Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/L_i5f5cBS7COsdRE9ZitvTntJ7s.roa
File: L_i5f5cBS7COsdRE9ZitvTntJ7s.roa (raw, json)
Hash identifier: aJZj2slcNn6GUmKc2z30cLMJC3cjlvdiQkT9UD/zd4s=
Subject key identifier: 2F:F8:B9:7F:97:01:4B:B0:8E:B1:D4:44:F5:98:AD:BD:39:ED:27:BB
Certificate issuer: /CN=8ebed6dc9e97ff18ee982721d8f9257756266121
Certificate serial: 018CC8011BE50D579896D44AE4DCCEB98D62
Authority key identifier: 8E:BE:D6:DC:9E:97:FF:18:EE:98:27:21:D8:F9:25:77:56:26:61:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/L_i5f5cBS7COsdRE9ZitvTntJ7s.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207915
IP address blocks: 195.28.178.0/23 maxlen: 23
195.34.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1b:e5:0d:57:98:96:d4:4a:e4:dc:ce:b9:8d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebed6dc9e97ff18ee982721d8f9257756266121
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff8b97f97014bb08eb1d444f598adbd39ed27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:98:42:cb:5c:ac:1e:c7:cf:c2:62:07:76:
9c:64:98:84:a2:57:84:65:03:dd:1b:80:a6:ef:5b:
6d:6c:e2:70:8e:2d:a8:17:8b:61:5e:fa:f5:5d:33:
a1:63:b2:d4:8f:ca:d4:92:5a:55:6c:23:94:dd:20:
64:ad:c3:e4:e9:3e:5a:80:28:89:7d:d3:7d:1e:2b:
cf:f0:73:c5:13:47:5a:d2:20:16:f2:90:e5:43:bb:
f5:16:f8:5d:ef:0b:9e:3b:ca:9c:42:c9:da:ec:8b:
a6:d7:ba:77:50:2a:58:3f:9c:d1:bb:7c:e3:01:38:
43:da:c1:8b:a7:86:70:60:4b:6b:29:83:2e:ba:12:
b9:42:17:bb:b2:c5:e6:b1:2d:0b:c4:5f:fa:e4:f9:
83:d0:f6:3d:7c:bc:78:d4:8c:16:b4:2b:72:a5:cb:
5f:d1:b6:bc:3d:d6:0d:b7:82:c7:f0:33:ed:40:23:
7a:3e:46:cd:b8:df:42:78:d1:27:6d:fe:4b:d7:7d:
b3:0a:06:00:44:9b:b0:4d:de:06:fc:ae:32:11:94:
f1:e3:51:7e:dc:67:0b:72:09:ae:f8:51:2d:de:c0:
e2:7e:13:9f:0b:4e:9e:2d:00:17:bf:14:d1:06:48:
55:9e:1c:d6:89:02:4c:5e:01:d6:a7:8f:0c:64:41:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:B9:7F:97:01:4B:B0:8E:B1:D4:44:F5:98:AD:BD:39:ED:27:BB
X509v3 Authority Key Identifier:
keyid:8E:BE:D6:DC:9E:97:FF:18:EE:98:27:21:D8:F9:25:77:56:26:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/L_i5f5cBS7COsdRE9ZitvTntJ7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.178.0/23
195.34.66.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:e0:ea:7f:06:d3:8d:8e:36:01:1b:eb:c3:25:49:62:66:b9:
c8:9f:1e:c8:1c:eb:3b:43:8a:6d:45:fb:11:20:cf:c5:11:e2:
52:f2:7e:9b:7d:dd:06:e6:bb:43:df:21:92:d4:c5:b1:5e:2a:
e8:ba:23:35:1d:d3:ef:14:67:69:5d:d0:7e:14:ee:5d:d8:3e:
79:44:0c:7a:a4:3f:e1:b2:74:5e:60:55:57:41:a8:c9:79:89:
fe:1f:15:23:90:6d:e3:f9:fd:16:58:e7:d0:fb:f1:5f:6b:d9:
24:ed:c4:19:e4:12:6c:32:c3:fe:2e:1e:20:b9:04:37:a3:7b:
e0:66:62:b6:b1:b0:ce:89:f7:dd:19:9f:63:36:68:ba:fb:1c:
35:c9:91:ae:d4:e5:3f:39:3e:0d:c8:b9:f4:44:8f:ff:df:73:
bb:e2:7d:2b:5b:89:7a:1a:2d:3d:2e:aa:da:cb:c4:ad:e2:8c:
b5:4d:af:9c:28:c0:35:b0:d6:a6:67:44:cb:e0:9f:b1:60:ef:
bd:18:93:82:24:de:26:dc:a9:31:65:3c:58:7f:00:e9:2d:04:
94:5e:77:1d:11:53:5a:72:3d:d7:6d:da:5b:25:5c:96:5d:14:
1d:7e:19:9c:2c:4b:f2:22:4b:cb:49:c5:c3:33:bb:f5:14:69:
20:2f:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:43:13 2024 by rpki-client on console-ams.rpki-client.org