Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV4_rIW0RmXtrynvdYgRpCCKH7M.roa
File: lV4_rIW0RmXtrynvdYgRpCCKH7M.roa (raw, json)
Hash identifier: exOLqYruVqqLg8l8aZ4nszhHbUF0OucpKVG3Otp7kI8=
Subject key identifier: 95:5E:3F:AC:85:B4:46:65:ED:AF:29:EF:75:88:11:A4:20:8A:1F:B3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 018CCA2A26DF49B9230021B20A5A535DC1FB
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV4_rIW0RmXtrynvdYgRpCCKH7M.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43459
IP address blocks: 86.105.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:26:df:49:b9:23:00:21:b2:0a:5a:53:5d:c1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=955e3fac85b44665edaf29ef758811a4208a1fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:2e:ff:b2:80:3d:44:9a:ec:81:4f:98:25:
56:25:bb:b5:b3:df:b8:55:ec:3b:d5:60:0b:0e:59:
4f:3b:ab:e1:a4:c8:b9:50:a9:5b:57:51:4e:ce:ec:
bf:31:b4:28:04:46:aa:d9:b5:1a:b4:30:8e:68:98:
89:bb:17:09:8d:57:63:7e:de:cf:32:ba:fe:64:d2:
aa:ca:ab:9c:20:70:00:25:d6:32:ad:87:f2:30:ee:
b1:6e:73:4c:74:43:52:cf:a5:14:43:7c:ea:87:bd:
1e:ec:d9:ea:44:ed:cb:df:3a:64:50:b2:35:61:54:
7a:0b:25:39:4d:8a:c8:c4:68:a0:29:67:52:91:42:
e5:2c:18:21:91:06:ea:a4:51:20:61:c4:d3:14:10:
4e:fe:41:4a:e6:a6:32:e2:cc:e8:e9:ea:58:3f:ae:
5d:60:50:af:bc:85:4d:b7:aa:f2:b0:57:fb:47:06:
ec:e7:1e:78:0d:2c:90:c2:93:07:56:37:1f:20:29:
34:a3:a8:1b:cc:2d:ce:93:e9:a3:56:e5:ba:47:8a:
74:a1:4e:cd:fe:6e:08:72:ee:86:2c:29:a5:3d:18:
3e:39:4e:e6:9b:7b:86:83:57:07:8e:b6:e7:b3:ad:
b7:10:6c:16:eb:31:66:03:b8:8c:24:cc:af:b3:88:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:3F:AC:85:B4:46:65:ED:AF:29:EF:75:88:11:A4:20:8A:1F:B3
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV4_rIW0RmXtrynvdYgRpCCKH7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:19:aa:7f:d9:04:08:3b:97:08:7b:2c:4e:d6:3f:fb:58:53:
f2:d0:02:82:b0:02:5a:15:56:43:a7:44:7f:af:b0:b6:1c:1b:
74:2f:5b:3b:45:ab:30:bc:c0:e0:64:db:27:a4:0f:e1:e5:71:
a3:85:44:97:13:41:ef:0c:94:a3:0d:30:33:69:4f:7d:ec:d8:
ad:84:4e:90:27:b5:f4:63:ef:af:47:a2:61:4f:49:de:d9:e5:
13:d8:6c:f9:20:00:ce:28:29:70:b5:ce:59:28:ba:23:16:be:
30:1e:f7:45:4b:52:bd:2b:6d:02:92:0b:f0:ec:cb:ae:be:7e:
d0:5d:9c:1b:6f:32:6b:1c:95:f6:21:f3:f8:35:bf:6d:c2:8c:
e0:2e:a0:80:13:a3:ef:23:ba:bc:79:0e:3e:90:77:8a:0e:ed:
0d:2c:e6:1f:9a:e4:a6:60:29:2b:45:65:1d:7a:91:67:52:00:
64:69:d9:2c:10:42:1c:83:45:fb:02:21:60:d0:42:77:50:c6:
9e:a4:07:35:73:ad:0e:3f:e9:44:e8:78:7c:01:bf:4a:81:5e:
f3:35:db:56:bf:c2:76:70:0f:ab:94:bf:1d:77:2c:c7:e9:e4:
86:e5:71:13:45:55:d9:84:0c:c7:9f:c7:68:96:d8:2a:65:10:
14:32:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:36 2024 by rpki-client on console-ams.rpki-client.org