Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/LPsCS7FLfHSisbPRU7jsmHTJbf8.roa
File: LPsCS7FLfHSisbPRU7jsmHTJbf8.roa (raw, json)
Hash identifier: rdqooSA2ushWxelR9N5DAHKj5gcFOBavV0gt7Qqk0Dg=
Subject key identifier: 2C:FB:02:4B:B1:4B:7C:74:A2:B1:B3:D1:53:B8:EC:98:74:C9:6D:FF
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 018CC79487A2CEFE434370E35353B6E33069
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/LPsCS7FLfHSisbPRU7jsmHTJbf8.roa
Signing time: Tue 02 Jan 2024 00:30:49 +0000
ROA not before: Tue 02 Jan 2024 00:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50309
IP address blocks: 185.221.184.0/22 maxlen: 32
46.182.192.0/21 maxlen: 32
185.160.128.0/22 maxlen: 32
94.142.132.0/23 maxlen: 32
2a0b:5e00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:87:a2:ce:fe:43:43:70:e3:53:53:b6:e3:30:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jan 2 00:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cfb024bb14b7c74a2b1b3d153b8ec9874c96dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:12:e2:d5:7a:f4:9b:8d:ad:50:8d:7c:eb:
ab:db:5c:af:82:08:98:0c:73:1d:9a:91:5e:e4:7e:
9a:6b:15:4c:ac:9b:3e:23:41:a7:d8:b0:68:80:fc:
2b:09:94:c1:58:ae:17:f3:87:d1:63:d5:72:31:db:
f1:50:32:38:65:e6:ef:da:65:6f:29:fd:0a:7a:34:
30:d1:2b:1b:13:9d:58:07:f9:24:61:0a:45:24:49:
28:7d:55:08:b4:26:6d:5b:ef:69:f4:93:ea:db:a2:
a3:df:17:79:ff:7d:3a:ad:ba:87:66:2b:5b:1c:6b:
01:fb:17:ae:7a:ed:8e:8f:7c:ae:57:91:72:6c:47:
41:f4:da:1c:d1:23:93:3c:d4:61:91:4b:ff:f3:5c:
ba:4b:a8:be:13:9d:58:f6:d7:89:cc:4e:29:0f:d5:
8f:a5:eb:b5:79:88:fb:1f:ba:94:62:50:0c:38:02:
2a:d1:40:60:bf:87:34:5e:d0:e0:e4:54:c7:eb:46:
9f:80:67:82:e6:7d:38:bd:34:ca:a1:84:3b:55:ef:
a9:04:2f:d7:68:d4:49:dd:22:c4:1c:b7:ad:e4:e1:
2f:2d:e8:16:83:6d:76:56:11:50:07:9b:b5:8c:54:
91:ae:fa:ab:bc:06:59:c5:06:f0:38:98:c9:55:9d:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:02:4B:B1:4B:7C:74:A2:B1:B3:D1:53:B8:EC:98:74:C9:6D:FF
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/LPsCS7FLfHSisbPRU7jsmHTJbf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.192.0/21
94.142.132.0/23
185.160.128.0/22
185.221.184.0/22
IPv6:
2a0b:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
8f:1b:a5:75:b2:0a:35:c2:1d:92:7c:9e:99:49:67:c1:cf:98:
2c:c7:62:4e:25:ee:88:f2:97:23:f7:02:cf:19:13:41:b1:7a:
04:e2:f9:dd:d1:98:32:dc:67:b1:f6:72:28:d3:db:21:aa:df:
05:16:bc:86:a5:58:7b:d0:21:6b:2a:90:70:63:4b:24:d7:8a:
7b:c4:f3:64:2f:79:64:69:20:93:45:01:90:5a:01:fe:3a:ed:
b9:9d:c8:f8:5d:6b:64:22:2c:5b:00:46:7e:bd:b4:07:98:b9:
71:27:d9:a3:08:5e:a6:ef:8f:af:4a:3c:2f:54:57:47:34:6a:
cf:fc:8a:9c:cd:39:d7:d0:45:a8:84:65:63:e2:4a:d4:3c:c8:
c8:f5:25:d4:ae:4b:b0:aa:aa:8b:62:5b:44:7e:7e:85:1f:fc:
b3:4a:0e:2b:d1:4e:d2:3f:e6:89:e5:a7:16:f2:25:f5:74:e8:
27:a2:22:aa:48:bf:9b:59:b7:cb:23:25:6b:d1:4a:e3:d9:84:
2e:03:06:d2:8b:b4:6e:84:61:35:a8:fa:b2:5c:73:f4:f8:20:
66:47:1e:e9:c6:c4:88:b8:50:a6:56:e5:60:46:35:84:b6:6c:
cf:95:05:67:42:5a:4c:e0:53:54:70:af:21:e7:96:dc:96:f8:
cb:f2:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:18:57 2024 by rpki-client on console-ams.rpki-client.org