Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/LL5qSPP3Ldsm-or0BFtm7MuLU60.roa
File: LL5qSPP3Ldsm-or0BFtm7MuLU60.roa (raw, json)
Hash identifier: u99LqKNqet4qPeahTFgmyfzZNiRiG2GMOM9hWO61vyM=
Subject key identifier: 2C:BE:6A:48:F3:F7:2D:DB:26:FA:8A:F4:04:5B:66:EC:CB:8B:53:AD
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 018CC348A2FFCC3031B3AC9A588E2E0EDA7D
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/LL5qSPP3Ldsm-or0BFtm7MuLU60.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8697
IP address blocks: 212.34.0.0/19 maxlen: 24
185.98.224.0/22 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8::/29 maxlen: 64
2a00:18d8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a2:ff:cc:30:31:b3:ac:9a:58:8e:2e:0e:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cbe6a48f3f72ddb26fa8af4045b66eccb8b53ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:23:d7:c8:2e:37:bb:96:a3:7b:e2:6f:58:4f:
e5:d3:d5:1a:5a:67:77:e5:36:88:d6:03:aa:d7:7c:
ed:02:1a:8d:8b:b0:52:6f:00:ac:6c:41:42:a2:c7:
9a:b0:94:b9:20:68:f3:d3:65:d9:3c:04:6d:33:02:
b0:eb:06:6c:98:8a:90:f0:80:33:be:08:bb:5d:94:
a6:65:29:14:60:93:58:07:94:e2:31:e9:3b:ab:b9:
77:dd:f9:be:ce:d9:05:fe:38:7a:ca:1b:a2:0e:92:
22:c4:1b:47:99:76:84:c2:5c:b5:69:09:95:00:fc:
87:e5:12:65:fd:e1:19:48:1b:13:f0:9d:ff:36:8f:
dd:61:cc:0b:c9:46:03:fd:09:38:bb:e9:4e:23:dc:
15:88:b5:d4:12:06:54:53:c4:4a:ab:6a:fc:a6:be:
3f:79:3d:40:4a:74:69:fa:90:6d:bb:43:d3:df:56:
7a:c4:e0:34:c1:f8:de:c3:49:7c:d0:96:49:cf:3d:
18:d1:a5:e9:5c:55:bf:6c:39:f1:36:88:14:35:1b:
bd:8e:3f:08:89:99:11:72:7a:4b:25:63:e7:62:d5:
cc:20:a5:87:a9:b9:a1:05:65:e2:33:d6:bf:c5:8b:
87:e5:d8:fa:a7:1c:4b:d2:7e:de:df:7a:cd:d9:43:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:6A:48:F3:F7:2D:DB:26:FA:8A:F4:04:5B:66:EC:CB:8B:53:AD
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/LL5qSPP3Ldsm-or0BFtm7MuLU60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/29
Signature Algorithm: sha256WithRSAEncryption
3a:42:77:94:f3:c9:02:ec:f4:13:e8:06:1f:29:16:ad:13:0d:
93:7a:c7:23:f4:e7:95:61:dd:71:1a:40:39:01:d5:d0:65:82:
e1:2c:a8:2c:bc:56:e2:31:99:32:18:d9:05:9d:50:d3:ef:95:
85:4d:0a:0a:0b:35:fa:24:c6:84:e3:7b:32:b3:0a:30:b4:5f:
e9:f0:00:9c:a3:89:d7:64:4f:dd:3c:5f:70:3b:c0:1f:b1:b6:
7a:4d:af:3b:41:31:3e:32:eb:d5:d9:6c:bf:dc:18:fd:44:5c:
3d:ae:8e:f2:12:1c:09:c7:0c:00:c6:8a:eb:e0:80:d6:7b:53:
e2:d7:e3:44:61:d8:77:13:16:c8:ed:0b:57:d4:85:d7:6c:43:
98:16:99:e6:a0:12:d8:37:89:02:d6:5e:40:c1:22:fc:4e:63:
94:d4:f4:21:8b:43:5f:7f:f4:15:c5:7d:5e:7b:de:4b:6d:ed:
06:51:2e:68:8f:97:05:2a:90:87:97:85:45:b6:c1:f3:ca:cc:
8e:cb:33:f6:e6:9d:76:d6:95:b5:8f:7d:2a:06:78:e2:87:57:
61:77:59:30:5e:3b:0b:cc:5e:e3:2a:e5:eb:6f:87:0a:02:19:
10:e6:19:5c:2d:6b:40:11:c1:a7:a3:6d:c6:60:7e:45:e4:4c:
af:27:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:41 2024 by rpki-client on console-ams.rpki-client.org