Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LeZrfRWI0Pa-Z9NpikPOJXzHz00.roa
File: LeZrfRWI0Pa-Z9NpikPOJXzHz00.roa (raw, json)
Hash identifier: Iyz/ACIwRduwA587+SUDNqy/vq7hHxyqxVynLaEuUn8=
Subject key identifier: 2D:E6:6B:7D:15:88:D0:F6:BE:67:D3:69:8A:43:CE:25:7C:C7:CF:4D
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64ADB95FD654F46EEF99431691A54A2
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LeZrfRWI0Pa-Z9NpikPOJXzHz00.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22400
IP address blocks: 5.1.92.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:db:95:fd:65:4f:46:ee:f9:94:31:69:1a:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de66b7d1588d0f6be67d3698a43ce257cc7cf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:d5:93:51:58:99:66:c8:89:63:2b:fb:cb:
aa:72:27:43:37:bb:4a:4e:63:d0:06:c8:a7:b6:fe:
d4:42:f1:95:7a:f5:81:5b:23:dd:59:f2:e5:dd:3c:
66:93:55:70:55:f4:7e:da:1a:12:7b:dc:4f:56:e6:
87:46:ff:88:3f:cc:c9:14:8a:78:1a:37:a9:83:f5:
3a:b1:94:d9:a5:4e:d8:42:06:35:61:6b:fb:84:85:
9e:ac:60:05:ce:7b:69:62:ad:8e:c3:01:92:55:35:
98:44:f4:a8:68:66:dc:cf:94:39:ae:90:09:0e:65:
eb:c2:09:30:b6:d5:26:63:65:72:24:39:c9:a5:8d:
7b:c8:ab:a1:be:4c:ff:78:d0:93:95:e4:34:41:40:
07:41:2d:f7:5b:a5:1e:cf:13:7a:f5:15:72:87:ae:
ea:26:fc:62:85:43:ae:9a:80:6a:a0:84:1f:ff:12:
df:59:ce:d5:32:b8:4a:68:e4:25:55:31:6e:a5:25:
f0:2e:4a:4a:82:f4:b8:00:e5:c4:b9:bd:dd:b2:31:
fb:ad:98:03:d7:a8:22:95:82:f9:a9:ed:b8:00:a4:
29:39:cd:ad:f7:f6:a1:e1:88:b7:8e:d2:d3:9d:ae:
05:c1:be:da:4e:fc:b0:11:ba:3c:3a:84:18:24:99:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E6:6B:7D:15:88:D0:F6:BE:67:D3:69:8A:43:CE:25:7C:C7:CF:4D
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LeZrfRWI0Pa-Z9NpikPOJXzHz00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.92.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:1d:11:6d:11:6b:1f:5b:a1:ad:32:12:70:ac:db:8a:5d:f3:
2e:9a:4f:5c:60:3f:3e:85:c7:b0:c1:4e:c0:01:30:3f:1d:61:
63:4d:43:1a:17:05:a8:37:ef:85:c9:bc:f9:60:b1:62:e7:ae:
3d:84:7d:6d:ad:62:9b:4d:76:d2:1d:65:f2:6b:94:15:40:42:
73:53:10:13:7d:4f:4e:26:10:07:ec:30:1a:5e:03:34:f9:82:
61:41:c7:bc:04:82:c8:f6:34:0d:60:bf:df:4f:ba:3f:cf:b7:
4b:c2:04:cc:5c:d0:e2:79:01:40:b8:0d:9e:3f:f6:e3:8a:14:
f7:bd:c5:8c:f2:f6:af:a0:ff:d1:46:f0:53:50:68:dd:10:e8:
33:a3:7c:2f:c4:c1:9b:fd:02:b9:81:52:ea:f5:f6:7f:3f:80:
e8:43:38:26:c1:de:05:8c:a4:a8:cd:19:0b:78:04:8c:1d:62:
9e:9c:1b:1a:ba:da:05:a2:9b:56:4e:36:36:8f:dc:27:89:96:
22:7b:23:c3:f8:23:fe:5b:61:54:2a:4f:d8:81:38:d7:66:51:
24:9c:6c:e8:a2:7d:90:90:a1:29:7f:ea:7c:ff:57:34:a8:76:
1c:44:b9:8f:14:0f:67:91:30:11:20:69:87:28:9d:d1:1a:a3:
d3:ff:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:28:21 2024 by rpki-client on console-ams.rpki-client.org