Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Lme1LkSGZIzSmyw1-8XdQutw60A.roa
File: Lme1LkSGZIzSmyw1-8XdQutw60A.roa (raw, json)
Hash identifier: 5S5QAuFnd535Cr0QWR831R09ivau+JgJhYekyavplDY=
Subject key identifier: 2E:67:B5:2E:44:86:64:8C:D2:9B:2C:35:FB:C5:DD:42:EB:70:EB:40
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 018CC56E7AF205213396110B72747C5D33FD
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Lme1LkSGZIzSmyw1-8XdQutw60A.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61418
IP address blocks: 46.221.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7a:f2:05:21:33:96:11:0b:72:74:7c:5d:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e67b52e4486648cd29b2c35fbc5dd42eb70eb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:e1:8d:d2:60:9e:02:eb:55:8c:ed:1f:36:
36:63:f5:62:c0:d8:41:9f:19:b8:df:f1:89:a6:46:
3e:28:08:4e:63:27:1f:de:a6:1e:75:b0:3d:a7:e4:
92:7e:3c:5c:07:16:5f:e5:f4:28:3f:79:2c:40:b7:
3d:3f:1d:89:bf:ef:6c:f7:9f:68:88:16:62:ea:4c:
72:47:bb:bd:3f:a1:ad:8a:8c:a6:5a:9a:98:d5:00:
93:51:b6:d8:01:3d:22:e2:c1:59:35:2d:d1:5e:57:
f6:40:e1:0e:77:68:31:5e:ea:4a:2a:39:15:b6:2e:
03:c2:18:89:89:17:f2:7b:eb:21:b4:95:a3:c7:95:
24:61:a8:c6:0b:63:4a:d1:e6:47:3d:d9:35:5b:4a:
f5:10:fa:c8:ec:f1:e9:21:c7:92:03:4d:02:c5:eb:
73:2d:26:2e:c6:88:97:45:77:c5:20:a7:e9:75:fd:
a8:ee:b5:db:39:56:94:6d:30:13:40:3f:ad:e1:49:
09:19:af:5d:20:e4:2b:52:11:00:92:aa:61:a5:da:
07:39:e4:aa:bf:55:27:cc:a8:02:ad:85:c3:4b:df:
dc:cf:37:04:b6:6c:02:1a:8d:bb:76:c7:cf:cf:60:
d5:3c:cf:8f:42:ba:97:93:fd:47:06:27:e2:28:03:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:67:B5:2E:44:86:64:8C:D2:9B:2C:35:FB:C5:DD:42:EB:70:EB:40
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Lme1LkSGZIzSmyw1-8XdQutw60A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.221.18.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2f:ee:1f:3c:cf:44:b3:ef:6f:83:13:4b:ed:bd:77:32:43:
43:ff:af:b7:c0:d0:89:97:ff:cb:ca:e4:a6:1a:d3:6d:68:51:
c6:25:ca:3f:e2:7b:d6:12:94:4a:0b:72:fb:66:b7:c5:6f:20:
35:b5:60:52:da:a7:4d:7d:7e:b2:60:36:4c:30:ee:44:33:59:
3c:ff:4a:33:32:49:cb:26:a3:58:d4:45:12:70:86:aa:f2:e7:
28:ca:0c:e8:87:99:dc:7c:9d:4b:eb:ba:13:0c:97:09:e9:db:
b4:75:b3:18:31:7b:56:3c:ed:2c:15:0c:f3:f0:82:49:b0:3c:
a9:b9:7e:3a:f8:3b:a8:0a:81:99:02:db:d5:66:37:99:9a:73:
7d:a7:8e:9f:2e:fb:e8:c4:25:60:9f:da:02:0a:77:5f:08:bf:
4f:84:56:98:5b:94:db:af:87:e0:30:de:27:94:bb:36:b3:56:
dc:ec:b7:76:61:2f:e2:67:dc:bd:92:d2:ea:32:95:f3:9e:88:
0a:25:0d:2a:e7:4b:cf:2a:ea:e1:de:54:ea:17:cf:f8:f6:df:
bd:6f:e3:0e:71:9f:55:85:eb:7c:3b:6e:6d:90:eb:2f:2c:c0:
2a:42:e6:5e:eb:c8:09:0a:e8:69:90:a5:82:19:2b:b8:f1:6c:
12:9e:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:24 2024 by rpki-client on console-ams.rpki-client.org