Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Lo4jmEJhT4yn5QYXStqGkAS9MzQ.roa
File: Lo4jmEJhT4yn5QYXStqGkAS9MzQ.roa (raw, json)
Hash identifier: qodPFHGizbglrD7vQroISyQAfjouvHcylOaUEFu/TMs=
Subject key identifier: 2E:8E:23:98:42:61:4F:8C:A7:E5:06:17:4A:DA:86:90:04:BD:33:34
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01932159C0306648F197A993F8087F8D4F04
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Lo4jmEJhT4yn5QYXStqGkAS9MzQ.roa
Signing time: Tue 12 Nov 2024 17:09:10 +0000
ROA not before: Tue 12 Nov 2024 17:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31404
IP address blocks: 217.179.128.0/18 maxlen: 24
217.180.64.0/18 maxlen: 24
217.181.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:59:c0:30:66:48:f1:97:a9:93:f8:08:7f:8d:4f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Nov 12 17:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e8e239842614f8ca7e506174ada869004bd3334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:81:dc:dc:02:33:fc:5d:6d:fa:ba:89:81:
e3:15:04:95:61:c8:b8:3a:5c:b9:f9:64:8d:b0:c7:
87:cf:a2:25:a5:4f:15:f1:48:a3:0e:81:17:05:80:
e6:a8:83:15:0e:fe:eb:f5:16:2f:3b:b3:a4:da:68:
fc:15:79:aa:43:5f:b2:cf:39:64:28:6a:2e:b9:68:
c8:e9:22:a1:f5:fb:54:7a:83:f9:23:b8:ec:d3:d3:
60:94:d2:13:20:fa:04:e3:e5:1d:ee:cf:b9:6b:f2:
07:8a:7e:b9:16:e2:e0:c9:8b:dc:5b:e9:e1:19:5e:
23:7d:bf:89:63:52:af:99:5e:aa:80:b7:2d:29:fa:
46:90:e3:e1:84:fc:85:21:a9:59:55:fc:ed:d5:34:
c9:20:25:0a:76:36:14:32:e0:bc:ad:dd:e4:2c:59:
24:fd:35:be:5b:30:2b:9c:73:60:ef:08:2a:62:bd:
b5:25:50:16:7b:af:0d:4d:1b:31:a8:97:32:9f:59:
63:cd:ab:4e:9c:19:09:a4:ff:be:c8:e8:4c:4e:10:
5c:fb:39:66:6c:52:4b:ff:41:7d:03:51:53:49:d6:
6c:81:bc:b5:82:34:21:9d:4b:b7:b4:7a:de:d7:2a:
24:2e:fe:73:90:7b:41:64:bb:fe:7a:8a:3f:09:4e:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:23:98:42:61:4F:8C:A7:E5:06:17:4A:DA:86:90:04:BD:33:34
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Lo4jmEJhT4yn5QYXStqGkAS9MzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.128.0/18
217.180.64.0/18
217.181.96.0/19
Signature Algorithm: sha256WithRSAEncryption
19:85:c1:27:1a:4e:a6:fe:2b:0c:89:19:62:9e:e7:68:08:c6:
78:bc:10:e8:de:59:3c:e8:4c:33:12:b9:71:f7:1a:80:26:ba:
4e:74:89:15:da:3e:db:7c:7d:f2:b7:be:49:82:42:8e:a5:d3:
5b:6c:63:99:a3:c7:3b:cd:aa:da:3e:7d:32:de:b5:58:52:83:
4e:5a:57:09:83:7f:e6:26:9c:6a:a6:10:e8:34:3d:8c:f4:94:
60:03:3e:c6:b9:9f:39:b4:16:3c:dd:bb:a7:3f:22:6e:91:18:
9e:0a:29:77:d3:1c:9b:71:b8:80:94:c3:60:a8:75:a7:5f:8a:
ea:34:3c:ee:16:03:b9:b2:d8:64:00:75:f0:ad:a0:fe:90:9d:
b1:ba:5f:58:64:71:d7:1f:84:38:d8:11:21:5d:17:38:37:25:
a4:ac:e1:6e:30:07:92:28:af:5f:6b:bd:96:be:97:b5:d9:87:
0c:48:93:16:e2:8d:30:d8:6d:f1:4b:85:a8:fc:7a:0d:80:2c:
66:8a:b4:17:6b:f5:03:20:99:f9:fa:d8:a7:29:87:31:32:3f:
8e:4a:0c:6c:14:88:f1:73:35:fb:b6:8f:38:17:71:40:fe:2e:
c4:c0:6b:cc:d9:d7:a8:47:db:de:c1:37:0c:e4:14:b3:e9:08:
c6:be:17:92
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZMhWcAwZkjxl6mT+Ah/jU8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQxMTEyMTcwOTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZThlMjM5ODQyNjE0ZjhjYTdlNTA2MTc0YWRhODY5MDA0YmQzMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SiB3NwCM/xdbfq6iYHjFQSVYci4
Oly5+WSNsMeHz6IlpU8V8UijDoEXBYDmqIMVDv7r9RYvO7Ok2mj8FXmqQ1+yzzlk
KGouuWjI6SKh9ftUeoP5I7js09NglNITIPoE4+Ud7s+5a/IHin65FuLgyYvcW+nh
GV4jfb+JY1KvmV6qgLctKfpGkOPhhPyFIalZVfzt1TTJICUKdjYUMuC8rd3kLFkk
/TW+WzArnHNg7wgqYr21JVAWe68NTRsxqJcyn1ljzatOnBkJpP++yOhMThBc+zlm
bFJL/0F9A1FTSdZsgby1gjQhnUu3tHre1yokLv5zkHtBZLv+eoo/CU67PQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC6OI5hCYU+Mp+UGF0rahpAEvTM0MB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvTG80am1FSmhUNHluNVFZWFN0cUdrQVM5TXpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQG2bOAAwQG
2bRAAwQF2bVgMA0GCSqGSIb3DQEBCwUAA4IBAQAZhcEnGk6m/isMiRlinudoCMZ4
vBDo3lk86EwzErlx9xqAJrpOdIkV2j7bfH3yt75JgkKOpdNbbGOZo8c7zaraPn0y
3rVYUoNOWlcJg3/mJpxqphDoND2M9JRgAz7GuZ85tBY83bunPyJukRieCil30xyb
cbiAlMNgqHWnX4rqNDzuFgO5sthkAHXwraD+kJ2xul9YZHHXH4Q42BEhXRc4NyWk
rOFuMAeSKK9fa72Wvpe12YcMSJMW4o0w2G3xS4Wo/HoNgCxmirQXa/UDIJn5+tin
KYcxMj+OSgxsFIjxczX7to84F3FA/i7EwGvM2deoR9vewTcM5BSz6QjGvheS
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:53 2024 by rpki-client on console-ams.rpki-client.org