Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/LSjO_s0lKxn5bFYsJNDqIGvzxEw.roa
File: LSjO_s0lKxn5bFYsJNDqIGvzxEw.roa (raw, json)
Hash identifier: 0tTHY6lstsc5MESwtM85fYdx2H6N6vqLNSa1+WedOBo=
Subject key identifier: 2D:28:CE:FE:CD:25:2B:19:F9:6C:56:2C:24:D0:EA:20:6B:F3:C4:4C
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 018CC86F4C36678D0E10A037BC592BD40842
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/LSjO_s0lKxn5bFYsJNDqIGvzxEw.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64426
IP address blocks: 185.123.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4c:36:67:8d:0e:10:a0:37:bc:59:2b:d4:08:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d28cefecd252b19f96c562c24d0ea206bf3c44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:72:eb:96:43:e0:a1:2a:5b:86:ff:54:b0:
18:1b:34:3f:66:07:e0:8c:e6:ad:5d:fb:49:f5:c0:
31:56:95:b2:ba:2f:fd:f1:a7:05:87:3d:02:db:79:
cc:15:eb:1e:d3:52:34:3a:7f:61:41:91:80:fd:95:
9c:8c:9a:29:62:21:0b:63:b6:78:0d:69:99:1d:3b:
62:2c:5f:1a:6d:6b:02:55:ce:0b:6b:bf:50:35:e8:
00:f4:38:18:ae:c0:42:5c:a0:3d:61:16:05:fe:dd:
42:86:ea:29:cd:45:c6:90:4c:dd:ac:98:ce:62:bc:
8f:d1:85:88:49:05:16:c0:d8:c3:85:3b:8e:af:0a:
31:b9:2c:ab:9a:4a:1e:74:4b:d5:5b:a8:20:a5:8b:
b5:3e:54:c0:97:37:02:5c:5a:86:34:99:7e:5b:eb:
9f:87:0d:18:f1:c2:f1:4a:30:ff:54:57:20:24:90:
bb:ec:ff:5b:cf:c2:05:e9:a8:c7:80:2e:1d:51:e4:
2e:e4:24:7d:bd:80:a5:70:f9:80:7c:58:45:8c:34:
01:4c:c0:bd:d9:c9:b6:1a:9a:59:c3:24:03:7e:8b:
e9:17:ee:f6:07:c4:be:30:9b:9f:c0:7f:e9:b0:89:
4d:20:00:75:d3:16:47:69:4d:c9:02:d4:a0:52:1c:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:CE:FE:CD:25:2B:19:F9:6C:56:2C:24:D0:EA:20:6B:F3:C4:4C
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/LSjO_s0lKxn5bFYsJNDqIGvzxEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.25.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ae:e0:4e:d5:a5:84:48:34:2e:c8:31:9f:49:d5:2e:29:0c:
91:0e:3b:de:c0:a6:b7:79:a6:2a:fe:4a:63:da:eb:16:65:5a:
13:fd:48:f8:d7:37:03:b1:d0:34:b3:2e:3b:65:3f:e3:a5:1f:
35:32:5d:42:9b:a5:d7:61:05:e8:7f:ce:f9:b4:06:90:1c:82:
f5:bd:11:06:67:0d:10:b1:57:03:69:7c:55:8f:10:58:93:8e:
a6:65:cd:09:44:2e:56:0e:f7:d7:ba:8d:4b:d2:39:e6:73:e8:
1e:b1:4a:eb:32:fa:95:dd:ac:94:98:d6:ca:65:3f:af:0c:1f:
17:86:3d:98:b5:fd:d1:61:77:2e:f2:50:6d:02:cd:96:83:c0:
1b:bf:0d:a7:31:bf:d1:cd:e0:f7:44:5f:9f:a6:b6:bb:ab:9a:
62:16:18:b4:44:05:4a:eb:f3:fa:87:dc:6c:f8:78:b6:f6:80:
28:d0:9c:85:c6:c3:ae:e9:5e:59:8a:56:24:23:71:e0:54:41:
ec:42:70:fe:b0:e7:81:43:55:fd:26:34:99:41:90:99:09:35:
10:7a:ee:6a:27:1e:41:1e:de:70:8e:ec:43:81:1b:73:f5:79:
6f:51:11:95:b0:08:a8:91:ab:44:28:95:44:f8:6c:dc:bc:4d:
9a:5f:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:35 2024 by rpki-client on console-fra.rpki-client.org