Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/Lf5e_yPBVMy3Y78u4upI6YlQOjI.roa
File: Lf5e_yPBVMy3Y78u4upI6YlQOjI.roa (raw, json)
Hash identifier: WAuxhGDHa1RInSiEwtHlDctWx0lx27FsqDb4QoH0Scg=
Subject key identifier: 2D:FE:5E:FF:23:C1:54:CC:B7:63:BF:2E:E2:EA:48:E9:89:50:3A:32
Certificate issuer: /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial: 018CC26D6D30B10BF156E6E41DEA8F0217F2
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/Lf5e_yPBVMy3Y78u4upI6YlQOjI.roa
Signing time: Mon 01 Jan 2024 00:30:00 +0000
ROA not before: Mon 01 Jan 2024 00:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207231
IP address blocks: 185.25.95.0/24 maxlen: 24
2a0c:85c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6d:30:b1:0b:f1:56:e6:e4:1d:ea:8f:02:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dfe5eff23c154ccb763bf2ee2ea48e989503a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:9d:c3:8f:c5:fb:46:2a:c0:58:59:d5:35:
4e:5b:4e:e3:9f:16:0b:c4:28:93:35:37:86:0d:2d:
0d:5c:c9:d2:3b:4c:16:de:e3:99:66:9a:93:28:6d:
e6:80:ad:51:10:9e:72:79:d7:fb:f8:c9:61:dd:60:
d6:96:3d:31:56:ee:ac:2e:1f:22:04:dc:a4:95:cd:
48:11:c9:1e:2d:a7:6d:f8:f9:34:3a:9e:cb:ff:7d:
e5:52:b3:ae:28:cd:eb:b3:d4:d0:b8:dc:8a:b6:8e:
81:2f:2a:e0:9d:80:82:6f:bc:5d:e6:dc:67:45:10:
1c:a3:04:de:d6:5c:07:61:66:3c:9c:14:01:79:45:
ef:4a:5c:91:f7:92:22:9c:07:35:87:88:7c:5e:f9:
8b:70:10:ba:45:be:4c:14:b9:74:63:ce:d9:a2:b0:
23:81:9a:6f:3e:7a:49:b4:92:4d:ec:fb:46:27:d2:
57:a5:95:25:46:a5:a1:28:bc:96:68:10:ed:f6:7c:
99:ce:9d:c4:ee:e4:13:51:3b:dd:d4:41:1a:ec:ab:
c5:fc:02:3c:c4:c0:06:4e:7b:78:bd:c4:05:d5:65:
6a:3b:bd:37:40:03:bc:70:1f:8f:4c:f4:f1:f4:73:
28:fc:10:b7:f3:fc:db:8f:56:af:1b:af:2e:ab:c9:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:5E:FF:23:C1:54:CC:B7:63:BF:2E:E2:EA:48:E9:89:50:3A:32
X509v3 Authority Key Identifier:
keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/Lf5e_yPBVMy3Y78u4upI6YlQOjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.95.0/24
IPv6:
2a0c:85c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:db:cd:3b:b5:ef:c2:4e:b8:5e:39:6a:f0:ed:c7:19:9b:b2:
62:b9:7d:c0:2e:c4:5b:28:a1:1d:f3:5a:dc:ec:da:75:8a:fb:
55:d0:59:df:b9:a3:4c:4c:1f:02:3d:da:f7:70:2f:dd:92:2b:
23:93:f6:56:0a:55:47:05:55:90:6d:f4:cd:0d:80:1c:04:55:
e4:38:10:1f:96:9a:86:0b:fa:47:6b:4d:4c:bb:c7:24:17:59:
57:42:66:df:02:08:ee:a6:b8:6e:e8:5b:e7:e5:6e:68:ea:e0:
95:1b:dc:a3:f6:b5:fc:ca:e2:d4:e8:63:13:9e:03:88:bf:fd:
aa:f6:86:65:dc:ab:d6:33:33:37:d7:2b:8e:24:75:c1:f2:3a:
e1:f0:6f:9a:8a:dc:35:c8:d6:02:44:fc:68:02:de:08:44:93:
b1:23:64:91:d3:b0:ee:f2:30:06:7e:84:82:94:60:fd:07:58:
b6:2f:8f:91:28:fc:df:56:77:df:45:1e:26:46:fb:a9:83:e4:
f6:4f:c1:45:e6:16:13:fd:73:04:2d:b9:59:b7:ef:60:26:93:
78:28:2c:46:73:9c:fe:57:75:d6:af:b6:1c:92:aa:3e:43:b9:
8b:40:49:20:49:6a:4b:a2:54:2d:06:ef:e8:1c:a9:c4:ac:0e:
82:1d:57:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:51:14 2024 by rpki-client on console-ams.rpki-client.org