Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/LNMQb6feKzmlUl0XlThqTqN4XUw.roa
File: LNMQb6feKzmlUl0XlThqTqN4XUw.roa (raw, json)
Hash identifier: xkdBlAz1iVFN2wwqyVunW25JD908yT3diJ4YghfRmZs=
Subject key identifier: 2C:D3:10:6F:A7:DE:2B:39:A5:52:5D:17:95:38:6A:4E:A3:78:5D:4C
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 018CC3B70AC762533B9A04E17A4A4D234E6E
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/LNMQb6feKzmlUl0XlThqTqN4XUw.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205388
IP address blocks: 185.107.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0a:c7:62:53:3b:9a:04:e1:7a:4a:4d:23:4e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cd3106fa7de2b39a5525d1795386a4ea3785d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:e1:15:16:49:7f:fc:ce:5b:46:76:9b:68:
fc:7c:27:f6:91:85:9f:5c:a6:e5:34:6c:d8:fb:f9:
c9:63:46:93:27:91:bc:39:21:b5:99:57:fc:03:70:
69:b7:a6:09:5f:bd:f9:77:51:7b:bf:5c:f0:b7:7f:
ae:21:fa:10:1a:d4:60:fe:5f:07:02:03:74:11:e0:
f7:7e:c6:d2:d4:af:60:28:9e:b7:83:18:63:ec:96:
25:f3:39:22:99:92:86:7d:69:b3:15:87:ca:d9:99:
28:ee:46:6c:29:c8:b8:dc:48:a4:f5:af:a3:94:50:
a8:d3:1f:d2:cf:62:35:96:17:8b:ac:1b:94:b5:b5:
35:ae:bf:12:3b:9e:fc:f3:40:ea:0e:f2:7b:94:9a:
d4:f0:0e:43:c5:9e:02:ec:43:9b:35:17:58:74:5c:
dc:38:6e:b6:77:f0:3b:e8:d0:1b:c0:18:27:0c:db:
a4:0e:e2:10:0c:04:f0:6a:40:98:de:fc:b7:0e:fe:
a7:a7:dd:c3:dd:cc:fb:5d:7b:29:0e:91:b6:ba:98:
33:6c:33:a2:8c:b6:f2:68:c8:bc:ab:8f:ce:42:b8:
7f:7e:6d:a6:b5:47:88:94:3c:5b:af:d8:dd:bc:b1:
35:54:da:d6:64:d1:5b:2e:d2:77:0b:18:f4:f0:2a:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:10:6F:A7:DE:2B:39:A5:52:5D:17:95:38:6A:4E:A3:78:5D:4C
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/LNMQb6feKzmlUl0XlThqTqN4XUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.195.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6d:09:9a:d3:49:5a:05:ff:79:4e:63:04:15:d9:b2:4c:16:
7d:3e:7a:52:9b:d8:55:ae:0a:97:59:50:8e:a6:d1:9d:99:06:
cb:73:5a:2e:b9:96:67:e8:99:fb:88:2d:97:23:fb:c2:ce:04:
63:7b:d1:c0:c4:b7:0c:ac:a0:27:8a:27:68:63:de:80:97:64:
37:0d:ff:58:94:4d:65:4e:5c:8d:76:69:24:0c:39:e5:f4:17:
40:ff:ad:15:24:3a:df:ec:93:ac:66:14:bc:90:73:d6:79:3c:
4d:f7:33:95:35:01:73:fa:64:ca:69:0a:6f:8d:0a:fa:54:ef:
18:a1:9a:e4:c5:9a:2a:84:ff:ec:8d:c8:68:5d:b6:c1:78:09:
3c:4b:15:b5:a4:d3:2f:4b:de:ef:ac:a1:ae:e6:46:e9:45:05:
14:e3:f4:74:96:b9:36:aa:29:e8:31:75:de:0b:59:f6:cd:70:
b7:9e:6f:a6:58:a8:d0:31:4b:14:20:95:c4:9f:ce:df:03:3e:
da:a9:a4:c5:e9:13:a8:bc:bc:b2:a6:57:e8:5b:a3:9e:a9:08:
81:c5:93:ab:74:0b:88:a9:23:ec:8c:7e:93:8d:cb:ee:2b:d4:
5f:1a:81:9f:23:35:e4:25:99:53:2d:33:f5:00:92:0e:da:bc:
ce:c8:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:51 2024 by rpki-client on console-ams.rpki-client.org