Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/LeSR7fFiQijsMTmvDr_Zh9Ye0KA.roa
File: LeSR7fFiQijsMTmvDr_Zh9Ye0KA.roa (raw, json)
Hash identifier: CaJMQ9jgbTOA8Vsxda7qO1CXi4r+kvkcvSecA8Nvy+g=
Subject key identifier: 2D:E4:91:ED:F1:62:42:28:EC:31:39:AF:0E:BF:D9:87:D6:1E:D0:A0
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 018CC801A89DC58AE3917B041C3883C95E66
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/LeSR7fFiQijsMTmvDr_Zh9Ye0KA.roa
Signing time: Tue 02 Jan 2024 02:30:01 +0000
ROA not before: Tue 02 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59639
IP address blocks: 193.200.89.0/24 maxlen: 24
91.199.199.0/24 maxlen: 24
2a11:1bc0::/29 maxlen: 29
2a11:1bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a8:9d:c5:8a:e3:91:7b:04:1c:38:83:c9:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Jan 2 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de491edf1624228ec3139af0ebfd987d61ed0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:69:ee:64:6f:33:20:46:a6:72:0b:f8:3c:
8d:d1:c7:99:06:00:1b:2a:7a:e7:7d:43:57:85:34:
2d:d2:63:8b:8b:64:67:86:25:11:98:b1:b7:4c:67:
c5:53:83:eb:15:bf:25:9c:50:bf:9e:d8:cc:f8:74:
11:f7:83:1a:37:61:e0:fd:05:31:d3:6c:d5:e9:f2:
23:ed:d0:31:dc:2d:7a:64:7c:27:f5:01:3f:f6:f1:
a9:67:94:9c:7a:e5:68:40:54:45:16:6d:dd:1c:42:
ff:f9:e0:ba:b9:ad:0f:33:27:03:26:90:71:66:4c:
45:73:16:e2:bf:eb:e9:93:fa:6a:b0:09:3c:d4:7e:
d5:78:52:83:c9:68:9c:1f:d4:ff:39:dc:19:1e:98:
bb:70:e8:19:35:26:b9:69:b1:53:57:80:fa:a2:12:
7b:c1:f7:c7:79:27:07:80:1d:13:dd:81:67:fa:bf:
ad:09:bf:16:62:8f:d4:97:58:e2:14:42:2f:ab:c0:
66:a3:0b:3f:52:07:30:2c:91:d1:3d:d6:70:19:7e:
cf:71:b5:eb:c7:d6:93:16:1b:1e:5a:ef:02:f7:23:
72:21:4a:a3:8d:c9:98:09:d0:42:fb:c7:c9:3d:27:
f0:9d:1c:78:30:82:50:0a:ef:40:28:95:20:3e:d3:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E4:91:ED:F1:62:42:28:EC:31:39:AF:0E:BF:D9:87:D6:1E:D0:A0
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/LeSR7fFiQijsMTmvDr_Zh9Ye0KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.199.0/24
193.200.89.0/24
IPv6:
2a11:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
80:38:38:8c:f4:b6:90:61:80:f1:42:0a:8a:73:30:25:4c:54:
a6:4e:6e:15:09:bf:18:b9:e9:bf:28:d7:3d:bd:43:43:f5:e1:
9a:19:03:86:a6:50:9e:2b:8c:a0:e4:c2:4f:de:d8:b4:d2:fd:
92:a7:ba:62:38:61:39:ec:20:51:2e:52:69:38:cc:0a:4e:ea:
a0:8c:3e:09:4a:f6:b4:42:28:76:ff:ab:70:6d:57:c4:d0:1f:
5a:ce:b5:5c:30:03:9a:a3:94:e0:ea:9a:ae:57:5d:09:bb:04:
17:38:17:ff:a0:d1:92:fe:9e:f9:38:1f:b5:66:e6:ed:1d:eb:
8a:c4:55:48:4b:7c:9d:51:eb:62:4e:3d:e5:2a:69:f9:3d:49:
53:56:b2:74:09:b4:18:45:d7:0f:1e:19:67:77:a2:28:50:ef:
13:54:27:90:79:d2:81:d0:97:5b:09:a9:4d:7c:51:f6:a9:8e:
33:6f:03:e6:37:22:20:8b:05:62:88:3d:de:0f:4f:53:76:64:
fd:4f:e3:26:2f:a8:03:8c:49:7d:c8:c9:69:7f:6a:99:40:b6:
7c:43:c9:0f:90:3b:1c:d7:f1:c6:4e:cc:72:1c:15:e6:df:9b:
cb:7d:b6:e1:3c:5f:ba:c4:cc:3e:bf:c1:ca:40:8d:69:56:5c:
b9:d7:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:01:57 2024 by rpki-client on console-fra.rpki-client.org