Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LraPTk-tyaAMJiQ_hBfij9a_fTM.roa
File: LraPTk-tyaAMJiQ_hBfij9a_fTM.roa (raw, json)
Hash identifier: Idb5al06umfDRdizrcAV+KSWnZ/sqXS2IZEwED3RiEo=
Subject key identifier: 2E:B6:8F:4E:4F:AD:C9:A0:0C:26:24:3F:84:17:E2:8F:D6:BF:7D:33
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955871D65897528C76806C4B4FB250
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LraPTk-tyaAMJiQ_hBfij9a_fTM.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56885
IP address blocks: 188.241.158.0/24 maxlen: 24
46.102.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:58:71:d6:58:97:52:8c:76:80:6c:4b:4f:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eb68f4e4fadc9a00c26243f8417e28fd6bf7d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:ad:e1:bb:f0:6a:ac:cc:e5:d2:1e:84:68:
77:24:5b:48:43:cc:a1:e7:61:bf:90:f6:b0:a6:63:
e3:a0:5b:3e:fd:e5:87:01:23:d3:b0:52:57:2c:67:
3b:38:a6:9f:86:ee:4d:9f:52:ad:b4:fe:12:40:9b:
aa:ef:3b:e1:59:fd:7e:2e:10:cd:ee:d8:ad:89:3a:
f7:ac:da:f8:df:16:1b:1f:04:14:18:67:2f:91:70:
72:59:8b:fb:8a:bd:6d:23:ef:61:cf:ce:d8:df:10:
77:88:4b:8f:73:c7:47:22:26:a5:21:7c:43:2d:b0:
e6:ff:cd:c2:b0:fb:6f:e3:9f:c7:92:dd:c8:fa:ca:
85:b4:d1:c6:05:14:37:15:93:b9:2d:18:07:86:a6:
66:36:b0:08:64:37:e1:c8:0a:4f:68:d8:40:19:83:
27:af:00:34:29:f0:83:f7:63:1d:7e:db:66:c0:30:
44:d7:d9:98:85:bc:12:f6:a7:19:8f:45:cb:3c:f5:
b9:12:b2:a1:37:ce:73:f7:65:f4:36:58:c8:05:f2:
f4:28:b0:fe:7b:10:80:cf:cd:94:05:41:e7:9a:f6:
9a:d1:66:5e:57:9c:17:77:46:96:39:8c:60:52:6c:
d0:a9:e6:09:b0:3b:5b:c8:2c:ea:9e:c7:aa:c6:86:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B6:8F:4E:4F:AD:C9:A0:0C:26:24:3F:84:17:E2:8F:D6:BF:7D:33
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LraPTk-tyaAMJiQ_hBfij9a_fTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.109.0/24
188.241.158.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2a:7b:4f:74:c5:6d:d9:27:a4:3a:b9:0a:57:20:26:a6:6a:
76:46:65:32:1c:b7:ba:c0:03:28:24:e6:87:62:a4:9e:08:8b:
a4:61:cc:f1:9c:bb:b3:66:19:62:0e:23:eb:98:e2:c1:06:6c:
31:f5:f6:01:62:78:6a:69:12:a4:5b:12:66:44:1d:b8:6d:3c:
73:3c:3f:29:25:43:5f:e0:aa:dd:ea:97:6a:85:a5:af:e0:94:
9d:c8:f6:c8:5d:33:be:df:e3:91:02:f5:3a:b7:83:90:6f:eb:
ba:93:6c:41:e1:75:0f:47:b1:a3:6d:28:dd:e1:41:36:0c:46:
c7:83:50:e4:7b:68:6b:bf:e6:c2:a0:60:a9:c0:f7:2a:84:9c:
8d:01:9a:42:84:5c:8d:2b:a4:35:a1:8e:e9:28:1b:8b:18:34:
e5:95:99:52:c0:73:3e:a1:37:6a:01:c3:06:3e:42:e6:1b:ed:
69:40:60:d0:22:4b:9e:a4:ac:a5:fc:94:09:77:cd:d5:00:a2:
b4:65:bc:ad:3e:67:53:a6:3d:69:9c:7a:e0:cf:34:a4:f9:df:
50:30:d0:53:02:3d:44:0d:34:52:9d:e9:3e:59:4d:5b:8c:28:
b5:7d:20:56:40:3c:f2:be:4a:0b:1e:96:b9:bc:dc:00:aa:72:
dc:2d:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 16:23:54 2024 by rpki-client on console-fra.rpki-client.org