Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/LmsF6en2yF_XQAtp4skc6KkHN4Y.roa
File: LmsF6en2yF_XQAtp4skc6KkHN4Y.roa (raw, json)
Hash identifier: kUkoSPFvCrhadTrABXUJOp58EqmYlXpwVWzucbYRc2Y=
Subject key identifier: 2E:6B:05:E9:E9:F6:C8:5F:D7:40:0B:69:E2:C9:1C:E8:A9:07:37:86
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018CC64AAE4921E72E6BEC57038CE94E667F
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/LmsF6en2yF_XQAtp4skc6KkHN4Y.roa
Signing time: Mon 01 Jan 2024 18:30:32 +0000
ROA not before: Mon 01 Jan 2024 18:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60609
IP address blocks: 37.16.77.0/24 maxlen: 24
5.181.98.0/24 maxlen: 24
134.255.250.0/24 maxlen: 24
45.10.130.0/24 maxlen: 24
194.63.147.0/24 maxlen: 24
5.183.148.0/23 maxlen: 23
5.183.149.0/24 maxlen: 24
46.254.104.0/24 maxlen: 24
185.204.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ae:49:21:e7:2e:6b:ec:57:03:8c:e9:4e:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 18:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e6b05e9e9f6c85fd7400b69e2c91ce8a9073786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:92:8a:63:8c:a9:59:4d:52:3d:18:ea:dd:
db:50:ce:1e:ef:b2:09:34:25:b7:53:3e:16:fc:11:
21:b2:0e:04:77:e0:28:7e:f1:30:15:53:2b:ff:c8:
66:79:b9:61:9f:d9:01:a9:6b:36:20:8e:35:c9:b2:
c1:66:99:1e:40:ae:31:6c:a2:28:c0:1c:33:4c:71:
d3:b2:58:63:a2:75:b9:d6:91:7d:ea:2c:75:81:bc:
df:10:52:ac:ac:65:df:d5:94:c6:da:18:63:c1:05:
e4:7a:2b:13:9d:ad:69:68:35:30:52:31:b8:6a:23:
73:d3:e8:ec:2e:62:07:31:64:97:de:d6:21:2e:9d:
fd:f3:f1:91:0c:52:6e:5c:dc:77:c9:31:ba:9e:ab:
eb:80:50:6f:29:ff:80:d2:0f:73:5e:82:f5:d9:15:
3f:67:82:74:4c:f1:59:81:70:bb:d7:61:fa:a4:ca:
e0:23:f8:2d:75:81:5e:c8:92:05:35:34:48:17:3f:
f0:cd:47:d8:e0:8e:ff:db:a6:93:8d:91:60:2a:18:
bf:ab:38:54:77:e3:bc:aa:92:73:00:c9:5c:67:6a:
a1:c5:34:fe:79:cd:a8:69:7e:8a:34:1b:31:1e:28:
62:bc:b0:88:9d:3d:55:ec:b1:c1:01:e1:5d:e5:d8:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6B:05:E9:E9:F6:C8:5F:D7:40:0B:69:E2:C9:1C:E8:A9:07:37:86
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/LmsF6en2yF_XQAtp4skc6KkHN4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.98.0/24
5.183.148.0/23
37.16.77.0/24
45.10.130.0/24
46.254.104.0/24
134.255.250.0/24
185.204.186.0/24
194.63.147.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f4:80:d1:69:cc:7c:e5:31:80:f2:b5:52:a9:55:0c:2c:f7:
60:f7:29:cc:48:e4:f8:bf:15:f6:c4:99:fb:17:83:29:35:85:
11:4a:29:5b:e1:3d:b2:bf:44:f2:74:97:4c:63:24:ed:53:0a:
71:29:71:9a:8f:c0:6d:aa:23:15:a3:5b:d8:3f:ac:7b:44:c0:
5a:65:4c:97:a0:14:ed:a3:33:9f:bb:11:05:00:bc:8b:84:4d:
fd:81:57:66:18:61:e2:1f:16:5e:f9:ff:b8:72:01:dd:84:5c:
e7:61:ee:0c:ba:65:92:bf:5a:11:08:c7:44:c9:a7:4e:1a:28:
7d:95:d7:23:b4:df:db:4b:f2:64:ad:fc:c4:bd:f7:ed:2b:a8:
51:d0:ec:cb:c0:6e:e8:5e:44:f4:95:b9:61:08:dc:4c:d3:3a:
21:59:2a:9d:00:3f:ae:ba:68:17:43:20:82:cd:c6:00:87:3f:
0f:58:f2:8a:0f:bc:39:8b:3d:62:6b:12:85:85:7d:fe:8b:85:
bf:af:dc:c3:b1:f5:5f:8a:d8:51:15:86:50:b4:8e:8e:54:a6:
8f:f3:8e:6a:51:58:bc:f9:1f:12:69:79:78:ac:bf:7c:db:76:
6e:09:66:9e:ba:06:47:45:d8:20:40:d9:3f:14:97:6a:c0:cb:
9a:38:49:96
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYzGSq5JIecua+xXA4zpTmZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjQwMTAxMTgzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTZiMDVlOWU5ZjZjODVmZDc0MDBiNjllMmM5MWNlOGE5MDczNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FKSimOMqVlNUj0Y6t3bUM4e77IJ
NCW3Uz4W/BEhsg4Ed+AofvEwFVMr/8hmeblhn9kBqWs2II41ybLBZpkeQK4xbKIo
wBwzTHHTslhjonW51pF96ix1gbzfEFKsrGXf1ZTG2hhjwQXkeisTna1paDUwUjG4
aiNz0+jsLmIHMWSX3tYhLp398/GRDFJuXNx3yTG6nqvrgFBvKf+A0g9zXoL12RU/
Z4J0TPFZgXC712H6pMrgI/gtdYFeyJIFNTRIFz/wzUfY4I7/26aTjZFgKhi/qzhU
d+O8qpJzAMlcZ2qhxTT+ec2oaX6KNBsxHihivLCInT1V7LHBAeFd5dgfKwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFC5rBenp9shf10ALaeLJHOipBzeGMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvTG1zRjZlbjJ5Rl9YUUF0cDRza2M2S2tITjRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABbViAwQB
BbeUAwQAJRBNAwQALQqCAwQALv5oAwQAhv/6AwQAucy6AwQAwj+TMA0GCSqGSIb3
DQEBCwUAA4IBAQBm9IDRacx85TGA8rVSqVUMLPdg9ynMSOT4vxX2xJn7F4MpNYUR
Silb4T2yv0TydJdMYyTtUwpxKXGaj8BtqiMVo1vYP6x7RMBaZUyXoBTtozOfuxEF
ALyLhE39gVdmGGHiHxZe+f+4cgHdhFznYe4MumWSv1oRCMdEyadOGih9ldcjtN/b
S/JkrfzEvfftK6hR0OzLwG7oXkT0lblhCNxM0zohWSqdAD+uumgXQyCCzcYAhz8P
WPKKD7w5iz1iaxKFhX3+i4W/r9zDsfVfithRFYZQtI6OVKaP845qUVi8+R8SaXl4
rL9823ZuCWaeugZHRdggQNk/FJdqwMuaOEmW
-----END CERTIFICATE-----
Generated at Tue Apr 30 06:18:34 2024 by rpki-client on console-fra.rpki-client.org