Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LfHjXdZHRQL0vxBfosVsKaXznQs.roa
File: LfHjXdZHRQL0vxBfosVsKaXznQs.roa (raw, json)
Hash identifier: OYQKxcMcZvDxvvzQrTx1ZkxSyoRz2S7G9QqBXYtjrSU=
Subject key identifier: 2D:F1:E3:5D:D6:47:45:02:F4:BF:10:5F:A2:C5:6C:29:A5:F3:9D:0B
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA992FAAB7DA2C06F5E655EA61900C4A
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LfHjXdZHRQL0vxBfosVsKaXznQs.roa
Signing time: Tue 02 Jan 2024 14:34:46 +0000
ROA not before: Tue 02 Jan 2024 14:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12660
IP address blocks: 87.107.156.0/22 maxlen: 24
87.107.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:2f:aa:b7:da:2c:06:f5:e6:55:ea:61:90:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2df1e35dd6474502f4bf105fa2c56c29a5f39d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:e5:13:9e:b0:61:60:f8:02:09:74:96:3f:
38:bd:07:5d:bf:76:c0:b1:24:89:7b:e2:57:87:7e:
02:43:d7:88:c1:ff:ec:85:c7:54:a4:4f:9a:80:1b:
16:4a:c7:84:1e:b1:3d:a7:7e:be:46:79:af:a5:15:
69:5e:8c:96:68:03:eb:99:61:f0:c0:a4:54:20:22:
6a:ae:19:c5:6f:11:1d:00:1c:82:38:3a:3e:92:e5:
c3:15:5f:39:df:4f:2f:b2:9a:01:d3:57:e4:97:7e:
ce:23:42:1d:63:5e:1a:39:b5:4b:7b:ae:76:43:5e:
74:98:f5:f4:92:5b:18:82:a7:49:c9:f1:96:58:1f:
ca:1d:be:b3:5d:11:86:6c:d2:ec:9b:3c:12:68:7a:
60:ab:51:80:49:91:1d:2c:06:97:1b:10:cb:b3:70:
c3:b3:76:41:3d:1f:30:01:4d:dc:e2:d8:81:5e:aa:
63:0b:14:dc:d9:28:b8:52:b3:c3:f5:bb:f6:20:8e:
88:c1:b0:7e:df:36:85:12:10:ad:50:28:03:3c:b4:
3d:c2:ea:42:b9:cf:a2:53:ad:e4:a5:48:7b:cb:76:
20:19:15:fa:3e:11:4c:c8:f4:09:92:b6:ae:8c:b5:
92:a4:17:37:f9:56:de:4b:97:a7:c1:9e:c3:a7:37:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:E3:5D:D6:47:45:02:F4:BF:10:5F:A2:C5:6C:29:A5:F3:9D:0B
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LfHjXdZHRQL0vxBfosVsKaXznQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.156.0/22
87.107.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:95:09:8a:7d:aa:62:45:47:4c:0c:29:4b:15:96:07:fe:74:
75:a1:65:f9:1f:f0:eb:01:03:20:d6:20:89:1b:7d:1e:41:f2:
b0:d8:be:23:25:0d:60:eb:07:10:1b:93:14:ed:1c:ee:2f:45:
36:5e:d5:f2:5a:87:6c:6a:fb:18:fd:a7:38:ad:e8:88:59:d6:
ae:15:62:af:69:c4:b9:b3:bd:d3:08:9c:86:44:c6:d0:61:ef:
21:7d:d9:f5:62:4d:23:1f:82:44:04:72:05:55:0f:a6:5c:7f:
66:be:69:13:e4:85:7d:67:18:9b:4f:74:86:07:a1:31:b0:f5:
e0:a7:de:48:8d:96:40:ea:7d:4c:1b:ef:b0:7f:17:cc:4d:0a:
af:24:c3:96:45:ba:6d:8c:d4:77:bd:3a:2d:3f:53:98:97:47:
43:bb:b0:5e:db:53:06:f5:50:d5:d1:e6:ec:14:54:90:d3:81:
5e:c9:00:7f:5d:5f:a9:41:f6:32:2b:85:a9:fb:d5:f4:b2:36:
ab:25:8c:a0:06:56:ae:d5:fe:56:ea:34:48:41:85:1e:99:12:
58:e5:e5:2e:50:b7:e3:09:88:83:cf:b0:92:49:c4:0c:b9:25:
c7:d2:49:28:fe:b6:62:27:9c:ac:20:2e:11:e2:2c:dc:cf:45:
5e:c7:76:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKmS+qt9osBvXmVephkAxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjQwMTAyMTQzNDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGYxZTM1ZGQ2NDc0NTAyZjRiZjEwNWZhMmM1NmMyOWE1ZjM5ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppPlE56wYWD4Agl0lj84vQddv3bA
sSSJe+JXh34CQ9eIwf/shcdUpE+agBsWSseEHrE9p36+RnmvpRVpXoyWaAPrmWHw
wKRUICJqrhnFbxEdAByCODo+kuXDFV85308vspoB01fkl37OI0IdY14aObVLe652
Q150mPX0klsYgqdJyfGWWB/KHb6zXRGGbNLsmzwSaHpgq1GASZEdLAaXGxDLs3DD
s3ZBPR8wAU3c4tiBXqpjCxTc2Si4UrPD9bv2II6IwbB+3zaFEhCtUCgDPLQ9wupC
uc+iU63kpUh7y3YgGRX6PhFMyPQJkraujLWSpBc3+VbeS5enwZ7DpzfYTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC3x413WR0UC9L8QX6LFbCml850LMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvTGZIalhkWkhSUUwwdnhCZm9zVnNLYVh6blFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV2ucAwQB
V2u4MA0GCSqGSIb3DQEBCwUAA4IBAQCwlQmKfapiRUdMDClLFZYH/nR1oWX5H/Dr
AQMg1iCJG30eQfKw2L4jJQ1g6wcQG5MU7RzuL0U2XtXyWodsavsY/ac4reiIWdau
FWKvacS5s73TCJyGRMbQYe8hfdn1Yk0jH4JEBHIFVQ+mXH9mvmkT5IV9ZxibT3SG
B6ExsPXgp95IjZZA6n1MG++wfxfMTQqvJMOWRbptjNR3vTotP1OYl0dDu7Be21MG
9VDV0ebsFFSQ04FeyQB/XV+pQfYyK4Wp+9X0sjarJYygBlau1f5W6jRIQYUemRJY
5eUuULfjCYiDz7CSScQMuSXH0kko/rZiJ5ysIC4R4izcz0Vex3bl
-----END CERTIFICATE-----
Generated at Fri May 17 09:47:54 2024 by rpki-client on console-ams.rpki-client.org