Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/lhsdwEfoDvs1fjVGF8b2AidJik4.roa
File: lhsdwEfoDvs1fjVGF8b2AidJik4.roa (raw, json)
Hash identifier: vi/+4TMbQHrVy1VdjS3z0nNRbfHFPEbA+99I/N5SLjo=
Subject key identifier: 96:1B:1D:C0:47:E8:0E:FB:35:7E:35:46:17:C6:F6:02:27:49:8A:4E
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 018DC7A81E0D9B069656EDEC91F4AA1EEC15
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/lhsdwEfoDvs1fjVGF8b2AidJik4.roa
Signing time: Tue 20 Feb 2024 17:55:00 +0000
ROA not before: Tue 20 Feb 2024 17:55:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.0.0/18 maxlen: 18
83.132.64.0/18 maxlen: 18
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.0.0/16 maxlen: 16
88.157.134.0/24 maxlen: 24
88.157.157.0/24 maxlen: 24
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
193.126.0.0/16 maxlen: 16
193.126.120.0/24 maxlen: 24
194.79.64.0/19 maxlen: 19
194.79.69.0/24 maxlen: 24
194.79.86.0/24 maxlen: 24
195.23.0.0/16 maxlen: 16
195.23.13.0/24 maxlen: 24
195.23.37.0/24 maxlen: 24
195.23.255.0/24 maxlen: 24
212.0.160.0/19 maxlen: 19
212.113.160.0/19 maxlen: 19
212.113.173.0/24 maxlen: 24
212.113.183.0/24 maxlen: 24
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
213.205.64.0/19 maxlen: 19
213.205.64.0/24 maxlen: 24
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:a8:1e:0d:9b:06:96:56:ed:ec:91:f4:aa:1e:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Feb 20 17:55:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=961b1dc047e80efb357e354617c6f60227498a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:d3:c8:1f:e6:bb:2c:9d:5b:90:ad:e8:7e:
92:11:3d:5f:28:d9:25:ff:48:2c:ff:82:5b:b8:ef:
a4:ce:12:dc:a4:32:5a:fb:dc:00:df:2a:29:a2:32:
61:a5:b7:5a:83:6c:10:bc:d2:f1:87:28:a1:bd:6c:
f1:9d:50:44:b6:b4:26:5b:21:54:84:4b:16:1e:e3:
c6:28:d1:71:47:be:6d:83:d0:7a:37:a7:4a:26:e2:
1f:4b:2d:fb:89:c4:ab:ee:72:66:67:35:f1:d2:4d:
e5:0f:0f:d3:45:83:7c:ce:a1:fd:7c:05:6f:40:77:
d6:52:ec:c6:fb:d8:86:34:a0:98:f8:fd:a7:56:fc:
b9:7e:11:6d:48:2b:2b:43:d5:38:be:98:5e:75:51:
32:79:04:32:de:b9:dc:ce:5f:56:a5:66:27:e6:b6:
5f:65:ab:e3:7e:b8:87:76:3d:ea:42:40:1c:60:2b:
18:8a:bc:ff:82:db:86:d0:70:7d:06:c3:cc:87:5f:
b1:d3:04:e6:38:ff:73:31:d8:59:bb:ff:d9:4c:40:
79:56:c6:71:07:87:6f:63:c6:13:20:ec:17:72:f6:
95:81:0f:d7:75:99:11:d1:33:4c:bd:ef:34:75:fa:
89:f9:8f:78:af:22:31:45:a4:b8:33:5b:01:1c:14:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:1D:C0:47:E8:0E:FB:35:7E:35:46:17:C6:F6:02:27:49:8A:4E
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/lhsdwEfoDvs1fjVGF8b2AidJik4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.0.0/16
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
212.113.160.0/19
213.22.0.0/16
213.205.64.0/19
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:d6:e7:48:d0:74:53:b6:59:39:2c:a3:2f:15:0b:91:34:48:
11:18:4b:7e:2f:ab:f7:e6:43:8c:d0:d8:95:84:f5:ad:db:03:
3b:86:66:be:da:a2:45:70:5f:e6:a8:ea:96:6e:ea:51:45:53:
61:f2:3b:55:df:cb:bc:03:38:81:12:de:28:9b:68:b9:2f:e8:
e5:7d:16:b0:7a:d7:b1:fd:59:c1:31:6f:df:ae:e2:6c:f3:d5:
87:36:98:df:5d:18:4b:dc:45:2c:d9:28:73:5d:f0:74:b7:3d:
7c:00:bd:e8:82:1e:b3:f8:c9:fd:a4:13:3d:eb:d4:79:74:3c:
03:d9:39:09:72:72:dc:99:59:2f:91:4b:c9:e9:83:c4:60:76:
b2:aa:e5:a3:83:d9:19:d9:7b:42:6e:3f:43:ef:ee:63:02:2f:
43:50:b6:2d:09:ba:45:74:80:43:4b:7f:c3:52:ec:2e:72:cf:
52:64:56:a7:c9:46:e6:90:9e:04:94:81:bd:44:4d:9e:d3:0b:
03:d9:7c:2f:a4:62:ad:a5:8e:fb:8c:c0:2d:3a:9d:f1:57:11:
7d:77:40:bd:4f:d5:af:98:6b:69:a1:73:8a:8f:29:0a:e3:c4:
af:54:d5:60:20:08:f2:2b:29:a7:df:81:69:97:12:73:ad:82:
a3:0d:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 05:49:30 2024 by rpki-client on console-ams.rpki-client.org