Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/LagfjgwyepZCmfKz7ICNNvxuEqs.roa
File: LagfjgwyepZCmfKz7ICNNvxuEqs.roa (raw, json)
Hash identifier: Zj7rCxFnwTlSHgQNtCXMwgTD1CmSeTRb6bYx/oR25Ik=
Subject key identifier: 2D:A8:1F:8E:0C:32:7A:96:42:99:F2:B3:EC:80:8D:36:FC:6E:12:AB
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 018F710D2144E1D7BD1E216A8044D7EAF98A
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/LagfjgwyepZCmfKz7ICNNvxuEqs.roa
Signing time: Mon 13 May 2024 08:23:56 +0000
ROA not before: Mon 13 May 2024 08:23:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/20 maxlen: 20
176.116.160.0/22 maxlen: 22
176.116.164.0/22 maxlen: 22
176.116.168.0/22 maxlen: 22
176.116.172.0/22 maxlen: 22
176.116.177.0/24 maxlen: 24
176.116.178.0/23 maxlen: 23
176.116.180.0/22 maxlen: 22
176.116.180.0/23 maxlen: 23
176.116.182.0/23 maxlen: 23
213.110.224.0/22 maxlen: 22
213.110.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:0d:21:44:e1:d7:bd:1e:21:6a:80:44:d7:ea:f9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: May 13 08:23:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2da81f8e0c327a964299f2b3ec808d36fc6e12ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bc:67:3b:a5:62:ad:e6:c2:7d:fb:59:45:3c:
f6:44:a5:cf:72:64:4b:e4:1c:f7:78:e2:a3:49:3a:
fb:05:10:55:fd:2b:be:42:f9:dc:b3:2d:84:53:a4:
56:bd:ce:49:df:3c:fa:57:e3:bc:91:c6:5e:d1:e1:
f0:07:70:14:ee:4b:b6:4c:11:ad:1e:13:be:d7:0c:
5a:ea:ed:61:a9:a4:69:e6:bb:02:13:67:86:34:80:
10:19:fa:53:fd:0b:c7:b4:61:11:9b:b5:24:f0:64:
2d:bb:9e:97:e2:22:38:d3:09:50:d8:0f:3c:43:60:
ef:14:07:16:4a:45:7b:55:dd:2e:51:13:ad:23:6a:
46:95:07:2f:fe:3e:73:b6:5f:33:74:c6:e1:06:e0:
8b:a4:0f:6d:da:f1:b6:02:b1:38:7d:0b:57:67:39:
8f:fb:4c:a0:cb:cf:05:bf:87:fb:68:a8:cf:c5:6b:
9c:38:75:a0:5e:32:22:43:ae:e9:7e:f5:8d:ff:2a:
0f:9e:7f:25:80:ca:99:f4:ca:d2:23:66:76:0a:90:
77:a2:f1:dc:f7:f3:7c:b9:96:14:df:de:4e:55:63:
a4:27:cf:b2:a9:a7:ef:4f:ec:4f:64:e7:8e:a5:f7:
a4:7e:a7:15:fd:37:ac:78:13:81:0c:0f:3e:67:af:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:1F:8E:0C:32:7A:96:42:99:F2:B3:EC:80:8D:36:FC:6E:12:AB
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/LagfjgwyepZCmfKz7ICNNvxuEqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
176.116.177.0-176.116.183.255
213.110.224.0-213.110.229.255
Signature Algorithm: sha256WithRSAEncryption
