Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LCqjqzImYtF3LfKSarayZ28FQZw.roa
File: LCqjqzImYtF3LfKSarayZ28FQZw.roa (raw, json)
Hash identifier: aM7YmAujA6RDorSyjELX7/oGKDM41qLvTiUFQB10RRw=
Subject key identifier: 2C:2A:A3:AB:32:26:62:D1:77:2D:F2:92:6A:B6:B2:67:6F:05:41:9C
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 018CC801586308127489776B58ECD2A9CEE8
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LCqjqzImYtF3LfKSarayZ28FQZw.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 193.42.24.0/23 maxlen: 24
193.42.24.0/22 maxlen: 24
193.42.26.0/24 maxlen: 24
2a06:5040:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:58:63:08:12:74:89:77:6b:58:ec:d2:a9:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c2aa3ab322662d1772df2926ab6b2676f05419c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:ac:e8:49:5e:96:48:86:d8:8d:ee:b9:34:
3a:f2:d9:2c:74:7e:12:d3:3f:65:82:58:86:3b:1c:
bc:77:0a:f5:21:e4:4c:57:28:ff:89:86:a2:14:90:
ac:99:63:46:6b:97:2d:1a:8e:0a:fb:90:66:9d:a2:
53:ef:32:52:7f:8c:c6:98:27:a2:54:2b:ee:4c:26:
8e:3c:9c:0f:24:b6:58:ed:f9:cd:3c:e2:2b:23:f9:
9e:af:8a:d7:ed:f3:9b:a0:ec:46:66:cc:bd:d4:7c:
ea:22:ee:65:2a:e8:b7:d3:04:35:6b:d6:97:c3:93:
b0:d5:79:fa:62:80:28:99:b0:b1:c1:4e:d3:fa:fc:
ef:f2:43:fa:7e:b6:40:b2:3a:fd:81:5f:c5:f4:cd:
69:27:4e:1c:f9:d9:a2:54:fa:b4:b4:fd:f8:fb:f2:
48:f1:2d:67:12:25:76:d3:60:64:54:cd:30:74:d3:
01:c9:5a:5e:bc:9a:4b:a6:2f:44:1e:85:cc:d9:68:
1b:e4:22:49:fc:45:3d:52:5b:d8:60:3c:5d:68:d2:
48:a2:12:d4:f0:c4:67:d6:0c:a0:6d:04:5d:20:3e:
ab:3e:a4:e0:d1:5d:67:56:e1:fe:4b:1f:2e:89:48:
f1:91:e6:48:3a:be:a2:77:42:91:08:9c:26:54:23:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:A3:AB:32:26:62:D1:77:2D:F2:92:6A:B6:B2:67:6F:05:41:9C
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LCqjqzImYtF3LfKSarayZ28FQZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.24.0/22
IPv6:
2a06:5040:3::/48
Signature Algorithm: sha256WithRSAEncryption
0a:bc:db:0b:5e:7a:db:1f:08:43:29:4c:dd:c7:41:ea:87:2b:
44:8e:57:6a:29:b6:0b:88:14:10:e1:cb:8d:9d:bc:e2:b1:52:
4f:29:ec:d3:1c:71:6e:fd:21:d6:39:3c:f6:30:39:23:4a:90:
6f:5f:e4:b8:8c:7c:a2:d6:16:cd:81:e2:4f:bb:c9:e9:76:9e:
d0:20:d2:bd:07:8a:65:c9:9c:37:dd:f2:34:3f:c7:cb:7d:4f:
bf:6d:ce:5f:c2:15:40:78:d8:7e:89:33:2b:a2:e2:04:dc:f5:
a4:e8:42:32:6f:34:b0:de:18:01:23:9f:78:3d:a8:e4:5a:5f:
74:40:6b:fd:4f:ef:5b:6a:1d:14:92:49:83:a0:61:1f:30:0d:
22:13:fd:3d:e0:e3:2c:5c:ad:bc:bb:33:89:f2:f1:6a:e3:85:
83:08:22:99:06:a9:c0:9e:bc:2d:ec:8e:3b:84:b1:0e:4a:73:
d2:09:bc:c6:5c:9a:d2:95:bc:15:ec:4c:0d:76:bf:02:05:9b:
9c:64:b5:7c:6b:55:a6:9f:f4:4a:70:81:f2:78:94:ee:4e:32:
0c:b2:f8:a7:98:00:ae:8a:76:4c:69:0f:31:cc:3d:40:e8:76:
8e:03:07:09:63:07:2d:f8:8b:3e:ae:98:89:9d:7d:1e:89:3b:
aa:6b:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:40:48 2024 by rpki-client on console-ams.rpki-client.org