Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LXnMAEbUR7i9XVsSFDvcgFvKO5E.roa
File: LXnMAEbUR7i9XVsSFDvcgFvKO5E.roa (raw, json)
Hash identifier: SzOAamL4WIYgCw2NLi7J6mf1tPskOJ1NGhfGMer/pp4=
Subject key identifier: 2D:79:CC:00:46:D4:47:B8:BD:5D:5B:12:14:3B:DC:80:5B:CA:3B:91
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A79B1556C986E035BE1EB54CFB53A
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LXnMAEbUR7i9XVsSFDvcgFvKO5E.roa
Signing time: Mon 01 Jan 2024 18:30:18 +0000
ROA not before: Mon 01 Jan 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56911
IP address blocks: 46.243.132.0/23 maxlen: 23
46.243.128.0/22 maxlen: 22
46.243.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:79:b1:55:6c:98:6e:03:5b:e1:eb:54:cf:b5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d79cc0046d447b8bd5d5b12143bdc805bca3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:d0:44:2d:65:04:ac:af:81:6c:67:2e:bf:
fc:41:73:74:be:1e:43:00:34:f6:03:1e:cd:37:f0:
cb:5e:2f:f8:20:30:93:af:cc:a2:8d:e1:21:ab:2a:
bd:73:da:f8:26:fa:bc:b3:74:c0:58:08:e8:ca:ed:
f8:b5:90:09:6c:b4:aa:2e:35:d5:92:45:6d:25:71:
25:06:1e:65:26:8d:33:c6:59:69:0d:0f:36:fc:82:
19:f6:7f:19:b3:47:28:2f:bc:38:7f:ad:cf:1e:89:
30:3b:b7:81:8e:62:8f:9a:21:23:16:5e:d6:ae:26:
90:93:5f:ec:30:0a:7d:65:30:c0:e7:ce:08:0b:17:
5f:5d:6a:3c:85:0c:2b:68:b5:1e:f0:ec:76:6f:c8:
cd:aa:d0:5d:d8:f9:02:9b:50:31:a1:a3:49:2f:b9:
28:16:46:06:bd:37:39:0e:88:c0:f6:ce:91:f7:fd:
8b:52:05:14:fa:0c:f5:e4:8b:d1:56:e4:17:23:21:
41:54:b3:dc:a2:1d:db:17:17:3f:d7:b1:64:33:c0:
a7:63:39:cf:e7:9f:2a:8c:62:cc:2d:c8:b4:8c:02:
65:b7:c7:89:3a:2c:7c:aa:92:a9:dd:44:e0:a8:32:
13:6f:23:ff:67:da:58:de:47:e5:2a:cb:08:6c:21:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:CC:00:46:D4:47:B8:BD:5D:5B:12:14:3B:DC:80:5B:CA:3B:91
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LXnMAEbUR7i9XVsSFDvcgFvKO5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.128.0/21
Signature Algorithm: sha256WithRSAEncryption
63:95:c7:7e:55:ce:d6:59:34:de:97:51:11:59:7f:b9:f0:d6:
68:36:54:88:ec:4e:04:01:c6:c5:e0:db:f3:da:0b:57:c4:9e:
09:29:40:40:d4:41:18:53:24:44:57:70:d5:76:da:25:66:f3:
bd:26:cd:e8:00:61:1c:6c:5e:98:1c:01:d1:08:d3:cf:64:d2:
fb:fb:e2:6c:3c:82:65:50:f9:99:de:94:64:33:cb:6e:cc:e1:
73:b2:82:3c:c7:89:c2:b1:b2:2d:49:9e:ea:ef:c5:d3:96:f1:
99:49:3c:f2:8e:1d:6d:0b:35:12:3e:89:73:62:51:9c:9f:6f:
e4:65:c3:7c:19:95:b3:8e:27:d6:df:d5:35:96:38:2b:3b:33:
a4:d2:69:19:7a:3e:7b:22:47:c2:e5:a2:c8:cc:7c:0a:45:a6:
d9:50:33:e6:c4:58:44:2f:9c:cc:ec:40:3b:48:6b:34:37:a9:
bc:a9:17:e6:8e:0b:e2:fb:43:00:46:f1:5c:fa:3a:bc:c6:fe:
a2:6a:09:5b:58:4f:e2:28:54:8d:40:c8:d5:17:9d:a0:8d:49:
5c:4b:cd:d7:4c:48:9d:c1:d4:30:33:86:9f:16:65:55:52:c1:
0b:aa:e4:a2:48:1c:2e:34:d9:f2:12:6a:fa:f4:6a:df:c8:37:
5d:01:31:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSnmxVWyYbgNb4etUz7U6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjQwMTAxMTgzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDc5Y2MwMDQ2ZDQ0N2I4YmQ1ZDViMTIxNDNiZGM4MDViY2EzYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0PQRC1lBKyvgWxnLr/8QXN0vh5D
ADT2Ax7NN/DLXi/4IDCTr8yijeEhqyq9c9r4Jvq8s3TAWAjoyu34tZAJbLSqLjXV
kkVtJXElBh5lJo0zxllpDQ82/IIZ9n8Zs0coL7w4f63PHokwO7eBjmKPmiEjFl7W
riaQk1/sMAp9ZTDA584ICxdfXWo8hQwraLUe8Ox2b8jNqtBd2PkCm1AxoaNJL7ko
FkYGvTc5DojA9s6R9/2LUgUU+gz15IvRVuQXIyFBVLPcoh3bFxc/17FkM8CnYznP
558qjGLMLci0jAJlt8eJOix8qpKp3UTgqDITbyP/Z9pY3kflKssIbCEDmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC15zABG1Ee4vV1bEhQ73IBbyjuRMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvTFhuTUFFYlVSN2k5WFZzU0ZEdmNnRnZLTzVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLvOAMA0G
CSqGSIb3DQEBCwUAA4IBAQBjlcd+Vc7WWTTel1ERWX+58NZoNlSI7E4EAcbF4Nvz
2gtXxJ4JKUBA1EEYUyREV3DVdtolZvO9Js3oAGEcbF6YHAHRCNPPZNL7++JsPIJl
UPmZ3pRkM8tuzOFzsoI8x4nCsbItSZ7q78XTlvGZSTzyjh1tCzUSPolzYlGcn2/k
ZcN8GZWzjifW39U1ljgrOzOk0mkZej57IkfC5aLIzHwKRabZUDPmxFhEL5zM7EA7
SGs0N6m8qRfmjgvi+0MARvFc+jq8xv6iaglbWE/iKFSNQMjVF52gjUlcS83XTEid
wdQwM4afFmVVUsELquSiSBwuNNnyEmr69GrfyDddATH2
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:20:30 2024 by rpki-client on console-fra.rpki-client.org