Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/Lm_xyQpjxnU1AAuIAkxwO7TvSSs.roa
File: Lm_xyQpjxnU1AAuIAkxwO7TvSSs.roa (raw, json)
Hash identifier: dystoJE3L7Xl3mlRQXECxmE5v3siulzLrHJU3lEWO0Q=
Subject key identifier: 2E:6F:F1:C9:0A:63:C6:75:35:00:0B:88:02:4C:70:3B:B4:EF:49:2B
Certificate issuer: /CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Certificate serial: 018CC7275FE9034AEBA1E2B9078F3A791245
Authority key identifier: 15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/Lm_xyQpjxnU1AAuIAkxwO7TvSSs.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43957
IP address blocks: 194.93.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5f:e9:03:4a:eb:a1:e2:b9:07:8f:3a:79:12:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e6ff1c90a63c67535000b88024c703bb4ef492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:ca:28:17:a2:b2:cf:6b:f2:1f:7a:4b:45:
92:4d:f5:b2:b9:82:a6:f8:cf:21:96:83:0a:28:d2:
52:97:ae:95:03:4f:e8:a8:93:04:c3:07:00:17:65:
00:db:6e:42:60:6a:41:b3:6b:7b:77:f6:17:d4:74:
64:52:05:36:e9:60:7b:e6:01:8c:35:af:c7:23:31:
47:8a:f4:6c:50:11:fc:1f:05:51:0d:ee:3b:38:fe:
91:4a:9c:5d:10:74:64:26:12:62:bd:9e:1b:76:56:
5b:a3:94:dd:77:7f:0e:9c:22:4a:a1:25:8d:cf:54:
56:6e:74:ef:2a:92:8d:c9:bb:b4:71:89:55:f6:3e:
bb:d0:15:ad:8a:13:a0:58:6f:de:e9:4f:3c:6d:3c:
12:81:ac:97:60:38:6f:f1:02:ea:06:af:1f:b2:3b:
40:c1:cd:36:b2:77:fb:38:7a:ea:d3:8d:aa:0b:2e:
68:4d:8b:d3:13:d8:9f:cc:5d:9a:ae:7f:80:a6:e9:
bb:46:1d:cd:42:88:4f:3b:31:38:9d:93:73:cc:ad:
36:82:18:6c:ac:be:99:f0:9b:1a:15:67:fb:54:b7:
01:5b:d4:b9:32:90:3b:17:55:9d:3f:55:de:8c:c8:
75:9d:21:7a:8d:95:e6:c9:0c:cd:9a:49:3c:44:63:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6F:F1:C9:0A:63:C6:75:35:00:0B:88:02:4C:70:3B:B4:EF:49:2B
X509v3 Authority Key Identifier:
keyid:15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/Lm_xyQpjxnU1AAuIAkxwO7TvSSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0a:f5:e8:f9:8c:e7:af:ed:a9:c4:12:64:ee:5d:d6:6e:6b:
0c:27:d0:db:94:4b:63:a1:8e:26:80:53:7e:69:19:ff:a6:15:
28:d0:df:fd:18:79:42:a2:98:4c:b6:8b:e9:fa:81:37:e5:39:
26:b7:0b:8b:c7:b3:30:c1:fb:d5:38:01:e3:5f:06:f2:0f:50:
4a:07:7f:a5:91:af:a7:bb:61:eb:27:be:b8:fd:21:cc:dd:0b:
bf:c2:b1:ed:3d:7c:d0:82:a0:27:5c:68:7b:2f:ca:95:5e:7e:
52:b3:bf:0b:87:6a:ed:bb:66:df:dc:10:ee:16:23:4d:98:82:
8f:03:a7:92:a8:bd:2d:81:91:1c:17:e7:ca:aa:03:a1:ba:12:
2c:e8:16:05:2f:fd:7b:8e:f9:24:cb:1d:44:77:a1:c1:5f:a7:
92:39:11:08:83:37:ec:86:de:7b:02:99:66:d8:8a:02:bb:d5:
4b:2e:b7:60:54:10:31:e5:96:12:db:de:7d:1e:34:c9:26:10:
46:e5:0f:27:de:d7:7d:96:17:9b:c2:f5:8d:7d:38:eb:35:fe:
16:4a:fe:ec:e2:f5:21:58:2b:48:b6:7e:2c:bf:d5:85:12:f0:
c7:2b:3f:f9:dd:0f:72:5e:84:3c:a9:a8:81:ae:55:2f:36:52:
00:3c:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:52:24 2024 by rpki-client on console-fra.rpki-client.org