Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/lxYK6tmCE8hLIylb83PQx-Lm9o0.roa
File: lxYK6tmCE8hLIylb83PQx-Lm9o0.roa (raw, json)
Hash identifier: jzV7+Di/VUuEzVGRrgecwKgnyIlai+igLU4f6JOF6mA=
Subject key identifier: 97:16:0A:EA:D9:82:13:C8:4B:23:29:5B:F3:73:D0:C7:E2:E6:F6:8D
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 018CC86F0A862ADFBBEFE9BBADABE8DBA56E
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/lxYK6tmCE8hLIylb83PQx-Lm9o0.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394814
IP address blocks: 91.239.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0a:86:2a:df:bb:ef:e9:bb:ad:ab:e8:db:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97160aead98213c84b23295bf373d0c7e2e6f68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:a6:b2:f7:82:04:42:e0:8a:1f:5e:5d:ba:
3e:64:31:94:36:65:ab:3c:c9:e6:95:7f:cc:2d:9d:
49:9f:18:f7:9d:72:41:54:fc:9f:bf:0b:cc:48:84:
23:26:80:4a:14:d1:28:db:7c:05:b2:9d:bd:b5:d1:
91:79:0b:95:45:4c:c3:e3:ec:71:a8:e7:59:ca:9f:
2b:a2:35:b6:9f:f4:89:9c:67:aa:40:94:9a:96:4b:
75:c7:3e:9c:6d:8c:9d:87:7d:a3:6d:3b:a5:66:86:
2d:8e:dd:4b:5b:98:ce:5b:6b:ae:9c:e7:c3:9d:07:
c8:55:3e:76:ad:8a:34:03:14:dc:4c:cb:b9:85:60:
19:f9:99:42:e5:c0:28:0d:9b:1b:b5:d2:46:78:95:
a4:90:47:40:32:dd:9a:57:33:01:bb:fd:b4:13:aa:
65:64:7f:04:ce:45:04:5b:06:8a:22:bc:11:b5:9e:
56:e7:ae:1a:10:90:3f:50:5f:7e:f0:82:e2:ee:7b:
43:30:1e:a0:ec:3a:9d:77:ab:24:58:82:e4:49:33:
b6:7e:f3:02:1f:18:cb:1f:bd:93:df:7d:a2:96:91:
d1:d2:17:f5:c2:c9:bc:05:57:fe:f7:e1:e6:ad:8e:
94:d3:a0:3c:40:cf:e5:cf:a3:2f:46:37:bb:59:ca:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:0A:EA:D9:82:13:C8:4B:23:29:5B:F3:73:D0:C7:E2:E6:F6:8D
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/lxYK6tmCE8hLIylb83PQx-Lm9o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.187.0/24
Signature Algorithm: sha256WithRSAEncryption
24:88:b8:02:9b:7f:03:f5:92:f4:75:9f:46:f4:39:db:0a:1a:
fd:68:fe:61:10:c4:82:fb:e7:88:ce:fa:5d:e0:c7:77:3b:a3:
2b:4e:c9:3b:a2:98:93:90:85:d9:86:84:9f:18:00:0a:37:9f:
dc:96:b0:37:1e:89:d3:b1:32:c2:24:f6:09:b4:69:18:1c:79:
95:a2:b1:6e:56:31:f5:0e:3d:da:6b:35:b6:ef:3c:5a:9a:37:
df:b0:fc:d0:d2:4c:5b:7d:d0:af:a7:c1:f9:e1:0e:e2:c5:17:
31:a5:0f:2e:37:ba:b1:b5:68:d6:5a:ec:03:86:0b:50:69:b8:
56:9f:87:82:10:90:2a:6e:7c:85:22:72:de:a5:83:5e:48:03:
b0:67:40:d5:1e:9a:5f:27:9f:b7:4c:64:ce:b2:a2:68:06:c6:
10:e9:c9:b3:9e:93:c1:e1:c8:81:5e:f7:d0:b2:bc:d6:c9:86:
66:9e:ea:82:ee:cc:11:f1:6e:76:40:9c:05:e9:64:d5:23:3f:
8f:22:f0:bb:84:d2:60:d0:18:e1:e6:a6:fc:4e:94:d5:54:af:
25:05:f1:9e:70:30:79:1f:99:a6:1f:88:c5:93:06:0f:0c:12:
15:0a:2d:b2:13:a6:35:46:fc:31:f3:48:19:f9:08:0e:a7:70:
de:fa:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:43:32 2024 by rpki-client on console-ams.rpki-client.org