Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/LHwVBMhnYLHEIfwUxGzrnITDBKA.roa
File: LHwVBMhnYLHEIfwUxGzrnITDBKA.roa (raw, json)
Hash identifier: tuAK4xYeux9QDq3jL8bqOpJOaYjS8maPLyxST42qgP0=
Subject key identifier: 2C:7C:15:04:C8:67:60:B1:C4:21:FC:14:C4:6C:EB:9C:84:C3:04:A0
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 018CC64B64A5082CA83234D70D6561D97C12
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/LHwVBMhnYLHEIfwUxGzrnITDBKA.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.0.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:64:a5:08:2c:a8:32:34:d7:0d:65:61:d9:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c7c1504c86760b1c421fc14c46ceb9c84c304a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:b7:da:2b:96:32:df:5d:1e:56:9e:72:c6:
59:0e:86:58:df:e8:86:da:d6:cc:39:73:45:93:5d:
90:55:5a:3a:e2:5e:7a:a6:77:58:d8:6a:b2:88:45:
7f:f7:f6:07:03:6f:e9:07:ce:30:9f:cf:b1:51:04:
a3:bd:b7:4e:dc:e9:49:f0:15:29:30:d0:4e:88:40:
75:2c:b4:55:30:be:de:17:1e:21:e0:1d:c6:83:5b:
3f:a2:95:7a:6e:58:f0:ee:88:c4:47:76:02:59:94:
e9:ae:e2:44:07:c1:26:31:05:1b:8f:a0:df:bd:bb:
eb:c6:f7:37:d8:20:4a:51:08:6a:2e:9e:af:75:e3:
08:22:58:8e:07:d3:bd:23:86:b9:89:2e:ba:a5:1d:
49:f0:27:fb:ef:6a:58:4f:e5:ff:ff:54:74:50:2c:
10:be:e7:3a:ed:56:68:cd:1b:47:b1:52:3b:e7:a2:
b7:95:f3:71:6d:1e:64:60:95:dc:e9:a5:1c:75:fc:
56:36:cd:76:29:1d:6b:17:9b:75:89:12:03:9d:fb:
32:91:a0:f3:c0:9a:a8:79:01:8b:38:82:fa:51:29:
ed:1e:c2:14:65:fd:56:2f:5c:70:7b:5a:0b:ab:37:
b7:49:e8:a4:9f:23:75:f0:74:15:e0:94:8f:72:cf:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7C:15:04:C8:67:60:B1:C4:21:FC:14:C4:6C:EB:9C:84:C3:04:A0
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/LHwVBMhnYLHEIfwUxGzrnITDBKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.173.0/24
Signature Algorithm: sha256WithRSAEncryption
03:93:0b:32:2a:dc:b4:10:13:2d:9e:67:09:80:fa:66:81:75:
07:e4:1a:7b:7b:42:11:00:4f:47:8e:c0:c8:fe:90:95:3c:0d:
7e:d5:83:5a:fd:c3:9a:7b:7d:5b:68:80:04:ef:11:15:2a:4c:
c9:59:5c:48:45:89:73:65:46:1a:58:ee:f3:36:26:1c:06:2c:
08:e8:d3:a3:a7:bc:c9:c1:45:a5:a3:46:d2:71:4b:ee:8f:da:
dc:b8:41:0f:b4:a8:50:f5:86:82:32:31:5d:c7:43:81:9b:01:
56:1c:f5:14:98:75:22:9d:4c:dd:d0:6e:a1:94:37:88:10:34:
6d:ae:8a:e6:21:c9:e1:bb:3d:4e:6d:36:15:eb:7b:b8:09:16:
88:df:81:61:37:68:22:36:b5:86:50:5e:cf:e2:7d:21:66:0d:
6c:f9:d3:54:e5:35:e9:d0:c9:8a:2f:c4:fb:f8:42:ab:1a:dd:
56:ac:e2:a6:2d:08:08:e7:d3:0b:24:c7:45:2b:5b:a4:cf:c3:
dd:1f:92:da:a8:2b:b1:69:56:63:28:51:9b:38:39:e9:ce:33:
96:84:86:80:78:2e:8c:ec:6d:bc:11:b4:a9:18:f7:05:d0:3e:
18:af:c2:10:e1:4a:b4:73:b9:f5:2a:32:8f:db:10:2e:65:7c:
12:03:82:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS2SlCCyoMjTXDWVh2XwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGVmMDQwZmJhNDViY2U3YjA3MTYzNDk1Y2RmNWU4NTA3
NzkxOWQwHhcNMjQwMTAxMTgzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzdjMTUwNGM4Njc2MGIxYzQyMWZjMTRjNDZjZWI5Yzg0YzMwNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZm32iuWMt9dHlaecsZZDoZY3+iG
2tbMOXNFk12QVVo64l56pndY2GqyiEV/9/YHA2/pB84wn8+xUQSjvbdO3OlJ8BUp
MNBOiEB1LLRVML7eFx4h4B3Gg1s/opV6bljw7ojER3YCWZTpruJEB8EmMQUbj6Df
vbvrxvc32CBKUQhqLp6vdeMIIliOB9O9I4a5iS66pR1J8Cf772pYT+X//1R0UCwQ
vuc67VZozRtHsVI756K3lfNxbR5kYJXc6aUcdfxWNs12KR1rF5t1iRIDnfsykaDz
wJqoeQGLOIL6USntHsIUZf1WL1xwe1oLqze3SeiknyN18HQV4JSPcs+R4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCx8FQTIZ2CxxCH8FMRs65yEwwSgMB8GA1UdIwQY
MBaAFP0O8ED7pFvOewcWNJXN9ehQd5GdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQt
NTZjOTRmMzI2ZGMyLzEvTEh3VkJNaG5ZTEhFSWZ3VXhHenJuSVREQktBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQtNTZjOTRmMzI2ZGMy
LzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCtMA0G
CSqGSIb3DQEBCwUAA4IBAQADkwsyKty0EBMtnmcJgPpmgXUH5Bp7e0IRAE9HjsDI
/pCVPA1+1YNa/cOae31baIAE7xEVKkzJWVxIRYlzZUYaWO7zNiYcBiwI6NOjp7zJ
wUWlo0bScUvuj9rcuEEPtKhQ9YaCMjFdx0OBmwFWHPUUmHUinUzd0G6hlDeIEDRt
rormIcnhuz1ObTYV63u4CRaI34FhN2giNrWGUF7P4n0hZg1s+dNU5TXp0MmKL8T7
+EKrGt1WrOKmLQgI59MLJMdFK1ukz8PdH5LaqCuxaVZjKFGbODnpzjOWhIaAeC6M
7G28EbSpGPcF0D4Yr8IQ4Uq0c7n1KjKP2xAuZXwSA4Kw
-----END CERTIFICATE-----
Generated at Sun May 26 00:14:37 2024 by rpki-client on console-ams.rpki-client.org