Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/3-IyyFjqSwPVHlIHSpEdhXasyW8.roa
File: 3-IyyFjqSwPVHlIHSpEdhXasyW8.roa (raw, json)
Hash identifier: S6VsKxvby+ZDxYcbIeuJTBg/LdnJJHqzGrSCR/xGhVo=
Subject key identifier: DF:E2:32:C8:58:EA:4B:03:D5:1E:52:07:4A:91:1D:85:76:AC:C9:6F
Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial: 018CC500A501E847224AFFB46EC0BD85B92C
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/3-IyyFjqSwPVHlIHSpEdhXasyW8.roa
Signing time: Mon 01 Jan 2024 12:30:02 +0000
ROA not before: Mon 01 Jan 2024 12:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25057
IP address blocks: 195.216.214.0/23 maxlen: 24
2001:67c:214::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:a5:01:e8:47:22:4a:ff:b4:6e:c0:bd:85:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Validity
Not Before: Jan 1 12:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe232c858ea4b03d51e52074a911d8576acc96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5c:0c:1b:1e:61:74:e0:c7:26:93:c4:30:3a:
7d:83:8b:4f:c8:a2:5f:5e:48:4b:62:c4:08:b1:4b:
ce:7c:57:4d:21:be:ec:a9:25:c4:e4:53:a6:cc:2b:
bd:8a:63:ea:1b:fb:ca:4e:f1:1f:1f:8e:8c:8b:41:
3b:05:28:df:da:58:75:10:d1:cb:19:fa:57:3b:7b:
03:56:dd:cf:43:36:73:7e:25:af:36:3a:42:a1:10:
24:b6:9a:3e:4f:07:1c:62:b2:9e:7e:8d:ae:ae:da:
7d:e9:c1:40:0e:47:0d:93:28:69:80:1a:6b:d4:2b:
ee:c6:da:56:99:b4:4f:61:fc:a1:2c:a3:4c:94:06:
7d:0d:48:1c:99:04:22:dd:c6:17:a5:65:92:75:2c:
58:b5:2f:6a:72:92:c6:9d:58:f2:34:48:b8:5e:9d:
a6:5f:67:d4:34:68:83:74:31:fd:0f:59:83:28:a5:
d0:36:7b:36:e5:db:bd:bf:02:85:6d:a7:1b:5e:a1:
b7:83:74:19:0f:f9:8a:66:38:f1:2b:f7:00:fa:06:
20:c8:17:6d:07:4d:44:03:3f:68:38:9d:20:82:70:
75:e5:3a:48:a7:0d:b4:6c:62:ba:b2:f5:9d:a4:7d:
a7:f8:35:77:c4:17:94:33:21:f2:cd:f9:49:65:c0:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:32:C8:58:EA:4B:03:D5:1E:52:07:4A:91:1D:85:76:AC:C9:6F
X509v3 Authority Key Identifier:
keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/3-IyyFjqSwPVHlIHSpEdhXasyW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.214.0/23
IPv6:
2001:67c:214::/48
Signature Algorithm: sha256WithRSAEncryption
91:a4:88:2e:d9:1e:6d:83:28:40:72:41:d5:4a:53:ba:a5:fa:
25:f8:d2:37:40:7f:d5:a1:24:bd:06:a5:9a:2b:3f:ee:9a:3f:
ed:c6:20:91:8c:5c:6c:46:cb:b3:c5:c4:09:70:33:d9:4d:a5:
53:56:14:a5:58:1c:bc:bf:bd:32:2b:ab:14:fd:f9:b4:7c:6d:
44:ed:ce:11:88:92:63:94:e7:c5:62:15:4a:cc:34:d9:7c:dc:
7f:d9:a6:a9:45:33:00:d6:41:fc:7c:6f:b7:29:29:2d:32:15:
50:2d:a3:27:7e:b6:08:aa:1c:d4:a6:c8:ae:65:07:1b:f8:a3:
5b:42:2c:c2:be:26:5e:b5:70:67:74:b6:39:e5:60:31:d4:bf:
c8:cb:6e:6d:47:0e:c0:20:47:8d:5d:03:2d:16:81:1e:f8:de:
f4:c2:fc:11:8c:d4:7b:58:9c:4b:f8:1a:e7:b7:8b:23:1a:12:
d5:7d:b9:8c:56:bf:27:df:a7:c3:aa:e3:ae:a5:b3:3b:0a:de:
33:85:70:89:b7:83:03:2c:a3:3b:d9:ed:ea:83:fc:5b:99:9f:
70:b6:00:10:27:f7:69:f9:b4:c5:51:04:34:d1:c3:65:81:2f:
30:91:90:01:04:00:b8:83:ac:95:1a:d8:9d:3a:df:00:ea:fb:
d5:9b:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:34 2024 by rpki-client on console-ams.rpki-client.org