Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/LkM7eBCx0YaBuMGw5ix3FMh4YOs.roa
File: LkM7eBCx0YaBuMGw5ix3FMh4YOs.roa (raw, json)
Hash identifier: mh/SAuc0Way6zmaArtVb541yR+eAASRIHVI56FkLjGc=
Subject key identifier: 2E:43:3B:78:10:B1:D1:86:81:B8:C1:B0:E6:2C:77:14:C8:78:60:EB
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 018CC6B7BECEBF9131969BD101E3E2606970
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/LkM7eBCx0YaBuMGw5ix3FMh4YOs.roa
Signing time: Mon 01 Jan 2024 20:29:39 +0000
ROA not before: Mon 01 Jan 2024 20:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31274
IP address blocks: 193.25.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:be:ce:bf:91:31:96:9b:d1:01:e3:e2:60:69:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jan 1 20:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e433b7810b1d18681b8c1b0e62c7714c87860eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:77:61:82:5f:a5:4b:1f:d8:99:3a:20:74:
9f:6c:05:33:da:fe:0c:66:88:73:05:3c:3c:f8:a2:
90:33:90:da:63:ec:42:a3:5f:f7:fd:25:ce:7c:15:
84:ae:7c:ef:57:d9:27:88:05:0e:a3:6b:96:ad:56:
60:a9:10:c8:64:4b:71:56:08:b6:ca:ea:19:01:cc:
66:b2:0e:e7:86:72:ec:51:d4:78:74:32:d4:b9:68:
33:40:57:fe:5c:74:8c:c8:61:fc:84:c8:ab:58:56:
82:63:d7:f0:4b:07:ce:22:9b:0c:0e:02:ab:cc:16:
9b:5f:d8:4f:9f:0c:00:5e:ca:66:d2:3b:19:e9:9d:
54:47:c0:13:d9:22:96:d9:cb:b9:6c:b7:d7:0e:35:
7d:61:2f:ec:9e:34:e5:fb:d8:d9:fa:33:d9:55:f4:
86:ef:22:d0:6c:34:80:a8:62:e0:a1:bc:2f:c0:ce:
d8:84:7f:50:6a:59:9a:cb:49:e7:62:30:61:e7:71:
2c:a4:bd:46:9d:61:94:2b:e9:bf:2b:90:af:0e:65:
9b:60:95:d1:0f:72:40:24:fb:2a:19:54:87:80:63:
dd:2b:1b:58:a1:85:6b:86:f9:34:23:ed:9f:f5:5c:
2d:17:49:55:84:d8:2d:8e:33:ab:d8:d3:45:44:e0:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:3B:78:10:B1:D1:86:81:B8:C1:B0:E6:2C:77:14:C8:78:60:EB
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/LkM7eBCx0YaBuMGw5ix3FMh4YOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.124.0/23
Signature Algorithm: sha256WithRSAEncryption
17:52:31:b6:31:1f:67:42:ac:3d:63:b3:79:60:cc:30:50:ff:
98:3f:c8:d9:9e:89:16:7a:3c:04:7f:32:31:74:55:a9:11:4d:
74:5a:38:db:b2:84:ad:61:27:c8:20:a2:94:9a:54:39:c4:d7:
43:46:c2:50:c3:5a:69:7e:71:2b:b5:61:a8:37:69:ce:04:ed:
b7:39:b0:be:70:07:f0:91:98:29:80:23:2e:b9:3d:17:1f:2f:
b6:43:bd:dc:12:5d:32:97:e1:ce:db:b8:7a:a6:70:f6:b4:04:
ff:5e:e0:0f:2c:05:15:8b:f4:3a:68:a0:9b:0c:de:63:09:3a:
a7:4a:72:04:c1:9f:63:9b:e8:2f:9f:78:15:b3:bb:f9:92:8c:
86:6a:26:4b:c2:47:2b:e1:c7:59:2b:fe:3e:35:b9:55:04:f9:
28:c6:1f:2d:2b:c6:34:ad:10:c4:b4:72:29:f3:5c:08:94:2c:
03:16:88:74:99:68:50:a1:f9:f2:cb:e4:22:ca:35:9d:33:d9:
fd:42:20:cf:83:52:8b:06:4f:eb:2a:b7:1d:e4:f6:30:ce:da:
e1:cc:59:54:69:a5:a7:e2:88:9f:27:8d:34:bc:80:c6:ef:9f:
b3:8b:bb:91:fe:85:0b:c0:32:4c:35:9b:ca:ff:23:78:8b:7a:
6b:f0:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:21:29 2024 by rpki-client on console-ams.rpki-client.org