Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/LT1I7WjN-5b-bonArPNYycZfYnM.roa
File: LT1I7WjN-5b-bonArPNYycZfYnM.roa (raw, json)
Hash identifier: bIRILgg5MIF+0c4CqF/j8fZ5WP8L8tDIBMNnyS1pe2A=
Subject key identifier: 2D:3D:48:ED:68:CD:FB:96:FE:6E:89:C0:AC:F3:58:C9:C6:5F:62:73
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 018E0CE3D32EC462ADB84C2FD8FC17F89DB4
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/LT1I7WjN-5b-bonArPNYycZfYnM.roa
Signing time: Tue 05 Mar 2024 04:34:01 +0000
ROA not before: Tue 05 Mar 2024 04:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48204
IP address blocks: 46.143.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0c:e3:d3:2e:c4:62:ad:b8:4c:2f:d8:fc:17:f8:9d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Mar 5 04:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3d48ed68cdfb96fe6e89c0acf358c9c65f6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:0d:0e:eb:b3:30:d1:40:8b:a8:61:05:22:
58:ee:a9:b2:c6:41:9c:4c:0d:1d:95:60:8b:91:d6:
9a:60:88:e3:b3:f8:50:02:8a:fa:a8:35:e5:4c:f4:
34:bf:60:33:a9:d0:9e:45:ce:6b:d3:30:50:3a:7f:
cd:1b:f1:7a:29:b9:6f:b3:25:9b:c7:ee:f9:29:dd:
9d:e2:f5:d3:bf:7e:d0:e7:33:1d:6a:3a:35:d8:c2:
2a:ec:f2:90:ff:53:8b:5d:b0:ac:74:85:b4:fa:e2:
14:c5:61:3b:25:96:81:42:ee:e7:b9:0c:eb:16:61:
92:8f:6c:bf:70:79:da:25:7d:df:82:97:0b:6b:b9:
34:1e:b4:ef:a0:93:f7:2f:bb:ed:88:41:3b:bb:05:
f2:f2:23:99:f6:31:9b:c6:78:2d:3b:57:5c:15:f7:
0f:64:97:c3:a9:ca:d9:bf:a0:c8:3d:b5:8d:5e:e8:
07:22:e3:71:5c:e9:23:8a:87:29:d5:26:4d:7f:ab:
96:ff:74:20:8f:09:d5:ba:eb:50:34:52:03:39:0d:
66:10:60:fe:48:ef:b4:a4:ed:f4:37:e1:a3:67:81:
c4:4a:88:99:26:d6:18:0d:44:c3:b0:52:0d:98:82:
08:19:ee:e1:a1:fc:0f:62:5d:bb:00:23:e0:d2:0d:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:48:ED:68:CD:FB:96:FE:6E:89:C0:AC:F3:58:C9:C6:5F:62:73
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/LT1I7WjN-5b-bonArPNYycZfYnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f5:dd:cd:09:a2:1b:96:9b:da:45:78:d6:9b:29:dc:ae:09:
f0:bc:63:4a:25:f7:48:86:dd:e6:40:f1:4c:f6:bb:d2:3a:80:
39:7e:e9:ae:5d:3e:b6:0d:0b:57:99:dd:b4:ce:02:d0:b8:c0:
6d:fc:a2:2c:73:b7:ff:66:ea:38:63:ba:67:b4:f5:83:46:14:
f5:25:56:c6:16:6a:37:70:01:21:3f:ac:cb:e8:42:c8:3b:74:
bf:a2:30:18:f3:5c:99:77:b4:19:fc:78:c9:93:a8:bb:34:ae:
44:02:7f:9e:b5:a4:d3:3c:0f:9e:4c:66:1d:8a:e8:d6:c4:8f:
14:cc:b6:a7:ea:a8:d3:36:86:8c:00:ab:24:9b:4a:ee:c8:fe:
a1:fd:b1:9a:b0:27:9e:9a:c7:c9:2a:0e:b5:7e:54:24:1d:d5:
ef:6a:76:f3:ab:7f:7f:5c:5f:4d:94:bb:6b:72:42:16:fb:0d:
53:6d:fa:a5:46:be:30:89:ad:9f:85:60:25:92:f0:ca:f7:57:
d7:1e:f2:2c:5d:f0:0d:56:10:3f:d7:d8:57:8b:9e:46:01:8d:
06:f1:d1:69:4b:64:39:5d:5f:81:5e:2a:6c:c5:5a:da:e9:88:
1d:f2:42:c6:36:4e:18:a9:fc:2a:52:18:06:af:ee:60:bb:81:
e1:ce:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 14:25:33 2024 by rpki-client on console-fra.rpki-client.org