Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/LP-O32WjjHVzX1KxhaVGzjXVbXo.roa
File: LP-O32WjjHVzX1KxhaVGzjXVbXo.roa (raw, json)
Hash identifier: /rtAa5DWwFRZ3HoM+hDYKz9gyNR6cc4dn+bU5jyR7aI=
Subject key identifier: 2C:FF:8E:DF:65:A3:8C:75:73:5F:52:B1:85:A5:46:CE:35:D5:6D:7A
Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial: 018CC3B716D6309976A12ECA51389794BF1E
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/LP-O32WjjHVzX1KxhaVGzjXVbXo.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51548
IP address blocks: 45.13.96.0/22 maxlen: 22
2a0e:e300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:16:d6:30:99:76:a1:2e:ca:51:38:97:94:bf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cff8edf65a38c75735f52b185a546ce35d56d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:76:2f:c3:e4:e7:d5:28:53:de:9c:69:0f:
ec:81:22:5f:48:70:d2:4f:71:6d:04:cf:eb:ff:b3:
3b:a3:98:ec:00:2d:1b:6a:c3:75:b8:9a:8c:ce:a3:
e0:bd:78:dc:e3:7a:b7:68:87:51:7c:9d:8a:64:0d:
8d:b0:1d:ed:c7:61:90:74:d3:06:0e:6e:dc:98:2c:
74:bc:fc:c7:3a:95:8a:ff:36:38:b0:c2:7a:a6:46:
14:16:85:c8:2b:27:f2:20:fc:11:2f:35:ba:a4:f1:
c4:1a:ce:71:6c:d9:df:47:0d:0b:0e:e2:f6:e2:a3:
90:71:8c:f3:3d:ce:91:f0:53:83:10:e5:30:f3:38:
a7:c1:18:5f:23:9c:c8:3a:18:6a:00:89:fa:94:d4:
48:20:83:ff:e6:b4:c3:11:96:9c:de:b7:67:92:9c:
a1:7f:df:1e:dd:75:8f:0c:dc:e1:8a:8e:14:f2:20:
ed:28:a1:02:ba:50:9d:18:17:46:de:cf:7f:07:91:
5e:de:e4:5b:f1:a3:3b:bf:3c:5a:b1:86:c1:fa:bf:
5f:41:71:e5:98:f7:f9:6b:71:e4:46:e6:58:29:05:
dc:f3:b2:3c:46:0d:5f:6d:3d:64:a3:53:70:44:d2:
32:7f:be:21:f0:9e:36:0c:05:a4:07:ca:db:80:f7:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FF:8E:DF:65:A3:8C:75:73:5F:52:B1:85:A5:46:CE:35:D5:6D:7A
X509v3 Authority Key Identifier:
keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/LP-O32WjjHVzX1KxhaVGzjXVbXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.96.0/22
IPv6:
2a0e:e300::/29
Signature Algorithm: sha256WithRSAEncryption
34:5e:81:13:27:d0:cf:c6:98:da:b6:4f:ea:61:1b:a6:ff:d5:
28:69:1d:e0:ec:13:32:33:31:ed:8c:0a:d9:6a:04:79:7d:74:
37:5d:98:01:79:4a:d5:40:2a:8b:c6:69:d8:a8:06:03:1b:69:
41:74:2b:fd:7c:bb:6d:69:66:ca:18:f2:bd:b5:cd:42:d2:e0:
55:46:85:c7:49:d9:01:a2:8f:ed:f7:f7:4e:85:57:e6:c3:fb:
e0:4e:a6:ca:67:72:db:cf:b0:bd:e7:9f:be:ae:cf:3c:a3:98:
01:16:c0:8a:b1:7e:dc:e8:74:58:65:d3:df:04:55:d6:9f:34:
97:b1:c0:a8:f4:86:d4:6e:cc:71:07:a9:f1:5d:96:6f:92:3d:
af:ed:ad:68:fc:ad:59:cd:99:f1:0c:05:72:dd:2f:f8:44:1f:
ab:fa:8e:b6:cc:22:72:89:42:ad:c1:b7:8d:9c:a8:4a:c3:dd:
88:44:1c:8d:a9:9b:9e:18:3a:7d:17:86:1b:5d:fb:a7:0a:97:
e6:e0:89:fa:5e:84:b5:6f:09:5b:fa:30:a9:bc:62:e3:02:eb:
cf:5c:a3:bd:2b:f8:71:50:dc:94:d3:0c:a3:09:2e:f5:94:2c:
f7:fd:a9:8a:69:41:6e:e3:bc:7b:bc:e5:14:b9:04:5f:1c:2d:
25:61:26:2d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzDtxbWMJl2oS7KUTiXlL8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MWYzZWZlZDU3Zjg1YzA3MTdiYTU4NjM4NmJjZDkyZGRj
NWM3YjUwHhcNMjQwMTAxMDYzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2ZmOGVkZjY1YTM4Yzc1NzM1ZjUyYjE4NWE1NDZjZTM1ZDU2ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2d2L8Pk59UoU96caQ/sgSJfSHDS
T3FtBM/r/7M7o5jsAC0basN1uJqMzqPgvXjc43q3aIdRfJ2KZA2NsB3tx2GQdNMG
Dm7cmCx0vPzHOpWK/zY4sMJ6pkYUFoXIKyfyIPwRLzW6pPHEGs5xbNnfRw0LDuL2
4qOQcYzzPc6R8FODEOUw8zinwRhfI5zIOhhqAIn6lNRIIIP/5rTDEZac3rdnkpyh
f98e3XWPDNzhio4U8iDtKKECulCdGBdG3s9/B5Fe3uRb8aM7vzxasYbB+r9fQXHl
mPf5a3HkRuZYKQXc87I8Rg1fbT1ko1NwRNIyf74h8J42DAWkB8rbgPeWHQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCz/jt9lo4x1c19SsYWlRs411W16MB8GA1UdIwQY
MBaAFOUfPv7Vf4XAcXulhjhrzZLdxce1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVI4LV90Vl9oY0J4ZTZXR09Hdk5rdDNGeDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iOTU1ZmQtMzllOC00MmU2LWFjNTQt
YWY2OTQ4MDA4MGNlLzEvTFAtTzMyV2pqSFZ6WDFLeGhhVkd6alhWYlhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iOTU1ZmQtMzllOC00MmU2LWFjNTQtYWY2OTQ4MDA4MGNl
LzEvNVI4LV90Vl9oY0J4ZTZXR09Hdk5rdDNGeDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQ1gMA0E
AgACMAcDBQMqDuMAMA0GCSqGSIb3DQEBCwUAA4IBAQA0XoETJ9DPxpjatk/qYRum
/9UoaR3g7BMyMzHtjArZagR5fXQ3XZgBeUrVQCqLxmnYqAYDG2lBdCv9fLttaWbK
GPK9tc1C0uBVRoXHSdkBoo/t9/dOhVfmw/vgTqbKZ3Lbz7C955++rs88o5gBFsCK
sX7c6HRYZdPfBFXWnzSXscCo9IbUbsxxB6nxXZZvkj2v7a1o/K1ZzZnxDAVy3S/4
RB+r+o62zCJyiUKtwbeNnKhKw92IRByNqZueGDp9F4YbXfunCpfm4In6XoS1bwlb
+jCpvGLjAuvPXKO9K/hxUNyU0wyjCS71lCz3/amKaUFu47x7vOUUuQRfHC0lYSYt
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:54:00 2024 by rpki-client on console-ams.rpki-client.org