Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/lCxMEu0q-UGYZyCeuknWh_v4qDs.roa
File: lCxMEu0q-UGYZyCeuknWh_v4qDs.roa (raw, json)
Hash identifier: VfWi5x9yJK+9W9uB3Ko6uBhrqDZ0+x+F7/+WdC6jRO4=
Subject key identifier: 94:2C:4C:12:ED:2A:F9:41:98:67:20:9E:BA:49:D6:87:FB:F8:A8:3B
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018CC56E7C6E6CB5E08941AC7724FC1BC1CF
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/lCxMEu0q-UGYZyCeuknWh_v4qDs.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 193.163.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7c:6e:6c:b5:e0:89:41:ac:77:24:fc:1b:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=942c4c12ed2af9419867209eba49d687fbf8a83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:49:9a:44:16:18:00:e6:d5:a5:88:3f:56:
c2:26:9f:f3:1b:3c:73:3a:1e:48:3a:76:7e:5e:15:
85:da:ce:a3:51:22:17:ab:90:b3:8d:ae:88:05:d8:
c4:31:8a:c3:82:0c:6b:99:44:a6:a3:26:b3:3b:e7:
14:1c:76:71:d8:c5:75:6a:52:6d:ac:bd:67:6d:11:
03:d7:3c:84:88:52:09:07:c1:82:d1:bd:5d:ec:d8:
20:0f:78:1a:6d:53:ce:b0:9c:29:e5:ee:73:00:eb:
bf:55:0a:55:44:a5:bc:92:f1:11:6b:63:49:04:cf:
61:fa:4f:05:fe:85:b7:81:8c:d7:c0:3c:08:c5:a1:
a5:7d:8c:34:d8:71:8b:f5:ec:11:01:f8:bb:ef:ef:
7b:21:e3:03:5c:d3:44:29:2a:bd:7a:72:c1:ff:17:
fa:61:1d:96:0f:1c:d2:8d:5f:e8:a9:05:29:3d:00:
4f:7e:6e:2f:d9:e2:d6:80:d7:68:b2:c5:23:51:fa:
6a:ec:44:95:59:28:fa:7c:de:e3:ab:d7:df:ec:0a:
3b:d6:ff:d6:6a:0e:46:cf:16:bd:d1:eb:b3:89:e6:
2d:e9:e0:64:88:9a:4e:66:6c:70:c2:81:14:9e:60:
32:25:61:b2:b8:d8:d0:15:e5:d6:da:7a:67:16:c5:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:4C:12:ED:2A:F9:41:98:67:20:9E:BA:49:D6:87:FB:F8:A8:3B
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/lCxMEu0q-UGYZyCeuknWh_v4qDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.200.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e0:05:e9:46:0f:cb:dd:d4:73:03:76:23:13:46:45:db:4e:
47:53:2a:3f:f6:72:07:e6:8d:48:11:5f:70:52:2e:df:7c:f6:
79:a6:8e:00:61:c9:43:00:69:ed:82:8a:c1:0b:46:75:eb:e3:
55:67:3e:b8:6c:bb:ae:39:f6:3e:ec:ec:5c:55:56:70:b7:01:
e8:f5:d0:b7:2c:b2:2c:01:47:91:80:65:c9:1a:a0:1f:67:a3:
94:86:de:b3:6e:dd:4c:d2:fc:5b:17:26:07:8f:3d:0a:23:9b:
d9:6d:5d:6d:23:e9:9f:96:61:32:2d:e8:d2:b4:c2:21:12:db:
41:03:5e:cb:49:23:c3:f9:22:08:79:10:bf:6b:18:d0:26:d7:
56:ac:1c:d0:d2:98:7e:f7:f1:ec:99:57:01:72:08:36:74:df:
84:f7:89:30:e6:ab:1f:00:f0:a1:6f:2e:2c:65:53:65:cf:fb:
ac:63:50:a3:2d:4e:55:6b:d4:83:20:22:2f:71:da:7c:db:2e:
d4:5c:44:35:fd:b0:16:42:70:38:cf:b3:40:24:18:ff:0b:a9:
0a:a3:4e:59:42:52:00:f2:33:5e:3c:8c:42:53:a7:2c:93:d1:
c3:e0:e9:a7:ef:6b:2c:db:84:73:47:73:c8:32:66:50:61:fc:
ee:dd:7b:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbnxubLXgiUGsdyT8G8HPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjQwMTAxMTQzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJjNGMxMmVkMmFmOTQxOTg2NzIwOWViYTQ5ZDY4N2ZiZjhhODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9ZJmkQWGADm1aWIP1bCJp/zGzxz
Oh5IOnZ+XhWF2s6jUSIXq5Czja6IBdjEMYrDggxrmUSmoyazO+cUHHZx2MV1alJt
rL1nbRED1zyEiFIJB8GC0b1d7NggD3gabVPOsJwp5e5zAOu/VQpVRKW8kvERa2NJ
BM9h+k8F/oW3gYzXwDwIxaGlfYw02HGL9ewRAfi77+97IeMDXNNEKSq9enLB/xf6
YR2WDxzSjV/oqQUpPQBPfm4v2eLWgNdossUjUfpq7ESVWSj6fN7jq9ff7Ao71v/W
ag5Gzxa90euzieYt6eBkiJpOZmxwwoEUnmAyJWGyuNjQFeXW2npnFsWNtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQsTBLtKvlBmGcgnrpJ1of7+Kg7MB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvbEN4TUV1MHEtVUdZWnlDZXVrbldoX3Y0cURzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPIMA0G
CSqGSIb3DQEBCwUAA4IBAQBp4AXpRg/L3dRzA3YjE0ZF205HUyo/9nIH5o1IEV9w
Ui7ffPZ5po4AYclDAGntgorBC0Z16+NVZz64bLuuOfY+7OxcVVZwtwHo9dC3LLIs
AUeRgGXJGqAfZ6OUht6zbt1M0vxbFyYHjz0KI5vZbV1tI+mflmEyLejStMIhEttB
A17LSSPD+SIIeRC/axjQJtdWrBzQ0ph+9/HsmVcBcgg2dN+E94kw5qsfAPChby4s
ZVNlz/usY1CjLU5Va9SDICIvcdp82y7UXEQ1/bAWQnA4z7NAJBj/C6kKo05ZQlIA
8jNePIxCU6csk9HD4Omn72ss24RzR3PIMmZQYfzu3Xt/
-----END CERTIFICATE-----
Generated at Sun May 5 11:06:37 2024 by rpki-client on console-fra.rpki-client.org