Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/Llf-wH2lu3abFKCAduduIF3JJgA.roa
File: Llf-wH2lu3abFKCAduduIF3JJgA.roa (raw, json)
Hash identifier: JiAxAOiZDRy8xDqRoJ1CMcAbec0Kl4fYwLQrpam6/Ss=
Subject key identifier: 2E:57:FE:C0:7D:A5:BB:76:9B:14:A0:80:76:E7:6E:20:5D:C9:26:00
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 018E0A160D40AE44DC9C3CDB5F47BCA63003
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/Llf-wH2lu3abFKCAduduIF3JJgA.roa
Signing time: Mon 04 Mar 2024 15:30:01 +0000
ROA not before: Mon 04 Mar 2024 15:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198636
IP address blocks: 185.235.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0a:16:0d:40:ae:44:dc:9c:3c:db:5f:47:bc:a6:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Mar 4 15:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e57fec07da5bb769b14a08076e76e205dc92600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:2d:6d:58:e6:2a:24:6e:58:f5:3f:76:a4:
75:d5:7f:d3:de:84:52:0b:11:83:62:05:89:76:7c:
6e:7b:24:58:39:9b:19:6c:bd:0b:a5:9b:c4:fa:64:
6e:93:72:87:97:37:75:6a:b0:a1:8f:4d:c0:45:0f:
7f:30:8f:2d:f0:32:9c:e1:32:f8:07:ec:96:14:28:
f4:a0:a3:24:e7:92:ff:8b:69:f0:6b:a2:b8:a4:e8:
b5:fa:b0:35:68:56:67:fc:b8:e5:b8:8b:7d:99:09:
36:13:dc:1a:f5:0e:8c:7a:19:96:f6:c4:3f:2d:10:
30:56:d8:bd:6d:6c:f1:78:0f:89:d5:50:7e:09:ec:
49:52:36:8d:01:9e:e2:ac:6a:eb:73:ba:d1:a5:65:
a3:78:8c:d1:da:d9:cd:da:e4:93:4d:e0:33:42:b6:
e3:30:3a:29:e1:3c:55:2f:ad:0f:e2:56:36:98:a4:
3d:a6:20:1c:35:50:d7:83:25:fa:30:b1:36:56:05:
e7:90:d6:f3:f8:08:d5:dd:f9:6d:25:fd:f5:73:ae:
8e:7c:74:c8:cb:8f:61:20:a5:34:5c:8f:6f:6c:98:
2d:fc:45:69:a3:d1:dd:d8:9b:e3:82:ed:cd:ae:f9:
7f:e4:6a:a0:d2:5e:96:5d:dc:a2:6c:38:96:5d:1a:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:57:FE:C0:7D:A5:BB:76:9B:14:A0:80:76:E7:6E:20:5D:C9:26:00
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/Llf-wH2lu3abFKCAduduIF3JJgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.186.0/24
Signature Algorithm: sha256WithRSAEncryption
89:13:f1:d5:a9:9d:3c:f4:3f:f7:b9:c9:3b:3f:b6:32:72:22:
d1:66:f8:86:84:c8:ad:38:08:db:68:cc:59:f9:80:e6:d7:b3:
3e:83:0f:0c:dd:ef:af:ae:8f:b1:19:aa:19:3f:49:79:6c:ea:
06:cb:ee:ee:35:d5:c7:93:5a:a3:db:1d:a0:c7:c9:c9:4d:e6:
36:ae:f1:e6:f5:0f:28:0d:d7:14:76:56:6b:6f:67:3a:97:e2:
27:7b:d5:25:6a:3c:a4:aa:44:52:b9:43:b4:03:91:56:ff:64:
35:4c:a8:c4:18:db:cc:68:47:38:e6:fd:bb:2c:36:0d:b0:d3:
d7:aa:9e:9b:fe:8b:a0:63:2f:4e:23:d2:20:a9:c8:fd:7b:2e:
7c:65:92:f0:47:48:8c:97:3a:03:59:85:85:76:55:69:d9:bb:
07:4a:8f:c9:1f:30:a0:8c:1d:7a:43:ba:68:75:46:4b:48:3c:
cf:dd:7e:ff:77:f1:f5:69:f9:09:25:00:c1:b6:05:6b:b7:28:
af:59:38:ab:26:52:10:ea:71:67:98:ea:33:1b:9f:67:a6:64:
c7:50:90:20:c8:cb:2a:d5:2e:62:1f:cf:1a:7e:b6:59:5f:11:
c1:37:37:bc:bd:4d:34:4a:fc:35:84:28:1c:1d:6d:9c:b3:0d:
34:b2:78:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4KFg1ArkTcnDzbX0e8pjADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi
M2M0ZmQwHhcNMjQwMzA0MTUzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTU3ZmVjMDdkYTViYjc2OWIxNGEwODA3NmU3NmUyMDVkYzkyNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQAtbVjmKiRuWPU/dqR11X/T3oRS
CxGDYgWJdnxueyRYOZsZbL0LpZvE+mRuk3KHlzd1arChj03ARQ9/MI8t8DKc4TL4
B+yWFCj0oKMk55L/i2nwa6K4pOi1+rA1aFZn/LjluIt9mQk2E9wa9Q6MehmW9sQ/
LRAwVti9bWzxeA+J1VB+CexJUjaNAZ7irGrrc7rRpWWjeIzR2tnN2uSTTeAzQrbj
MDop4TxVL60P4lY2mKQ9piAcNVDXgyX6MLE2VgXnkNbz+AjV3fltJf31c66OfHTI
y49hIKU0XI9vbJgt/EVpo9Hd2Jvjgu3Nrvl/5Gqg0l6WXdyibDiWXRoGqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC5X/sB9pbt2mxSggHbnbiBdySYAMB8GA1UdIwQY
MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt
MDU2NWYzMzdkY2JlLzEvTGxmLXdIMmx1M2FiRktDQWR1ZHVJRjNKSmdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl
LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueu6MA0G
CSqGSIb3DQEBCwUAA4IBAQCJE/HVqZ089D/3uck7P7YyciLRZviGhMitOAjbaMxZ
+YDm17M+gw8M3e+vro+xGaoZP0l5bOoGy+7uNdXHk1qj2x2gx8nJTeY2rvHm9Q8o
DdcUdlZrb2c6l+Ine9UlajykqkRSuUO0A5FW/2Q1TKjEGNvMaEc45v27LDYNsNPX
qp6b/ougYy9OI9Igqcj9ey58ZZLwR0iMlzoDWYWFdlVp2bsHSo/JHzCgjB16Q7po
dUZLSDzP3X7/d/H1afkJJQDBtgVrtyivWTirJlIQ6nFnmOozG59npmTHUJAgyMsq
1S5iH88afrZZXxHBNze8vU00Svw1hCgcHW2csw00snim
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:55:34 2024 by rpki-client on console-fra.rpki-client.org