Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/L8gx-loRsX5--_KuciouqcF3DPc.roa
File: L8gx-loRsX5--_KuciouqcF3DPc.roa (raw, json)
Hash identifier: EAr3ouF4mOrmvVaFU8f9e4Q5YCtssYj0+HQyyOjTg60=
Subject key identifier: 2F:C8:31:FA:5A:11:B1:7E:7E:FB:F2:AE:72:2A:2E:A9:C1:77:0C:F7
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC79452AF327001299DA0F973598684B4
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/L8gx-loRsX5--_KuciouqcF3DPc.roa
Signing time: Tue 02 Jan 2024 00:30:35 +0000
ROA not before: Tue 02 Jan 2024 00:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 2.188.240.0/22 maxlen: 22
2.188.244.0/22 maxlen: 22
2.188.252.0/22 maxlen: 22
2.188.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:52:af:32:70:01:29:9d:a0:f9:73:59:86:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fc831fa5a11b17e7efbf2ae722a2ea9c1770cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:42:77:55:43:5c:04:97:10:23:cf:b0:93:
89:e2:9d:82:8d:84:ee:dd:76:45:4e:5c:61:11:26:
e9:df:9e:b6:f6:a5:b8:b5:f8:b5:2a:24:ec:7c:df:
c0:ea:e3:f0:d3:7d:12:c9:a0:d3:df:62:d3:11:a8:
5f:6b:ed:78:4e:2c:a2:11:62:2e:34:3d:70:07:92:
80:ef:10:6e:6c:eb:22:cc:d3:70:9e:d5:01:78:9d:
9f:45:4a:0d:e5:e7:77:1b:5a:f6:04:91:21:6a:0a:
da:c2:b0:71:56:c9:39:89:0e:a4:0a:da:d1:d1:6c:
6f:67:3c:f8:4e:f8:6c:34:0f:cd:1f:ba:d9:9f:c8:
87:ba:94:eb:0b:15:7b:ef:22:e9:f9:8c:24:cd:11:
47:9c:09:bb:ae:37:c6:ed:57:ee:47:70:4c:50:c2:
3c:6a:65:06:4a:b6:80:1e:94:83:49:0c:6d:25:12:
6c:06:4b:0f:39:68:94:8b:b1:68:0c:c4:c6:6c:18:
d1:75:12:5e:45:cd:77:7b:70:cb:b6:07:e4:8b:45:
24:33:4d:46:88:b7:07:50:e5:87:11:13:dd:3b:ab:
26:a5:ff:a3:6c:bf:79:93:8c:c0:e7:b0:ea:90:55:
b6:07:be:e2:66:54:df:a1:26:a2:20:a9:cf:1b:53:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:31:FA:5A:11:B1:7E:7E:FB:F2:AE:72:2A:2E:A9:C1:77:0C:F7
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/L8gx-loRsX5--_KuciouqcF3DPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.240.0/20
Signature Algorithm: sha256WithRSAEncryption
78:74:e8:f1:63:7c:4b:ba:2d:02:ea:bf:75:67:f9:c3:61:ff:
5b:68:e1:0a:f7:ad:f2:4b:43:f3:c2:5d:92:98:08:5d:a1:8f:
af:d4:8b:37:5c:5b:3a:a2:dd:10:c0:10:6c:95:13:02:cf:ff:
fc:de:93:a0:d0:07:e1:ee:7b:bf:76:0f:fc:14:f7:1d:34:81:
a5:bf:b2:be:0f:5c:45:c0:b3:cf:2c:6a:62:a3:76:b8:3d:8d:
5b:24:1d:e3:aa:34:af:89:9e:c7:3c:43:5d:c1:8c:b2:f2:73:
70:6f:d0:93:0f:da:d6:fc:a9:f1:96:5f:60:37:62:67:35:8e:
8b:18:d6:5e:19:34:d5:fb:62:e2:6b:e5:f2:f6:3e:1b:8e:44:
dc:ca:59:2a:fb:9e:5a:01:2a:b3:fa:c1:cd:cf:81:5a:db:ef:
f0:c8:29:8d:83:e9:26:ca:34:fd:6f:96:cd:62:8b:eb:ac:35:
0d:32:0d:7b:9a:bd:13:ac:f6:9b:0a:85:c3:01:c1:f5:e5:3a:
e3:74:01:f7:82:2e:e7:30:5d:55:36:e5:a1:50:79:66:20:77:
cf:0a:44:9f:cc:09:ba:e7:8a:ca:22:aa:88:50:05:b9:26:5e:
74:94:52:07:83:5e:a0:f6:96:5b:e0:68:ff:93:0c:30:24:10:
40:ed:2a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:11:15 2024 by rpki-client on console-ams.rpki-client.org