Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Lc7Lf2nqjSQA9IGo1LgFQXhhwqo.roa
File: Lc7Lf2nqjSQA9IGo1LgFQXhhwqo.roa (raw, json)
Hash identifier: WTTMBlmY8yT2h4X8uD9sG+aeBL+8wWUSgLxdcJ5JSBY=
Subject key identifier: 2D:CE:CB:7F:69:EA:8D:24:00:F4:81:A8:D4:B8:05:41:78:61:C2:AA
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE76E1A6607F3132953EFB9CD7877
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Lc7Lf2nqjSQA9IGo1LgFQXhhwqo.roa
Signing time: Mon 01 Jan 2024 16:30:37 +0000
ROA not before: Mon 01 Jan 2024 16:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211432
IP address blocks: 185.106.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e7:6e:1a:66:07:f3:13:29:53:ef:b9:cd:78:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dcecb7f69ea8d2400f481a8d4b805417861c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:e8:04:c1:c8:ed:2c:61:17:8f:84:e0:a2:
9d:85:f2:5d:8c:14:00:c6:7d:fa:5a:d0:e5:da:bd:
38:ad:5d:13:01:4d:3f:b0:37:84:68:15:30:f5:85:
3b:3b:05:92:97:a0:76:ba:30:0a:6d:dd:88:35:60:
63:3a:cd:94:d0:93:42:fa:11:e5:a7:f6:66:71:0f:
ea:32:61:bd:c4:c7:7c:3a:92:73:cd:c2:88:aa:9c:
8a:ff:78:0c:7b:b3:da:24:f7:19:53:3a:ef:1b:6d:
f1:19:ac:61:82:b1:e4:c3:07:5f:62:eb:67:d2:7f:
75:6d:00:6a:6d:e4:e2:c8:d0:5e:81:62:f6:3f:05:
fe:e5:b2:d8:04:a9:f2:a4:d6:8b:e1:15:64:1b:48:
63:3e:92:97:c9:55:61:0f:a7:29:7a:68:db:a4:d9:
69:50:85:1a:19:73:c6:63:c2:37:2b:5d:42:31:9b:
44:85:96:5a:94:c6:9b:4a:a8:42:d8:b5:0e:e4:9b:
a2:db:da:b1:c9:1e:fe:fe:4d:13:80:97:dd:9c:80:
e3:4f:5e:c3:6b:4a:e6:7a:4d:ff:2c:87:00:df:43:
0f:f8:11:86:f9:ec:2e:a5:75:db:b4:9f:54:bc:d2:
2f:ab:fa:5a:ef:d3:f8:c0:c5:8b:9d:44:ab:65:b3:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:CB:7F:69:EA:8D:24:00:F4:81:A8:D4:B8:05:41:78:61:C2:AA
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Lc7Lf2nqjSQA9IGo1LgFQXhhwqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
52:24:e6:4b:cd:72:f7:b6:8d:dd:10:ec:df:cf:46:03:f0:5b:
2c:86:7f:5b:2b:40:b2:31:4f:75:ba:f9:de:85:ad:b1:92:67:
0e:da:f7:ac:56:04:bc:2f:6c:b9:37:ad:b2:ce:f5:17:3b:23:
11:ca:96:c8:07:b1:c5:05:e4:33:a0:a1:18:30:5f:e8:9e:2f:
be:90:57:67:ad:a0:e4:0c:6c:82:a6:14:8a:e3:7e:fb:53:48:
a6:5c:c4:a4:8b:77:69:79:c4:e0:61:99:b8:c5:2d:d4:0c:45:
74:50:a5:59:be:4a:c8:a0:34:47:cb:f2:e7:ff:39:3c:ca:41:
66:94:59:b7:ba:6d:ed:04:ed:bf:8b:37:67:e7:08:31:34:9d:
b9:fd:c0:d1:07:2f:ee:08:ef:ec:d1:1f:09:e3:a2:1f:1a:41:
10:05:91:3e:bf:23:f8:8c:4d:2f:b7:66:1d:bf:77:63:03:a5:
83:04:64:40:f0:85:66:08:fc:44:9b:61:05:45:66:5e:40:08:
73:c0:41:a7:eb:f6:d6:88:9a:62:2d:e1:5e:ed:8b:b6:1e:44:
ef:29:6e:73:46:ec:92:f7:85:60:cd:90:f3:43:10:9f:d7:69:
54:47:50:b5:6d:ba:2d:03:9f:f3:57:9e:92:fc:07:e7:a9:1a:
4f:5a:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:09:58 2024 by rpki-client on console-ams.rpki-client.org