Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/LTrr0d188CBPNf6jhrQRCX5bRX0.roa
File: LTrr0d188CBPNf6jhrQRCX5bRX0.roa (raw, json)
Hash identifier: UQ8VAkEwQ5NUuCPwT8pZdUQmu6ewlmcBi0Heyd9XTt4=
Subject key identifier: 2D:3A:EB:D1:DD:7C:F0:20:4F:35:FE:A3:86:B4:11:09:7E:5B:45:7D
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 018CC5DBFB252A853A119BF6588B90203E5C
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/LTrr0d188CBPNf6jhrQRCX5bRX0.roa
Signing time: Mon 01 Jan 2024 16:29:37 +0000
ROA not before: Mon 01 Jan 2024 16:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.40.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fb:25:2a:85:3a:11:9b:f6:58:8b:90:20:3e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3aebd1dd7cf0204f35fea386b411097e5b457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:27:90:83:28:71:58:c2:0d:7c:0c:fa:6f:69:
01:9b:09:e6:01:fa:14:c1:d1:4d:a3:7a:5e:ff:e6:
23:fe:3f:ec:20:63:01:af:4f:9a:5f:a1:36:4e:a1:
d2:fc:b4:04:34:e7:9d:96:13:bf:62:ee:d1:93:c8:
6f:38:2c:29:1f:55:e6:d4:5c:4b:25:a4:b0:58:02:
23:92:69:44:f8:21:ea:07:af:08:05:c8:03:66:68:
63:4b:0d:6d:24:ca:9e:47:64:fe:c4:12:9b:77:4c:
fe:15:5a:34:7f:ed:4f:c2:5c:7e:b8:40:d9:2d:c9:
12:d1:9e:de:d9:a3:bf:75:20:ff:8e:83:d1:45:e9:
53:e6:f2:6e:5a:94:a7:4c:42:04:85:8c:a9:4f:a2:
1a:5c:5e:e5:de:0b:44:70:2f:2a:2e:d6:7d:f8:aa:
41:53:d5:c8:49:8d:63:19:08:1a:40:5b:b6:4e:18:
85:f5:e9:4d:99:49:68:ff:bf:a6:53:b2:f1:c8:d4:
26:be:b4:03:f1:c4:29:03:41:9a:c5:d1:d8:6b:5d:
73:83:cc:7e:ce:f8:da:ee:fa:ef:0c:19:02:2a:1c:
b5:71:88:3d:c7:3e:32:81:04:86:bb:30:11:b9:03:
d4:d0:86:69:e3:3b:ec:cf:a3:cf:66:ec:a3:b3:55:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:EB:D1:DD:7C:F0:20:4F:35:FE:A3:86:B4:11:09:7E:5B:45:7D
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/LTrr0d188CBPNf6jhrQRCX5bRX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.110.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1b:36:5e:76:6d:72:7c:66:30:b8:aa:2a:0c:f9:df:59:ac:
20:9a:87:03:8f:bb:53:dc:a5:48:d7:77:42:b3:f2:86:45:2c:
d2:cd:5c:60:3e:01:ec:91:0b:8c:97:fb:55:31:72:fd:e9:a8:
c6:91:32:47:3e:19:41:86:6f:f5:9f:de:09:1a:62:e7:a6:c6:
e4:eb:df:d6:14:c0:9b:be:99:9b:4d:12:81:55:d0:ee:1d:06:
bf:84:63:86:26:c2:5f:fb:bc:b7:37:49:a8:3b:66:22:3b:f9:
b7:a6:f7:be:6c:46:16:96:68:e3:80:eb:dc:f2:c1:67:5d:1b:
9b:1e:54:93:4c:65:8b:8c:43:c1:37:63:90:2e:12:b3:57:f5:
64:d7:61:d1:62:10:13:d3:6f:57:b5:38:6d:28:de:8d:fc:26:
e9:ae:41:d9:8b:68:17:46:2f:38:57:42:ef:0e:78:11:bb:d4:
09:6a:70:d2:7d:d6:b9:e6:7f:78:ed:df:c1:3c:d8:89:d9:ac:
24:04:08:22:4c:eb:7f:60:21:84:7f:ab:f2:74:98:97:02:e2:
59:1a:12:24:f3:e4:4b:27:43:7c:1e:aa:43:e7:b1:17:f8:e2:
80:e5:04:70:a7:b4:84:26:f8:56:fb:f4:4b:bb:5c:ba:55:fd:
ea:14:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:33:27 2024 by rpki-client on console-ams.rpki-client.org