Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/Li9LwUmPLwA_YdOP-LeMw2W7fXM.roa
File: Li9LwUmPLwA_YdOP-LeMw2W7fXM.roa (raw, json)
Hash identifier: POK31mZXVCZaYah39xpK6cUu1kpD5AwJ3pPRe15pwWs=
Subject key identifier: 2E:2F:4B:C1:49:8F:2F:00:3F:61:D3:8F:F8:B7:8C:C3:65:BB:7D:73
Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial: 018CC492F51DCBE25F45F2E4D27B8697818A
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/Li9LwUmPLwA_YdOP-LeMw2W7fXM.roa
Signing time: Mon 01 Jan 2024 10:30:14 +0000
ROA not before: Mon 01 Jan 2024 10:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208857
IP address blocks: 185.44.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f5:1d:cb:e2:5f:45:f2:e4:d2:7b:86:97:81:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
Validity
Not Before: Jan 1 10:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e2f4bc1498f2f003f61d38ff8b78cc365bb7d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:76:2a:7d:b8:f4:5a:1a:95:dd:62:72:0f:
ff:c3:e5:3a:59:81:eb:3b:6e:7d:af:90:56:99:30:
9c:e6:25:bd:b1:c5:5d:77:ea:fe:83:30:81:42:8d:
35:09:8d:51:c5:b8:51:e6:aa:c0:91:17:36:24:c1:
c8:3f:43:ec:f3:9f:d4:08:b0:9a:d6:48:f7:75:f0:
18:f3:ca:d1:d7:94:97:31:69:46:c1:63:69:0f:f7:
39:af:44:76:7a:1e:33:dd:5f:7a:bf:fe:1b:d9:d1:
2b:39:a6:de:d1:21:58:4d:5f:f6:6a:e8:21:b2:18:
56:80:bc:51:40:41:ba:2c:6a:d0:47:b7:af:6c:90:
da:30:e0:07:ca:c9:21:fd:00:9f:73:37:aa:d2:8d:
84:0d:a6:cd:40:c5:6c:c4:45:55:19:d1:14:09:48:
d5:0c:80:5f:b7:96:0f:9d:e2:48:27:45:a3:04:55:
9c:8f:0c:1d:bc:09:46:70:69:54:0d:8f:3d:42:d1:
d6:a1:e0:8a:ac:8a:9b:9c:1a:bd:df:9b:5a:eb:5b:
f8:87:67:07:5d:9d:40:98:69:99:20:a8:07:58:06:
5a:1c:29:4d:56:49:cf:14:d7:98:e5:4d:95:d6:bb:
a2:9b:2a:b5:5d:ab:07:e6:8a:02:4a:01:f1:51:9a:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:4B:C1:49:8F:2F:00:3F:61:D3:8F:F8:B7:8C:C3:65:BB:7D:73
X509v3 Authority Key Identifier:
keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/Li9LwUmPLwA_YdOP-LeMw2W7fXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.208.0/23
Signature Algorithm: sha256WithRSAEncryption
98:b4:2f:5e:6a:b1:1b:16:b0:fb:f6:43:8a:ba:a6:56:56:1c:
0a:df:1b:1c:b3:38:4a:b5:78:d1:9a:4d:35:19:d9:7f:35:41:
0f:71:16:fd:eb:37:e6:8a:38:4d:59:b7:d6:cd:c6:e6:ea:2d:
a1:86:b0:eb:d0:66:25:f4:45:92:ae:83:c0:11:39:c7:c9:dd:
fb:4c:6c:fa:82:fa:00:a1:5a:f0:95:c2:bf:0c:7a:e6:17:32:
ae:4c:dc:e6:c6:59:74:e4:34:87:f1:2d:01:c9:43:ee:74:16:
e9:e8:bf:58:55:88:99:66:64:49:f0:11:a9:a6:0f:d2:0a:28:
69:b3:94:bd:10:f0:3f:e5:39:4c:c5:d7:62:f3:33:0c:49:d3:
bf:b7:e2:b9:0c:6c:f2:b6:78:3e:a7:70:81:36:73:da:e4:a8:
0d:8e:36:f6:86:81:0f:33:d5:c9:57:d9:1e:40:5f:0b:3f:04:
ba:7a:03:b9:23:99:9a:0b:3d:54:9b:fb:92:8b:8a:37:72:65:
de:4a:82:26:24:6a:b7:73:50:fa:b6:b8:e3:bd:e6:01:aa:95:
2e:2d:2d:66:36:20:cc:70:d4:68:14:94:ec:18:89:06:15:60:
7d:b2:b0:c3:1c:3f:2f:93:b1:08:9f:76:08:18:bd:3c:1c:cb:
86:5b:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:55 2024 by rpki-client on console-ams.rpki-client.org