Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lHLUHsvwcpoRxMrCMvyWZ-sc3S0.roa
File: lHLUHsvwcpoRxMrCMvyWZ-sc3S0.roa (raw, json)
Hash identifier: HM0XeeGo0VlpXCNOJTgG5MUzu3KVXPu7SFjANXxOr9U=
Subject key identifier: 94:72:D4:1E:CB:F0:72:9A:11:C4:CA:C2:32:FC:96:67:EB:1C:DD:2D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A8ACC723C375D893997439C9DD2D4
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lHLUHsvwcpoRxMrCMvyWZ-sc3S0.roa
Signing time: Mon 01 Jan 2024 18:30:23 +0000
ROA not before: Mon 01 Jan 2024 18:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208864
IP address blocks: 188.72.68.0/23 maxlen: 23
128.0.68.0/23 maxlen: 23
46.243.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8a:cc:72:3c:37:5d:89:39:97:43:9c:9d:d2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9472d41ecbf0729a11c4cac232fc9667eb1cdd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:6f:76:d6:0c:0d:84:01:dd:4d:0d:b4:07:
bb:37:6d:a7:66:bd:e2:41:db:3b:6f:c7:b3:c6:27:
1a:37:c8:33:9a:66:a6:5b:fa:67:71:b5:0b:a7:93:
64:18:56:98:93:a8:19:c3:2d:0e:d8:9e:b7:47:77:
f0:75:ed:7a:71:00:31:2c:5a:00:e1:11:43:80:81:
d1:b4:b4:7c:ee:40:9e:f6:b6:5c:a0:c5:18:28:4a:
15:8f:78:0f:c5:06:c1:85:c5:7e:f7:46:bd:64:93:
d9:fb:d0:ca:62:16:8c:e7:37:48:91:8f:1c:0e:e5:
1e:11:ed:59:9f:12:e1:40:29:aa:9f:44:76:22:07:
07:9b:55:d2:89:1f:67:56:8b:23:c8:01:52:25:77:
aa:dd:ce:46:e6:ea:27:7c:97:31:a9:2a:1a:1a:23:
6e:43:12:6a:af:59:5e:66:6e:8c:ff:2b:f3:6e:8d:
36:0e:e2:f0:31:c3:98:bf:11:2d:cb:7e:0a:36:63:
df:11:30:8e:c4:60:4e:ff:d9:53:57:f2:e7:8f:8b:
b4:55:83:15:4b:06:7d:4e:e6:74:06:46:d9:da:46:
a8:da:02:b2:36:6a:85:7a:cb:0d:b9:a8:94:70:69:
68:8d:8e:0b:55:e2:d2:10:97:1e:26:7c:34:a5:c5:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:D4:1E:CB:F0:72:9A:11:C4:CA:C2:32:FC:96:67:EB:1C:DD:2D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lHLUHsvwcpoRxMrCMvyWZ-sc3S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.188.0/22
128.0.68.0/23
188.72.68.0/23
Signature Algorithm: sha256WithRSAEncryption
02:08:cb:1a:f3:03:9b:43:15:df:2d:59:dc:5d:d6:07:75:de:
2f:d0:f1:60:e6:b8:c0:7f:39:06:e9:60:23:4e:3d:f7:9e:c3:
2d:49:10:09:9e:b0:e4:92:d6:92:90:7b:2d:c7:62:e8:4c:2b:
e0:02:e1:2f:bf:a7:92:79:00:60:70:1e:72:a0:f4:e3:75:40:
a5:c5:49:bb:51:4b:a1:fb:72:d6:28:38:6c:0a:23:4b:6a:94:
c0:79:d0:6e:e5:30:27:b3:e1:3b:43:58:2f:44:b0:fe:7a:ab:
57:67:83:53:9a:0c:51:1c:b1:8e:81:d4:90:d7:ab:8d:64:3c:
cc:cd:ea:a4:75:a0:98:a7:7f:e8:12:2e:0d:c3:23:61:19:c0:
ac:e6:6c:09:f5:ee:b1:67:11:f6:f5:dc:13:fb:64:0e:f9:35:
dd:18:d8:dc:1b:76:00:69:cc:ea:de:99:67:9d:47:48:e6:0b:
e4:80:6b:ef:48:63:dd:71:95:e2:eb:b6:b6:8e:90:a3:92:7f:
8d:31:0d:4e:95:5e:f9:33:35:d3:b6:fa:48:1f:94:48:31:5c:
f6:34:b7:a2:94:6d:57:62:b1:7f:b5:c9:11:69:c0:7c:47:b5:
f1:55:6f:aa:0f:f1:ea:7d:78:58:e2:a8:43:8d:93:99:5c:cc:
17:fe:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:28:53 2024 by rpki-client on console-ams.rpki-client.org