Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/LYkrH8EDlrtW3JeKeZYMUmWIatA.roa
File: LYkrH8EDlrtW3JeKeZYMUmWIatA.roa (raw, json)
Hash identifier: J26pJR+XToeHbpdJLn2hfzCRum+5GDY+7h2S2vCTDU8=
Subject key identifier: 2D:89:2B:1F:C1:03:96:BB:56:DC:97:8A:79:96:0C:52:65:88:6A:D0
Certificate issuer: /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial: 018CC64B4921012005F4F4931782F758151E
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/LYkrH8EDlrtW3JeKeZYMUmWIatA.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57915
IP address blocks: 194.1.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 01:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:49:21:01:20:05:f4:f4:93:17:82:f7:58:15:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d892b1fc10396bb56dc978a79960c5265886ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c4:c7:b5:d3:53:7e:9a:41:f9:95:8e:e2:e0:
8b:5e:25:b5:28:0e:32:4d:44:7e:37:96:b4:2f:4d:
df:67:a3:d0:5a:a6:f9:38:de:5b:25:d8:cb:b2:e6:
ce:91:a6:f9:88:fb:94:85:9e:3f:b7:9f:b2:7f:54:
e9:d7:c5:68:73:9e:26:cb:be:83:27:6f:e7:86:50:
ec:7a:14:d1:b4:c6:b7:96:42:10:f0:32:10:67:d5:
d8:d8:b6:c1:c6:b0:2d:be:87:f5:57:eb:f1:05:f4:
bd:d7:3a:34:a3:ce:60:43:72:be:a7:4a:01:4a:77:
c5:62:67:e8:61:a0:4f:f0:cf:46:b6:b3:27:b0:a5:
06:cd:48:8d:58:5e:00:fd:1a:2e:49:e7:2e:b9:21:
f1:d0:c7:6d:ac:1a:ce:0f:66:35:da:53:c1:8a:39:
96:c6:a8:f1:33:00:6d:b0:55:a5:e9:7a:ff:4d:4b:
80:fd:e2:d9:cb:ed:16:86:a9:de:09:52:20:68:4c:
af:7c:e6:d7:c8:0d:c3:59:f8:68:bf:37:82:bc:1a:
1d:51:23:f6:f1:87:50:23:76:78:47:01:f8:09:43:
3c:b9:d9:27:ba:8e:b4:5d:07:41:44:ab:70:59:bb:
61:47:00:7b:42:ef:7e:07:98:58:74:04:d3:97:3d:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:2B:1F:C1:03:96:BB:56:DC:97:8A:79:96:0C:52:65:88:6A:D0
X509v3 Authority Key Identifier:
keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/LYkrH8EDlrtW3JeKeZYMUmWIatA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:be:19:fe:8b:92:01:42:25:ee:90:9d:45:53:48:e9:88:bc:
c5:77:de:f4:57:42:3b:31:b1:3e:84:0c:67:5d:b5:ee:50:29:
6b:34:9d:42:80:58:bd:95:b9:2d:a9:ce:e6:63:e0:5c:f7:a4:
8a:ed:8b:05:9c:d9:98:d6:ef:c5:2f:f7:ef:d5:0d:97:ec:30:
c1:5e:28:14:3c:99:9e:33:c9:c9:c1:56:37:da:7c:d4:d2:10:
a2:39:33:9e:36:19:ac:9b:6c:7e:1d:f5:3d:c6:25:34:aa:97:
e5:ce:f5:f3:f8:4f:36:b7:6b:3b:66:d9:45:de:75:b8:ed:ac:
72:c8:2d:65:20:be:3c:51:9e:f0:93:a8:16:e3:b9:b6:20:cc:
a8:57:4a:b4:9b:5a:c5:0d:96:47:f3:c4:b0:66:48:ae:b0:1a:
00:40:c5:04:71:9d:f9:cc:90:c1:cf:d1:18:45:6a:c5:57:05:
23:f9:ac:4d:99:43:57:b5:3a:10:a2:6e:d4:4e:4d:79:47:71:
79:aa:bb:74:50:4b:e7:f5:5f:0a:e5:a0:50:0c:9d:a2:f8:c9:
35:d6:68:22:ba:d5:29:9f:0a:ca:45:72:08:6b:e6:76:6b:c7:
93:73:f0:99:d1:be:86:9e:91:90:86:bb:bd:1b:fc:a2:68:5a:
a1:9f:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:33:30 2024 by rpki-client on console-fra.rpki-client.org