Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lfSCBraGJgOtudzyo2MT6SXaKYs.roa
File: lfSCBraGJgOtudzyo2MT6SXaKYs.roa (raw, json)
Hash identifier: IL64AFj8PuLPd9ue52Eg2n/XKJUBDEsfi2X/MBaJpr8=
Subject key identifier: 95:F4:82:06:B6:86:26:03:AD:B9:DC:F2:A3:63:13:E9:25:DA:29:8B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E469855EA66F51C2ABF8AA41BCAC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lfSCBraGJgOtudzyo2MT6SXaKYs.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202479
IP address blocks: 193.37.139.0/24 maxlen: 24
2a0c:9a40:1023::/48 maxlen: 48
2a0c:9a40:1013::/48 maxlen: 48
2a0c:9a40:1019::/48 maxlen: 48
2a0c:9a40:1014::/48 maxlen: 48
2a0c:9a40:1017::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a40:1012::/48 maxlen: 48
2a0c:9a40:101d::/48 maxlen: 48
2a0c:9a40:1018::/48 maxlen: 48
2a0c:9a40:101b::/48 maxlen: 48
2a0c:9a40:1021::/48 maxlen: 48
2a0c:9a40:1011::/48 maxlen: 48
2a0c:9a40:101c::/48 maxlen: 48
2a0c:9a40:100c::/48 maxlen: 48
2a0c:9a40:101a::/48 maxlen: 48
2a0c:9a40:100a::/48 maxlen: 48
2a0c:9a40:1015::/48 maxlen: 48
2a0c:9a40:1010::/48 maxlen: 48
2a0c:9a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e4:69:85:5e:a6:6f:51:c2:ab:f8:aa:41:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95f48206b6862603adb9dcf2a36313e925da298b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:c8:70:5d:0e:78:49:b4:61:69:6b:26:91:
f7:0d:fd:08:d5:e9:a9:ff:59:46:7e:08:fe:00:05:
d4:30:0a:e5:5a:0d:16:7d:2c:bd:8b:ee:80:5a:92:
eb:f9:a4:05:e3:06:93:4e:29:a7:94:d6:02:28:76:
32:c8:b2:9f:a9:e0:8f:2b:7c:4f:58:2b:9e:bf:bd:
3a:75:84:ca:b5:86:e1:01:03:ba:89:e8:ab:58:5f:
23:15:8c:37:84:14:70:dc:27:82:a0:4e:ee:0e:3f:
77:40:da:17:c5:da:25:42:3f:5c:35:5d:da:81:bd:
5a:8d:fc:55:ef:46:5e:a5:76:83:fd:d1:fa:03:e2:
90:13:0a:ea:5a:fa:ad:cb:c3:d2:3e:50:0c:3a:42:
1d:6b:98:ab:30:c1:37:ae:e3:cd:89:d7:3d:4d:f2:
c2:a8:4a:dd:cf:a1:0c:c8:57:d2:33:43:72:a6:e1:
28:d8:80:f6:75:d5:76:8a:92:b5:df:32:0a:6d:51:
b2:1e:37:78:71:97:57:c2:6c:85:34:8b:e9:68:39:
0f:2f:e7:2a:9f:76:27:3a:ad:43:79:22:9e:11:56:
77:78:50:83:db:cf:b5:ba:4e:b2:3b:e6:fd:0f:d5:
a8:b1:6f:ae:15:f5:67:4c:a8:7f:e4:c0:20:d9:7b:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:82:06:B6:86:26:03:AD:B9:DC:F2:A3:63:13:E9:25:DA:29:8B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lfSCBraGJgOtudzyo2MT6SXaKYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.139.0/24
IPv6:
2a0c:9a40::/48
2a0c:9a40:1002::/48
2a0c:9a40:100a::/48
2a0c:9a40:100c::/48
