Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/LDXTj4PfnTzbmV9biM03I7z6iwg.roa
File: LDXTj4PfnTzbmV9biM03I7z6iwg.roa (raw, json)
Hash identifier: R510hx90VD3yyq6TRXRN9n9LhLVTIBezM3IXATnqiZE=
Subject key identifier: 2C:35:D3:8F:83:DF:9D:3C:DB:99:5F:5B:88:CD:37:23:BC:FA:8B:08
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 018CC7270816348E00D7903212778717761C
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/LDXTj4PfnTzbmV9biM03I7z6iwg.roa
Signing time: Mon 01 Jan 2024 22:31:13 +0000
ROA not before: Mon 01 Jan 2024 22:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55081
IP address blocks: 185.117.196.0/22 maxlen: 22
2a06:8641::/32 maxlen: 32
2a06:8646::/32 maxlen: 32
2a06:8644::/32 maxlen: 32
2a06:8643::/32 maxlen: 32
2a06:8647::/32 maxlen: 32
2a06:8640::/32 maxlen: 32
2a06:8642::/32 maxlen: 32
2a06:8645::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:08:16:34:8e:00:d7:90:32:12:77:87:17:76:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jan 1 22:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c35d38f83df9d3cdb995f5b88cd3723bcfa8b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:60:e4:2f:98:26:46:43:4e:39:47:2e:05:
1f:6f:0e:1c:56:8d:3e:35:c3:f8:7d:9f:a4:c4:1c:
e5:3a:49:f7:fb:7e:55:2b:cb:f5:14:ee:e2:69:e1:
3d:e9:9b:6a:c8:55:eb:98:b6:58:1b:c9:a6:35:fc:
46:0e:a3:c9:5c:f4:a0:af:4f:4f:59:26:b0:5b:8a:
e3:0d:05:82:d6:86:eb:1c:1a:51:9e:1a:f5:08:04:
7c:ef:c4:3c:0b:3e:e1:51:38:a2:13:91:f1:87:3e:
04:c5:21:d9:a4:53:2b:7b:67:6b:9f:8f:ca:55:dd:
ef:b6:37:ac:b5:f8:3a:ce:67:6f:88:27:ab:ee:a1:
7f:9f:db:17:b1:23:97:34:cc:c2:43:86:f6:2b:b9:
f9:5b:d3:50:e5:6a:5c:47:19:a5:aa:b3:ca:54:b2:
ad:b0:b1:61:82:9a:70:9f:46:67:4e:9a:94:1e:3c:
ce:89:31:e0:59:d8:62:df:cf:b3:84:86:42:82:f7:
91:77:37:12:b8:0e:62:42:c0:d6:b2:a8:28:9e:63:
84:92:2f:f2:cf:87:6f:d9:49:52:a2:28:c4:ff:d6:
42:83:3a:d8:14:a6:82:dd:f2:19:f2:85:d1:31:e3:
a1:fb:9e:75:2b:cb:0f:30:19:83:15:0e:74:18:bf:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:D3:8F:83:DF:9D:3C:DB:99:5F:5B:88:CD:37:23:BC:FA:8B:08
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/LDXTj4PfnTzbmV9biM03I7z6iwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.196.0/22
IPv6:
2a06:8640::/29
Signature Algorithm: sha256WithRSAEncryption
2a:64:85:a4:5c:89:b3:5e:d3:d4:39:5e:ce:ac:10:ee:0b:66:
32:a6:f2:9a:ef:49:7f:51:d1:a3:30:9e:f8:37:66:c5:a6:61:
fd:b6:10:f8:31:18:87:2e:45:1b:78:d2:2c:09:cd:ed:eb:c0:
68:6c:cf:f8:44:fc:ff:63:1c:79:56:e5:08:6a:ad:ca:63:17:
eb:9c:b0:cb:4a:a7:06:b4:a1:0d:37:89:1a:0c:2a:85:4e:65:
f5:95:87:30:ec:3d:79:bb:4d:e7:6b:6c:ee:a8:44:b7:33:85:
2f:68:87:a0:49:dc:99:04:dc:57:d7:4e:40:74:76:47:32:df:
b7:bc:c6:54:84:06:ab:3a:20:ce:96:90:4c:94:7b:cb:27:fe:
9c:83:42:08:31:51:d5:28:a4:07:2e:48:91:7b:0a:d3:e6:90:
9f:48:d6:45:c0:de:2f:a9:66:ec:06:78:d3:a8:8d:a9:c4:c3:
c6:e5:ac:ca:b7:43:40:8d:f3:8e:c6:21:98:ea:82:3a:b9:db:
5b:e1:19:ca:5b:8c:5b:bf:49:9d:51:6b:b2:38:33:d8:d1:fe:
78:40:0e:2e:de:6e:ef:14:05:70:fd:9e:36:96:70:5e:d9:98:
02:f5:2f:03:b0:48:33:20:13:6f:c3:4f:8e:ed:ff:4f:21:e4:
6e:c2:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:28:01 2024 by rpki-client on console-fra.rpki-client.org