Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/LhEL_tyFRkZ_QiAhGCh8MinFBfM.roa
File: LhEL_tyFRkZ_QiAhGCh8MinFBfM.roa (raw, json)
Hash identifier: ztyhBf7Xh61G8np/bqg2Mt4jS5gE0xuba61F0yZMl1k=
Subject key identifier: 2E:11:0B:FE:DC:85:46:46:7F:42:20:21:18:28:7C:32:29:C5:05:F3
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 018CC5DD030480273CEB4C45500912A79D17
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/LhEL_tyFRkZ_QiAhGCh8MinFBfM.roa
Signing time: Mon 01 Jan 2024 16:30:44 +0000
ROA not before: Mon 01 Jan 2024 16:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204621
IP address blocks: 93.95.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:03:04:80:27:3c:eb:4c:45:50:09:12:a7:9d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Jan 1 16:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e110bfedc8546467f42202118287c3229c505f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:82:ac:02:4b:80:1b:26:06:80:fa:ba:c4:
01:78:23:51:26:e8:02:0d:e6:79:34:54:69:12:fd:
3e:71:ad:8a:93:e7:44:09:4e:a8:35:c4:b3:bb:bb:
e3:1d:5a:5c:64:c5:12:37:e5:63:37:65:45:ea:4b:
7c:10:b0:58:e1:54:32:da:cc:a4:52:41:3e:82:48:
b7:35:c8:d6:a2:53:8e:27:76:fe:4f:17:f0:00:7c:
cf:cf:c1:05:13:e6:59:98:54:c6:bb:e0:3f:c3:cf:
c3:80:88:f2:1c:7a:12:69:9f:1f:de:99:92:2f:29:
ad:13:46:75:a4:71:4b:15:06:2c:7c:6b:6e:62:70:
56:dc:e5:bc:fc:72:e6:10:af:8a:a5:1c:38:90:5a:
f6:eb:a8:ba:b0:ae:61:88:95:e5:a1:44:c9:62:1b:
26:1c:21:3e:d9:5e:6c:33:b0:51:7f:33:c0:fa:eb:
d0:cd:a6:98:e6:9d:6c:b6:26:b1:19:70:e1:29:d2:
61:a0:86:95:c3:64:d6:de:bc:b6:46:ad:aa:0a:d9:
80:52:7e:9b:30:c6:1c:8a:0f:41:0a:7a:d8:b9:2a:
cf:f1:51:57:9b:88:bd:3a:aa:4a:38:95:97:13:9c:
9c:68:06:bb:95:12:96:3e:82:46:99:73:55:3f:af:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:0B:FE:DC:85:46:46:7F:42:20:21:18:28:7C:32:29:C5:05:F3
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/LhEL_tyFRkZ_QiAhGCh8MinFBfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.212.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e0:91:25:65:ce:46:d4:b2:ae:e9:41:11:5c:54:ba:25:34:
e7:cc:26:0c:dd:f4:d8:11:0d:f7:cb:ec:b2:6b:58:7f:84:68:
a9:0e:e3:5e:2e:5e:35:e2:ef:7b:ce:84:b8:ec:c3:93:ee:b3:
5c:ab:3c:77:e7:1b:f5:47:ad:20:61:c8:d8:8f:52:5a:b3:1a:
3c:8a:16:c5:07:ea:1c:3d:49:86:cc:a7:fe:9e:8a:e4:f3:6a:
f4:8b:6a:04:dd:d2:c0:a8:a3:ae:96:9b:d0:bc:7d:c3:3d:40:
fb:10:e5:f8:8c:b8:b0:58:b1:a4:ab:1c:5c:53:ed:51:ff:66:
1a:b6:41:8f:7c:45:90:45:d7:a1:1e:b1:3e:ef:9a:aa:d5:af:
61:48:27:d3:65:92:cd:e0:d9:2e:6a:b2:93:49:5f:b9:c1:08:
5c:51:f5:d4:49:6a:e8:0e:5f:b8:e7:b4:97:c5:25:7a:e3:7b:
df:54:23:7d:e6:c5:4b:9c:91:dc:cb:72:84:13:1a:f7:a7:a9:
13:86:b3:7b:3e:d0:61:ea:49:54:d6:5b:78:85:fb:02:74:e7:
2f:07:34:44:32:39:61:b4:04:20:d1:47:c3:d4:ec:0a:a5:67:
d3:b2:b9:6e:18:33:68:32:da:23:22:f3:bc:dd:13:60:d1:b9:
60:2a:b8:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3QMEgCc860xFUAkSp50XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTUwNDBhZTkyNzg2YmYxNzI3YjZiNGVjYzEwOTNiOGE3
NDAxZWIwHhcNMjQwMTAxMTYzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTExMGJmZWRjODU0NjQ2N2Y0MjIwMjExODI4N2MzMjI5YzUwNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhiCrAJLgBsmBoD6usQBeCNRJugC
DeZ5NFRpEv0+ca2Kk+dECU6oNcSzu7vjHVpcZMUSN+VjN2VF6kt8ELBY4VQy2syk
UkE+gki3NcjWolOOJ3b+TxfwAHzPz8EFE+ZZmFTGu+A/w8/DgIjyHHoSaZ8f3pmS
LymtE0Z1pHFLFQYsfGtuYnBW3OW8/HLmEK+KpRw4kFr266i6sK5hiJXloUTJYhsm
HCE+2V5sM7BRfzPA+uvQzaaY5p1stiaxGXDhKdJhoIaVw2TW3ry2Rq2qCtmAUn6b
MMYcig9BCnrYuSrP8VFXm4i9OqpKOJWXE5ycaAa7lRKWPoJGmXNVP69EUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4RC/7chUZGf0IgIRgofDIpxQXzMB8GA1UdIwQY
MBaAFFNVBArpJ4a/Fye2tOzBCTuKdAHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTct
MWRkNTdlM2YzZDk3LzEvTGhFTF90eUZSa1pfUWlBaEdDaDhNaW5GQmZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTctMWRkNTdlM2YzZDk3
LzEvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV/UMA0G
CSqGSIb3DQEBCwUAA4IBAQAm4JElZc5G1LKu6UERXFS6JTTnzCYM3fTYEQ33y+yy
a1h/hGipDuNeLl414u97zoS47MOT7rNcqzx35xv1R60gYcjYj1Jasxo8ihbFB+oc
PUmGzKf+nork82r0i2oE3dLAqKOulpvQvH3DPUD7EOX4jLiwWLGkqxxcU+1R/2Ya
tkGPfEWQRdehHrE+75qq1a9hSCfTZZLN4NkuarKTSV+5wQhcUfXUSWroDl+457SX
xSV643vfVCN95sVLnJHcy3KEExr3p6kThrN7PtBh6klU1lt4hfsCdOcvBzREMjlh
tAQg0UfD1OwKpWfTsrluGDNoMtojIvO83RNg0blgKrht
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:20:47 2024 by rpki-client on console-fra.rpki-client.org