Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LUACq5uiCKhfdex0g2yJahGNKog.roa
File: LUACq5uiCKhfdex0g2yJahGNKog.roa (raw, json)
Hash identifier: L/qxJ0K1pdhb64/W60mZLjax710KZ16k3IVP1mD37Ws=
Subject key identifier: 2D:40:02:AB:9B:A2:08:A8:5F:75:EC:74:83:6C:89:6A:11:8D:2A:88
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802D8315AFCD2434EBCAFAC429655E0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LUACq5uiCKhfdex0g2yJahGNKog.roa
Signing time: Tue 02 Jan 2024 02:31:18 +0000
ROA not before: Tue 02 Jan 2024 02:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2836
IP address blocks: 192.121.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d8:31:5a:fc:d2:43:4e:bc:af:ac:42:96:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d4002ab9ba208a85f75ec74836c896a118d2a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:25:57:ee:fe:07:40:d5:eb:cf:be:23:da:
cf:05:e6:ef:14:a0:61:fc:5d:97:e8:81:cd:f9:ce:
c8:f0:2f:56:67:dc:a7:6c:d0:e1:00:e6:80:30:fe:
0a:40:df:8d:59:5f:9e:e2:79:7d:c8:8f:42:f2:b3:
9b:5c:26:e0:3e:c9:a8:d8:42:f8:85:26:0c:2a:cf:
79:fe:7f:7e:d9:09:19:39:40:a6:69:94:b9:18:e9:
85:c5:c0:2b:69:40:eb:68:e3:d1:b4:b1:c6:f7:ff:
0c:82:51:ed:c6:3c:ac:e1:c8:da:96:be:d7:7a:ff:
dc:7c:36:f3:95:2a:88:ca:43:37:14:60:27:72:f0:
b3:0c:b6:42:fd:d1:3b:ea:93:8b:b0:89:b0:6f:5e:
b6:90:ca:11:99:1e:d2:68:e4:2a:7d:51:70:0a:09:
21:37:62:1d:72:65:3c:9f:77:06:6a:91:0d:8e:f9:
c6:72:4d:5c:b6:53:1c:78:e0:6f:40:56:04:fc:2b:
13:58:b8:53:a9:11:14:5e:54:11:0e:5d:70:c5:8e:
fd:54:5e:4a:22:00:84:61:38:3a:57:de:fa:bc:eb:
98:ac:18:3b:e1:e1:4c:a7:d1:6f:0e:ed:bb:98:36:
66:c0:98:3a:1b:b2:c5:30:52:5f:1b:b9:89:cf:bd:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:02:AB:9B:A2:08:A8:5F:75:EC:74:83:6C:89:6A:11:8D:2A:88
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LUACq5uiCKhfdex0g2yJahGNKog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.86.0/24
Signature Algorithm: sha256WithRSAEncryption
71:22:dd:47:84:ad:95:8b:cf:ee:94:db:43:4d:ed:53:f6:89:
68:f5:95:e1:29:fe:fe:e6:88:c8:0f:30:21:9d:cb:14:02:be:
84:e4:72:40:37:28:32:42:63:cd:46:2b:56:63:d4:69:fd:73:
e1:40:21:89:72:48:a0:a9:0e:de:f7:a5:7e:7f:31:76:1b:f8:
df:ad:87:aa:47:33:8a:95:b6:48:f9:d8:cb:4f:e6:45:47:61:
c4:47:cc:4a:12:c9:7a:e6:9d:d1:0a:11:42:e3:3c:ac:97:ee:
cb:6d:83:0b:85:ce:81:d4:27:6e:dd:da:2f:46:7d:1a:ac:19:
5a:4b:dd:06:2d:e3:23:ab:f3:5f:11:b5:d5:13:d7:6f:c0:d3:
f1:e5:2a:a7:fe:2a:f9:cf:e7:36:33:17:06:66:ad:c1:ff:d0:
47:b7:c2:52:1b:88:5d:8f:90:11:e5:9a:ac:0b:88:17:0b:13:
4f:ba:b5:8a:d4:07:3c:a2:bc:4e:d8:46:1d:1c:7c:a9:19:ce:
d9:f7:c6:9a:ba:2f:0f:03:ef:2d:a8:bb:8c:64:ef:af:4e:0f:
06:48:d5:ed:0b:c9:25:dd:53:e0:d0:34:ea:8f:33:a1:bc:a7:
6f:fc:fd:84:ef:db:4c:b6:06:77:11:85:08:c0:24:d8:73:a4:
bc:14:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:30:49 2024 by rpki-client on console-fra.rpki-client.org