:5f:06:34:6d:
15:e3:5e:dd:a9:5b:12:7d:6d:94:3b:05:ab:87:e8:d6:11:77:
54:60:2b:88:f8:e4:2a:c1:ac:e1:c9:2b:c6:b9:9f:2f:77:f0:
78:02:5a:d8:79:d7:df:c2:df:e9:c2:98:de:ce:e9:cc:fe:2b:
99:1c:3b:40:91:4a:e5:25:4a:d2:23:fe:2f:76:93:0f:cb:9c:
2d:7a:69:b0:d3:fb:ec:d3:13:f4:a5:1c:60:00:3f:11:56:cd:
4d:b8:f0:45:4a:a9:6c:0e:3c:2b:13:89:6b:2e:23:3e:1c:61:
12:3d:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:18:43 2024 by rpki-client on console-ams.rpki-client.org