Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/LduAehX0P4USgKSq5xS2w-O6JkY.roa
File: LduAehX0P4USgKSq5xS2w-O6JkY.roa (raw, json)
Hash identifier: +zWtBZ73nCOK2IY5IlDZiRwLN5ZEshyPoycr85a06+I=
Subject key identifier: 2D:DB:80:7A:15:F4:3F:85:12:80:A4:AA:E7:14:B6:C3:E3:BA:26:46
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 018CC86F349B627C43A15E3D33BA879C1DE6
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/LduAehX0P4USgKSq5xS2w-O6JkY.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31244
IP address blocks: 45.129.64.0/23 maxlen: 23
45.129.66.0/23 maxlen: 23
194.117.236.0/23 maxlen: 23
193.25.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:34:9b:62:7c:43:a1:5e:3d:33:ba:87:9c:1d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ddb807a15f43f851280a4aae714b6c3e3ba2646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:71:e4:6c:be:ff:14:b2:15:aa:12:e4:15:
8e:a4:f0:29:a5:af:2b:b5:3e:39:2d:67:19:8f:ed:
11:5d:ee:8f:17:46:1c:af:03:30:0b:85:57:88:4e:
a6:f8:04:1e:65:5e:53:21:c6:89:c6:ee:66:94:df:
c7:47:db:22:d8:4a:18:e3:a1:aa:21:6d:94:1b:68:
86:ac:82:b3:3c:83:02:bb:ee:09:df:7d:45:d7:ba:
63:d6:83:fc:e7:8f:c7:88:84:17:48:6a:12:1a:d8:
b6:c0:a7:1c:be:f8:1b:ab:a3:f1:4e:52:54:3a:c9:
f0:dc:ad:37:73:14:f4:51:5c:c4:82:8d:d6:d5:49:
ea:08:44:fc:03:c9:29:76:d6:58:97:17:d5:aa:66:
13:d5:55:06:3f:fe:5b:ba:2c:b1:df:71:f6:d2:2f:
f9:96:d0:1e:84:66:21:4f:42:4c:19:28:a4:15:b5:
93:a1:23:6d:15:4e:3d:0b:ae:64:8d:11:80:56:0f:
88:3a:93:47:55:62:9c:81:b7:83:d0:b8:e4:58:ba:
16:e1:bf:02:a9:8f:e3:39:be:2c:45:ec:f8:0f:38:
53:94:14:5c:1e:d2:82:35:e2:36:74:83:c3:43:3d:
f2:26:c0:4c:11:ed:5d:49:fa:70:c9:02:39:5f:b4:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:80:7A:15:F4:3F:85:12:80:A4:AA:E7:14:B6:C3:E3:BA:26:46
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/LduAehX0P4USgKSq5xS2w-O6JkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.64.0/22
193.25.112.0/23
194.117.236.0/23
Signature Algorithm: sha256WithRSAEncryption
90:92:11:61:13:76:9f:44:79:42:a9:3a:cd:30:d4:a7:b5:a9:
f1:8b:6e:2e:2c:74:22:d0:e3:dd:32:87:e5:d1:9d:a3:3c:e1:
e5:cc:34:30:69:69:1b:55:45:c9:db:3f:83:ad:ea:1d:4d:18:
f7:25:c8:0d:c1:5e:24:a2:25:6f:ab:d1:25:71:ec:d1:81:f3:
46:be:58:3c:b4:ca:76:78:29:5f:a3:84:24:8f:77:d4:ce:de:
82:00:20:84:b4:58:44:8d:0d:04:2b:fe:ed:f1:f6:c7:8a:e8:
42:92:b6:89:b8:69:21:34:2f:b3:63:32:6e:27:98:a1:64:bf:
73:90:32:f7:19:94:03:05:d1:73:1c:0a:97:c3:75:22:f3:cd:
86:6d:3d:96:36:14:92:6b:a4:99:ec:cb:50:cb:97:b0:a1:3a:
0f:6a:c0:65:b6:93:c0:dc:a6:fe:e7:26:b6:4b:a6:1c:ed:81:
08:51:b8:bf:5e:57:e9:08:88:36:de:cc:ab:f8:ad:8c:f1:ce:
46:19:0d:c1:29:7b:49:7f:47:28:ff:cc:3d:9d:da:04:bd:5b:
26:1d:21:e3:14:ef:af:29:63:d6:2e:cc:2e:92:c7:3a:43:b9:
c5:92:96:c9:e4:72:a2:83:13:48:92:a8:5c:3d:88:ff:bc:2b:
c3:db:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:25:20 2024 by rpki-client on console-fra.rpki-client.org