Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/LWqxJCKNC0ic3bOi42QSaM1xaiM.roa
File: LWqxJCKNC0ic3bOi42QSaM1xaiM.roa (raw, json)
Hash identifier: wBr6dL18iTE0WjxIKQ/IOW/cn3NMbOmcu9pAACUDPO0=
Subject key identifier: 2D:6A:B1:24:22:8D:0B:48:9C:DD:B3:A2:E3:64:12:68:CD:71:6A:23
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 018CC56E4A4ED19243B7E86256F32D03399C
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/LWqxJCKNC0ic3bOi42QSaM1xaiM.roa
Signing time: Mon 01 Jan 2024 14:29:48 +0000
ROA not before: Mon 01 Jan 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208711
IP address blocks: 185.92.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:4a:4e:d1:92:43:b7:e8:62:56:f3:2d:03:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d6ab124228d0b489cddb3a2e3641268cd716a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:bc:20:1b:96:25:73:d8:cc:a5:7f:02:20:
2e:04:7c:a8:52:8f:6c:83:95:59:6d:58:e5:38:66:
b6:f0:20:3e:cb:90:a8:52:21:5b:c9:28:3d:c6:5a:
c2:1c:3c:44:0a:bf:40:91:ca:b3:46:c4:28:8e:70:
7a:b8:4f:fb:0d:93:74:fc:f0:25:85:7a:19:ac:73:
8c:77:a6:cc:20:88:c7:da:b7:62:5e:d6:21:20:4b:
18:14:98:82:53:84:6f:fb:3e:90:8e:a6:3d:dc:74:
4a:2e:c9:bf:5d:13:e3:48:72:ea:c2:c7:c8:4b:63:
89:4e:28:ea:27:6c:10:76:0d:45:1b:cb:8a:eb:ab:
fc:bc:5d:8f:1d:60:d5:51:71:55:ee:4a:39:ae:6e:
d1:0b:f0:f4:da:09:e2:73:31:18:cd:a8:02:c8:ff:
7b:5f:9d:70:83:46:65:13:8b:dd:a3:39:1c:03:63:
e4:1c:1b:a6:08:7d:94:5f:ea:32:c2:82:12:2a:3f:
61:e7:d0:ba:d1:3a:3e:de:02:48:ac:c4:1c:76:62:
21:41:5a:74:cf:47:32:c8:a6:e9:2b:46:df:94:e5:
3b:d6:0f:36:91:8c:29:a6:c4:55:80:b2:f4:9a:66:
84:b7:73:af:74:bc:56:8d:fe:2a:ad:1e:84:d8:32:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:B1:24:22:8D:0B:48:9C:DD:B3:A2:E3:64:12:68:CD:71:6A:23
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/LWqxJCKNC0ic3bOi42QSaM1xaiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:13:20:3f:49:71:ac:c8:31:63:18:6b:d9:ab:e5:61:99:7d:
81:2f:17:96:5c:f0:f7:90:7f:fb:3b:e3:d4:b8:8b:d3:dd:a7:
d7:ff:fb:40:8c:19:41:2e:4f:f7:6f:c4:73:c2:df:4a:f4:e9:
e0:fd:12:48:f8:ed:24:bf:26:a1:4a:8c:d3:d5:8a:85:5c:06:
c8:43:b9:b6:b5:b7:b7:f9:00:63:ca:eb:12:b5:a6:5d:b0:7c:
de:7c:59:28:54:04:de:a0:d8:36:e8:90:c9:94:29:89:fa:8a:
ce:31:6c:d2:73:34:a7:00:00:c4:dd:a6:69:89:9c:5b:d2:dd:
fb:af:fb:94:11:87:ee:ee:c3:0b:07:4b:9a:07:09:05:49:ff:
04:56:f2:5e:88:0b:b4:6f:bc:76:65:7d:ec:13:e0:e8:88:3b:
b8:0d:3d:8c:7a:1c:62:f5:de:e4:87:e1:01:0c:da:30:ae:62:
3d:03:42:19:37:26:a3:16:52:a0:df:14:91:be:04:92:5d:5f:
73:b3:95:51:6a:a2:db:26:ef:a6:06:0d:34:2d:44:87:db:1b:
17:1c:aa:15:65:2f:11:dd:18:d6:62:86:1f:f5:29:e3:05:7e:
61:d5:7c:f6:33:3b:e9:44:49:59:a1:16:3c:4e:7f:43:3c:4a:
c3:50:ee:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:59 2024 by rpki-client on console-ams.rpki-client.org