2a0c:9a40:1010::-2a0c:9a40:1015:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1017::-2a0c:9a40:101d:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1021::/48
2a0c:9a40:1023::/48
Signature Algorithm: sha256WithRSAEncryption
2c:86:58:a6:8b:85:66:28:61:c8:d7:0c:d2:76:66:4a:2d:b9:
3c:d6:96:91:72:1a:54:e6:5e:cb:35:6c:d3:a2:d7:43:95:79:
b0:89:23:84:08:c3:df:57:01:a5:c0:ad:ed:33:f7:de:38:a6:
e7:1c:b1:b1:32:e9:aa:74:5a:e0:21:85:1f:1f:01:4f:de:4c:
fb:bd:c5:f0:6c:fe:65:4b:a5:ba:c0:ef:75:38:1a:a9:7e:38:
a7:7e:87:87:e5:e7:ac:4c:51:9a:99:5b:8c:59:93:f1:76:34:
4e:f8:0e:4d:9a:cb:a1:66:0a:ed:65:5a:22:33:11:63:8a:c5:
d9:06:4e:62:01:68:06:8a:cc:ef:92:72:54:fe:53:63:ab:b6:
23:b0:65:83:5a:ec:4d:2b:7b:9e:87:d2:e8:da:17:60:82:52:
01:66:29:d6:42:1f:49:cf:e0:75:5e:8f:2a:fd:3a:5b:ce:0b:
c1:09:ed:0a:52:20:4f:bc:0d:b2:52:f1:5e:08:8c:16:8e:29:
55:35:a9:ef:7c:75:a2:47:f0:cb:91:55:d6:ad:8e:53:d9:94:
52:f0:4d:99:f1:d0:e0:ea:d9:75:b6:e8:04:44:4d:0f:58:10:
11:23:ba:94:23:26:1d:a5:cb:82:d1:7a:6e:8f:49:31:92:53:
f6:56:8c:7b
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAYzGuORphV6mb1HCq/iqQbysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjQwMTAxMjAzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWY0ODIwNmI2ODYyNjAzYWRiOWRjZjJhMzYzMTNlOTI1ZGEyOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyrIcF0OeEm0YWlrJpH3Df0I1emp
/1lGfgj+AAXUMArlWg0WfSy9i+6AWpLr+aQF4waTTimnlNYCKHYyyLKfqeCPK3xP
WCuev706dYTKtYbhAQO6ieirWF8jFYw3hBRw3CeCoE7uDj93QNoXxdolQj9cNV3a
gb1ajfxV70ZepXaD/dH6A+KQEwrqWvqty8PSPlAMOkIda5irMME3ruPNidc9TfLC
qErdz6EMyFfSM0NypuEo2ID2ddV2ipK13zIKbVGyHjd4cZdXwmyFNIvpaDkPL+cq
n3YnOq1DeSKeEVZ3eFCD28+1uk6yO+b9D9WosW+uFfVnTKh/5MAg2XssUwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFJX0gga2hiYDrbnc8qNjE+kl2imLMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvbGZTQ0JyYUdKZ090dWR6eW8yTVQ2U1hhS1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwDAQCAAEwBgMEAMElizBk
BAIAAjBeAwcAKgyaQAAAAwcAKgyaQBACAwcAKgyaQBAKAwcAKgyaQBAMMBIDBwQq
DJpAEBADBwEqDJpAEBQwEgMHACoMmkAQFwMHASoMmkAQHAMHACoMmkAQIQMHACoM
mkAQIzANBgkqhkiG9w0BAQsFAAOCAQEALIZYpouFZihhyNcM0nZmSi25PNaWkXIa
VOZeyzVs06LXQ5V5sIkjhAjD31cBpcCt7TP33jim5xyxsTLpqnRa4CGFHx8BT95M
+73F8Gz+ZUulusDvdTgaqX44p36Hh+XnrExRmplbjFmT8XY0TvgOTZrLoWYK7WVa
IjMRY4rF2QZOYgFoBorM75JyVP5TY6u2I7Blg1rsTSt7nofS6NoXYIJSAWYp1kIf
Sc/gdV6PKv06W84LwQntClIgT7wNslLxXgiMFo4pVTWp73x1okfwy5FV1q2OU9mU
UvBNmfHQ4OrZdbboBERND1gQESO6lCMmHaXLgtF6bo9JMZJT9laMew==
-----END CERTIFICATE-----
Generated at Fri May 17 04:45:39 2024 by rpki-client on console-ams.rpki-client.org