Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/LjAWhyfhxlHLXm8OuQs3LAEygwo.roa
File: LjAWhyfhxlHLXm8OuQs3LAEygwo.roa (raw, json)
Hash identifier: JzKjxyJKWpD4LzjtNoLRDa8eava77G1Gs86LEO0f0/A=
Subject key identifier: 2E:30:16:87:27:E1:C6:51:CB:5E:6F:0E:B9:0B:37:2C:01:32:83:0A
Certificate issuer: /CN=e92574d716cbbdbf724d706c1117970f667b237e
Certificate serial: 018CF9FDAD5AD9A297E502D9A8789C9DFF3C
Authority key identifier: E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/LjAWhyfhxlHLXm8OuQs3LAEygwo.roa
Signing time: Thu 11 Jan 2024 19:26:40 +0000
ROA not before: Thu 11 Jan 2024 19:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203934
IP address blocks: 45.90.188.0/22 maxlen: 22
185.118.158.0/23 maxlen: 23
185.118.156.0/23 maxlen: 23
2a03:6320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:fd:ad:5a:d9:a2:97:e5:02:d9:a8:78:9c:9d:ff:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92574d716cbbdbf724d706c1117970f667b237e
Validity
Not Before: Jan 11 19:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e30168727e1c651cb5e6f0eb90b372c0132830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:70:e4:bf:fa:bd:33:a4:43:1c:00:9f:b2:
e9:90:da:11:06:77:58:31:60:cd:cd:35:5e:12:39:
91:fa:75:79:fe:5e:e8:f3:d2:28:d2:05:2b:72:1d:
ac:2d:bf:10:74:c1:13:6f:86:36:6f:3a:eb:45:bf:
32:71:fe:1e:5e:15:17:2a:40:76:84:10:76:7a:dc:
df:d2:30:83:8d:fc:69:47:b9:59:7d:89:90:26:e3:
65:10:4c:ee:8b:df:90:72:cc:8d:b8:52:2c:16:77:
a1:0b:77:5b:76:7f:e9:8a:56:b0:08:08:e5:4d:aa:
00:8e:dc:8d:ef:72:5e:45:16:3a:e0:36:31:17:da:
4a:b6:a4:cd:99:13:3d:7e:62:98:92:aa:fc:b9:5b:
1e:e6:f9:6d:69:48:2b:52:b8:43:cb:87:cf:d0:a1:
3f:f4:95:9f:c8:33:23:c5:52:d4:9d:6f:1b:38:46:
bd:c3:e1:39:2e:d2:56:30:ac:fc:9d:3b:fe:24:a7:
1b:1a:4b:8b:f7:6a:e8:b2:93:80:22:a0:f8:25:10:
f8:d1:34:11:fb:a0:2b:d7:2f:d2:bc:70:b1:3b:ca:
53:20:2e:6a:47:39:b1:43:5e:ec:f0:7b:3a:e2:0b:
4b:54:8e:6f:9b:57:6d:06:d0:90:97:ab:28:4e:9e:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:16:87:27:E1:C6:51:CB:5E:6F:0E:B9:0B:37:2C:01:32:83:0A
X509v3 Authority Key Identifier:
keyid:E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/LjAWhyfhxlHLXm8OuQs3LAEygwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.188.0/22
185.118.156.0/22
IPv6:
2a03:6320::/32
Signature Algorithm: sha256WithRSAEncryption
21:e9:cb:be:6f:c4:bf:e1:e9:4b:86:33:7d:f9:1c:21:77:e6:
75:83:ef:7f:ab:c0:a8:1c:2a:3d:b4:c3:40:f5:39:15:7e:a3:
4e:b5:14:e3:fb:43:ba:ae:69:46:30:c0:6f:da:da:0c:01:67:
f5:9c:bc:7d:27:c1:58:cf:e6:a2:b9:e9:e5:20:4f:1e:d9:2d:
70:da:3d:52:76:ae:b6:dd:6d:dc:9b:a6:84:98:dc:ce:34:72:
91:22:cd:2d:6e:e8:fc:8c:6c:3b:ec:ee:15:9f:ca:c0:8e:78:
7e:59:aa:82:57:2c:8b:61:f6:e1:c1:e5:60:61:ac:99:50:15:
ae:df:60:68:03:99:d6:43:25:c3:0f:78:85:7f:6f:b8:1b:38:
23:da:47:5e:3f:9a:ac:40:cd:e3:14:d1:c9:1a:50:04:da:db:
24:ae:b0:39:50:79:4c:51:9c:6c:8b:b5:4c:6a:64:d5:28:41:
67:41:e1:62:08:8f:c0:d1:04:83:69:b8:a8:12:30:46:bc:ff:
93:19:56:e3:95:3d:b7:e2:9f:b3:b1:90:1c:64:df:8a:d0:b6:
3c:d7:57:82:aa:98:50:15:98:98:96:05:d1:c9:6b:b5:c3:84:
8d:5d:bb:92:b6:2d:85:fe:76:e6:9c:5f:19:54:44:b7:4a:3e:
53:f5:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:44:55 2024 by rpki-client on console-ams.rpki-client.org