41:61:ef:42:c5:72:94:ff:15:f8:84:90:d9:61:e4:67:77:ce:
a3:e8:12:a3:01:92:f1:d6:5e:3f:a0:85:ce:12:62:be:58:69:
62:67:b3:b8:3d:f9:71:27:67:62:20:ea:7a:a2:5e:9a:59:e7:
5e:ac:36:bc:8f:3a:60:4f:e9:d7:a0:13:21:2c:ca:9b:e7:fc:
c0:b6:ff:47:92:98:06:02:6b:d6:d1:04:7a:6b:05:57:94:27:
63:14:98:dc:01:0c:33:96:8a:d5:2f:a8:99:43:1e:2f:b2:91:
ea:7f:08:18:27:0d:ea:c8:b4:c2:05:66:94:a4:1a:03:c6:9b:
81:a4:80:5f:98:00:86:73:a7:a7:7a:7d:ab:d4:25:8f:34:aa:
64:0f:d5:25:1a:72:1a:4c:17:2d:63:20:7e:23:4b:75:82:c6:
51:8c:61:de:16:7c:ef:8f:18:04:f2:2a:9d:b4:23:ce:33:02:
28:d6:de:c4:53:e2:24:06:75:aa:7a:cf:f3:e4:02:1f:b2:d9:
a5:d3:65:85:73:b2:4a:8a:eb:08:48:95:37:31:72:8c:4b:ae:
c6:a3:6c:6d:e6:74:d9:ff:fa:b6:d8:f9:16:46:7f:80:b7:40:
10:1f:8f:77:b7:42:04:f1:ad:03:37:9d:e4:50:37:a4:66:4d:
14:93:d7:d2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9xDSFE4de9HiFqgETX6vmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjE4ZGYwMDZkNTQ4ZDFkODdlZDY0MTk1NTA2NjJkYjZm
YzA2MDYwHhcNMjQwNTEzMDgyMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGE4MWY4ZTBjMzI3YTk2NDI5OWYyYjNlYzgwOGQzNmZjNmUxMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LxnO6VirebCfftZRTz2RKXPcmRL
5Bz3eOKjSTr7BRBV/Su+Qvncsy2EU6RWvc5J3zz6V+O8kcZe0eHwB3AU7ku2TBGt
HhO+1wxa6u1hqaRp5rsCE2eGNIAQGfpT/QvHtGERm7Uk8GQtu56X4iI40wlQ2A88
Q2DvFAcWSkV7Vd0uUROtI2pGlQcv/j5ztl8zdMbhBuCLpA9t2vG2ArE4fQtXZzmP
+0ygy88Fv4f7aKjPxWucOHWgXjIiQ67pfvWN/yoPnn8lgMqZ9MrSI2Z2CpB3ovHc
9/N8uZYU395OVWOkJ8+yqafvT+xPZOeOpfekfqcV/TeseBOBDA8+Z68QbQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC2oH44MMnqWQpnys+yAjTb8bhKrMB8GA1UdIwQY
MBaAFFFhjfAG1UjR2H7WQZVQZi22/AYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEt
MzE3YzJmYjBhMzViLzEvTGFnZmpnd3llcFpDbWZLejdJQ05Odnh1RXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEtMzE3YzJmYjBhMzVi
LzEvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQEsHSgMAwD
BACwdLEDBAOwdLAwDAMEBdVu4AMEAdVu5DANBgkqhkiG9w0BAQsFAAOCAQEAQWHv
QsVylP8V+ISQ2WHkZ3fOo+gSowGS8dZeP6CFzhJivlhpYmezuD35cSdnYiDqeqJe
mlnnXqw2vI86YE/p16ATISzKm+f8wLb/R5KYBgJr1tEEemsFV5QnYxSY3AEMM5aK
1S+omUMeL7KR6n8IGCcN6si0wgVmlKQaA8abgaSAX5gAhnOnp3p9q9QljzSqZA/V
JRpyGkwXLWMgfiNLdYLGUYxh3hZ8748YBPIqnbQjzjMCKNbexFPiJAZ1qnrP8+QC
H7LZpdNlhXOySorrCEiVNzFyjEuuxqNsbeZ02f/6ttj5FkZ/gLdAEB+Pd7dCBPGt
Azed5FA3pGZNFJPX0g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:26 2024 by rpki-client on console-fra.rpki-client.org