Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/LhcU6q6XSrL7olgf4Tkv5MGrYSQ.roa
File: LhcU6q6XSrL7olgf4Tkv5MGrYSQ.roa (raw, json)
Hash identifier: RL3SNKZIDwBBKGtzQ1FbVKbhm6WJYDutbug8yuOuKxE=
Subject key identifier: 2E:17:14:EA:AE:97:4A:B2:FB:A2:58:1F:E1:39:2F:E4:C1:AB:61:24
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019350474BBEB32D3E5C121A5DC52CA1E79E
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/LhcU6q6XSrL7olgf4Tkv5MGrYSQ.roa
Signing time: Thu 21 Nov 2024 19:51:09 +0000
ROA not before: Thu 21 Nov 2024 19:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 5.133.124.0/22 maxlen: 22
31.40.196.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:47:4b:be:b3:2d:3e:5c:12:1a:5d:c5:2c:a1:e7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 21 19:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e1714eaae974ab2fba2581fe1392fe4c1ab6124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:d4:f4:19:16:84:a3:10:db:b0:81:7d:e3:
5d:38:3c:f6:af:23:6a:f6:a2:18:bb:64:c5:24:aa:
72:b8:61:54:6d:0c:f5:0b:9c:e4:c6:4a:58:4f:8a:
6a:ce:3e:e0:6e:2e:4a:37:b4:05:af:5a:5a:b5:67:
c8:b4:95:a3:0f:3a:2e:b2:0b:0f:63:d5:7a:f0:91:
0a:65:7a:80:c9:af:d3:fd:c4:d2:a2:b0:d4:42:26:
d4:08:5f:fa:40:62:66:5a:00:43:c7:12:b1:87:8f:
10:59:75:d1:b0:d5:01:3c:bd:81:bf:1f:5b:3a:52:
49:6c:c3:f1:86:d1:9c:4c:f8:e3:0d:3c:7f:b5:23:
a8:20:5e:16:f8:27:5e:4b:96:4c:8e:73:a8:3d:1b:
09:17:17:17:21:5f:e9:57:d4:3f:7a:3b:a6:4f:27:
c6:0e:49:6d:ba:8d:dc:d5:35:01:bc:dd:36:07:d1:
e1:48:2d:74:62:9b:41:00:cd:ba:60:39:29:36:c3:
50:54:fd:f9:11:2b:4d:48:fe:f7:5f:c5:6e:77:12:
16:99:a1:2d:b0:ea:42:a2:06:60:6c:97:47:e6:b8:
6a:38:e8:b2:da:ee:54:96:c0:25:0d:15:a5:bc:98:
6e:17:41:84:73:13:37:1c:ae:a1:76:76:38:dc:54:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:14:EA:AE:97:4A:B2:FB:A2:58:1F:E1:39:2F:E4:C1:AB:61:24
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/LhcU6q6XSrL7olgf4Tkv5MGrYSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
31.40.196.0/22
83.171.244.0/22
84.54.0.0/22
85.8.144.0/22
139.28.212.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
16:b5:aa:6f:9b:d3:0f:ff:ac:3e:e8:71:a4:73:6c:8b:78:f8:
60:22:27:5b:0e:e0:84:c1:7e:5c:42:d8:b9:ce:d5:e3:ff:13:
9b:08:f1:c7:b8:3c:45:4b:48:a1:6e:01:d2:49:b8:1b:bd:50:
b3:56:43:79:19:50:a5:de:0d:bb:4a:61:0a:66:34:66:29:79:
e3:1c:de:96:80:78:6d:a2:84:f7:a4:4f:99:d5:d9:f1:5b:52:
db:2d:aa:89:5d:f5:ec:e4:55:6c:eb:5a:f2:83:85:ba:8d:db:
ef:c9:0c:76:49:06:2c:90:4b:b3:5c:4c:ab:b1:b4:04:11:ba:
26:8a:e7:da:4e:e8:a8:5e:24:3b:34:de:69:6f:70:e6:9e:4d:
97:0f:91:75:ee:9c:16:7a:11:53:fb:e6:bc:55:f5:cf:fc:3e:
78:79:e0:32:20:29:12:1c:a5:b5:59:b3:48:6d:b9:99:fd:d2:
d7:8f:e4:d0:fb:09:4b:2e:ee:e2:d7:51:e0:9f:3e:c1:8c:78:
3f:29:76:95:ac:0f:a7:db:07:59:52:f4:74:42:66:c9:f7:2a:
35:c5:d8:80:b0:28:89:3c:84:15:d4:22:d6:72:12:fa:fd:bf:
f2:50:e5:cf:f4:39:db:58:3c:aa:e5:c0:1b:5f:95:40:56:fc:
50:ee:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:35:04 2024 by rpki-client on console-ams.rpki-client.org