Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LhHURji8l4wtIcGtZqD-CVGoAks.roa
File: LhHURji8l4wtIcGtZqD-CVGoAks.roa (raw, json)
Hash identifier: Wc1frx4mHltpMQa1S5mrPVHv+2KPHaQNxbHrrbYWin8=
Subject key identifier: 2E:11:D4:46:38:BC:97:8C:2D:21:C1:AD:66:A0:FE:09:51:A8:02:4B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EC7C09D721163EA25CDCFBA50C98996A9
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LhHURji8l4wtIcGtZqD-CVGoAks.roa
Signing time: Wed 10 Apr 2024 11:24:32 +0000
ROA not before: Wed 10 Apr 2024 11:24:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16301
IP address blocks: 78.81.0.0/17 maxlen: 17
78.81.192.0/18 maxlen: 18
84.242.192.0/18 maxlen: 18
89.252.64.0/18 maxlen: 18
213.148.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:c0:9d:72:11:63:ea:25:cd:cf:ba:50:c9:89:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 10 11:24:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e11d44638bc978c2d21c1ad66a0fe0951a8024b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:c8:7d:3b:cb:e9:88:4d:1b:c8:e8:6e:8b:
34:3e:bb:14:26:65:5f:15:31:09:53:32:1f:d2:3f:
f0:77:29:0f:44:06:79:0a:ac:dd:23:71:fa:3e:c3:
f1:d8:d3:01:cd:88:38:bb:f0:37:81:14:a6:27:26:
e9:3b:bf:a8:87:60:fd:0a:66:84:c2:c5:1f:30:61:
fa:6f:47:69:40:81:93:9f:ae:5c:9b:57:91:1e:df:
94:4e:7b:b5:8f:00:2f:d3:06:5d:b6:0a:66:dc:63:
70:ef:a0:a4:57:76:fb:ad:1a:34:50:b2:8b:3c:d2:
b6:9f:b5:5b:82:63:d1:de:2a:77:c2:2d:37:12:cd:
8c:9b:39:58:a7:f0:ef:6b:b8:ca:61:2d:ef:bb:27:
4c:c7:f3:2f:54:12:94:37:dd:67:69:42:e5:26:fc:
8e:fa:a7:ee:4f:8e:af:9c:0d:4e:d6:9e:bc:f9:0d:
f0:a4:f8:20:3f:6c:2b:eb:de:a4:ab:47:2e:7c:f9:
0d:f6:21:c8:ee:7f:32:cb:a0:e2:a3:5c:54:a4:2c:
f8:75:3b:fa:d2:67:a2:ce:ca:be:c7:fb:21:e8:7b:
1d:0c:57:e9:3f:ac:d4:55:19:d7:4c:50:5d:86:38:
e0:8b:73:44:5d:a1:48:70:99:34:ed:6d:ed:5f:67:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:D4:46:38:BC:97:8C:2D:21:C1:AD:66:A0:FE:09:51:A8:02:4B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LhHURji8l4wtIcGtZqD-CVGoAks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.81.0.0/17
78.81.192.0/18
84.242.192.0/18
89.252.64.0/18
213.148.160.0/19
Signature Algorithm: sha256WithRSAEncryption
41:d2:0d:c7:95:d1:88:27:83:ec:47:0c:bb:58:25:7e:53:e4:
31:66:e7:63:c8:6d:fb:80:0c:99:72:8c:2c:d6:e1:d8:9e:b2:
18:fb:c8:68:44:e5:89:93:dd:10:33:92:d7:f1:7d:cb:bc:36:
f2:73:3a:cc:92:3b:75:4e:9f:5e:d9:64:be:f7:37:82:08:36:
26:6e:0c:08:a0:11:01:74:98:d8:d2:aa:47:43:12:0b:d5:7f:
8e:6e:1c:61:ee:cd:57:ac:05:52:16:17:94:28:f3:2d:bd:2e:
dc:ba:72:82:9e:09:c2:4d:80:d6:2e:a0:41:d2:a3:0e:2c:d9:
2a:e3:b8:d5:16:f3:4d:c0:1c:a9:ab:f3:68:3f:e0:69:2d:99:
10:13:6b:13:71:25:8a:02:3e:d4:a3:ca:1a:82:b5:48:3a:f5:
fd:71:74:6e:c1:1b:0f:bc:42:9d:df:4c:ee:51:6f:cb:a4:61:
ea:78:c8:2d:2c:d0:dd:2e:6a:5c:3f:cd:0b:2a:13:84:3e:fb:
01:6c:c8:8b:1d:f9:0d:73:68:f6:e9:3a:2f:90:6d:b5:38:c6:
0c:ed:c5:b0:02:c7:0b:7f:e6:b6:a3:07:c1:44:45:21:6f:17:
8c:a2:41:d2:b0:a0:c4:7f:33:58:e5:b7:95:0a:2b:31:e1:95:
6d:f0:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:52:17 2024 by rpki-client on console-ams.rpki-client.org