Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/lV-JGGATot_O-owJIANA-p9iKog.roa
File: lV-JGGATot_O-owJIANA-p9iKog.roa (raw, json)
Hash identifier: b76ypLh8buKG/VNlGwh1rjnzYlLOOyxjF0ggOL+WBrE=
Subject key identifier: 95:5F:89:18:60:13:A2:DF:CE:FA:8C:09:20:03:40:FA:9F:62:2A:88
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23F9C8032594E72C3D372E4E78D9A
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/lV-JGGATot_O-owJIANA-p9iKog.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205715
IP address blocks: 92.119.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3f:9c:80:32:59:4e:72:c3:d3:72:e4:e7:8d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=955f89186013a2dfcefa8c09200340fa9f622a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:29:36:87:1a:32:c7:3c:57:e4:f8:a9:8d:
59:67:30:1a:3f:40:00:f3:9b:91:e9:cd:4a:dc:1f:
82:92:81:21:fb:38:02:61:80:ff:be:ff:06:4a:4b:
43:6b:cf:c2:90:ef:a7:44:8f:c5:fd:ea:ea:51:63:
aa:9e:dc:48:47:57:8d:e9:7b:b8:75:d3:fc:2d:6e:
a1:b6:26:06:a5:d7:f3:c6:d7:84:db:6f:cb:95:2b:
22:e4:84:68:9b:7b:fc:1a:8e:2e:a7:36:f7:c4:9b:
ed:91:28:4a:8e:92:fc:7f:08:6c:5c:6f:eb:75:ec:
b7:14:2f:b7:95:75:24:5b:1f:59:28:2f:fa:97:d8:
ba:4d:4d:74:37:73:66:89:be:ec:94:82:19:cf:0d:
3f:94:ac:fb:18:79:26:e3:b9:99:f1:cc:9d:a6:4e:
7d:98:6b:b5:cb:81:5f:6c:9c:d4:ae:8d:d1:d6:7f:
3f:6a:92:07:d6:7c:0f:e4:70:bb:70:3a:28:40:d7:
a7:c5:6a:4e:42:af:8a:2b:fa:55:7c:06:8d:51:05:
43:de:81:b7:c4:64:85:8c:fa:0d:ee:90:bb:bf:2a:
b6:2c:7a:7b:e1:80:13:57:f0:93:ef:23:55:b4:80:
a3:fd:f8:39:f1:56:ba:7e:05:ab:bf:c2:2a:ec:c2:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:89:18:60:13:A2:DF:CE:FA:8C:09:20:03:40:FA:9F:62:2A:88
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/lV-JGGATot_O-owJIANA-p9iKog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.184.0/23
Signature Algorithm: sha256WithRSAEncryption
02:c7:9c:df:5d:de:51:f3:9a:16:fa:63:12:3e:1f:67:76:e7:
9e:81:f7:13:f4:ca:8a:00:41:19:16:f7:6c:2b:65:3b:8f:07:
80:51:6b:ec:69:c1:3f:ee:71:bc:da:c0:cb:b3:1f:52:0b:43:
6f:88:7e:78:e2:ba:7e:39:2e:67:58:ad:ba:b9:32:6f:ec:74:
c3:ad:08:a9:df:f2:f3:36:0c:41:8f:b4:15:28:d9:21:f7:0c:
9e:9c:3b:56:c8:f7:f6:96:7d:28:b1:e2:66:24:a1:54:d4:20:
6e:d1:aa:ab:eb:5c:dc:97:09:d9:5d:0f:59:72:d6:69:28:c1:
c5:ef:9c:88:4b:39:21:05:85:32:3a:2f:a9:e3:32:bc:6f:e5:
f8:26:0e:12:db:d5:52:aa:31:6f:af:d8:96:21:88:b3:25:1e:
3b:c3:b5:4a:44:23:6c:a8:0b:19:68:6f:34:61:0e:7c:fe:1e:
b3:02:ff:a2:d9:b9:16:bc:75:be:8d:df:ec:bc:ef:91:a9:8e:
42:5a:b7:07:8a:06:f9:3b:6e:26:bb:b4:79:91:92:98:69:72:
cf:b4:75:e9:d9:be:6e:c2:fc:ce:41:26:b0:eb:7b:e8:e2:f1:
06:02:18:9b:a6:21:5c:16:55:a3:bc:05:04:1e:fa:f2:96:16:
05:fe:7f:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsj+cgDJZTnLD03Lk542aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTVmODkxODYwMTNhMmRmY2VmYThjMDkyMDAzNDBmYTlmNjIyYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wQpNocaMsc8V+T4qY1ZZzAaP0AA
85uR6c1K3B+CkoEh+zgCYYD/vv8GSktDa8/CkO+nRI/F/erqUWOqntxIR1eN6Xu4
ddP8LW6htiYGpdfzxteE22/LlSsi5IRom3v8Go4upzb3xJvtkShKjpL8fwhsXG/r
dey3FC+3lXUkWx9ZKC/6l9i6TU10N3Nmib7slIIZzw0/lKz7GHkm47mZ8cydpk59
mGu1y4FfbJzUro3R1n8/apIH1nwP5HC7cDooQNenxWpOQq+KK/pVfAaNUQVD3oG3
xGSFjPoN7pC7vyq2LHp74YATV/CT7yNVtICj/fg58Va6fgWrv8Iq7MKDawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVfiRhgE6LfzvqMCSADQPqfYiqIMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvbFYtSkdHQVRvdF9PLW93SklBTkEtcDlpS29nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHe4MA0G
CSqGSIb3DQEBCwUAA4IBAQACx5zfXd5R85oW+mMSPh9ndueegfcT9MqKAEEZFvds
K2U7jweAUWvsacE/7nG82sDLsx9SC0NviH544rp+OS5nWK26uTJv7HTDrQip3/Lz
NgxBj7QVKNkh9wyenDtWyPf2ln0oseJmJKFU1CBu0aqr61zclwnZXQ9ZctZpKMHF
75yISzkhBYUyOi+p4zK8b+X4Jg4S29VSqjFvr9iWIYizJR47w7VKRCNsqAsZaG80
YQ58/h6zAv+i2bkWvHW+jd/svO+RqY5CWrcHigb5O24mu7R5kZKYaXLPtHXp2b5u
wvzOQSaw63vo4vEGAhibpiFcFlWjvAUEHvrylhYF/n/1
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:11:37 2025 by rpki-client