Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/lMCG7NIrMs6XGLm8OXJbxZMC0_Q.roa
File: lMCG7NIrMs6XGLm8OXJbxZMC0_Q.roa (raw, json)
Hash identifier: gywpZCgbXQvAhskQoV7qmcegwj81M9xemTamamghxEo=
Subject key identifier: 94:C0:86:EC:D2:2B:32:CE:97:18:B9:BC:39:72:5B:C5:93:02:D3:F4
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 018CC794552955C1AE198A0F283122F4B3C5
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/lMCG7NIrMs6XGLm8OXJbxZMC0_Q.roa
Signing time: Tue 02 Jan 2024 00:30:36 +0000
ROA not before: Tue 02 Jan 2024 00:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34235
IP address blocks: 194.8.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:55:29:55:c1:ae:19:8a:0f:28:31:22:f4:b3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Jan 2 00:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94c086ecd22b32ce9718b9bc39725bc59302d3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:e6:56:b6:88:04:7a:3f:b8:7a:96:a2:9b:
e8:c7:4a:f8:8c:95:53:8c:e5:74:4a:82:99:8c:5d:
b2:83:b5:cd:14:a0:cd:71:15:78:bc:91:57:fb:cc:
d1:5b:fa:41:f6:60:28:46:cc:9e:a0:0b:d9:aa:12:
b6:92:7f:c8:34:3d:89:c1:11:86:f0:90:c2:e7:8a:
92:53:6f:e0:03:0f:c9:9d:6e:7d:1a:54:de:8b:2a:
a7:3a:da:73:ab:fb:7f:b1:e7:42:2a:06:b6:d3:d4:
e6:5c:fb:55:e3:51:45:9e:16:3d:65:33:24:00:39:
00:b5:5d:38:54:6f:67:4d:6c:23:65:ba:6b:49:38:
1f:d2:74:d6:99:85:08:24:28:af:d0:ba:c6:b8:a9:
c8:cc:81:f3:81:1f:97:b3:5b:5c:49:1a:9c:52:08:
98:dc:08:54:2f:2c:e6:88:c4:7c:25:3b:38:c3:82:
49:52:77:e5:9b:5c:30:e5:62:4a:1c:ad:e1:93:69:
a5:d0:c6:8e:f8:f5:35:6d:50:7c:80:91:bf:a5:af:
b5:19:a8:5a:ac:fd:5f:bf:11:6a:76:d2:c1:d9:58:
59:89:b0:15:c9:f4:9b:ff:83:67:2d:c6:34:68:82:
1e:8d:28:6f:94:86:dd:06:b6:31:6c:c7:56:4b:b1:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C0:86:EC:D2:2B:32:CE:97:18:B9:BC:39:72:5B:C5:93:02:D3:F4
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/lMCG7NIrMs6XGLm8OXJbxZMC0_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.75.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ac:41:8b:44:6a:a5:6f:b6:fc:79:67:65:da:0b:95:02:54:
73:aa:aa:54:b4:a8:cc:0f:09:39:a6:82:50:c5:6b:d4:93:83:
1a:e6:19:e6:d8:a0:8b:ec:f5:a6:96:60:9e:13:18:2c:5f:c5:
24:08:f1:80:1c:86:b0:74:93:8b:0b:5c:99:42:47:0b:97:81:
da:31:4f:ed:03:2d:15:67:9b:e4:5c:c3:e7:9f:39:4e:3f:86:
80:4c:77:c1:e5:c0:d4:40:92:87:2a:72:a4:f0:47:ad:a8:d7:
84:4e:5e:7c:10:fc:3b:57:ec:d6:2c:00:b8:85:ec:91:f1:01:
5b:6d:a4:bb:9f:d8:ec:ed:41:cc:e5:68:de:9c:44:c4:b5:25:
7d:11:80:8c:df:e8:90:b1:40:56:c9:fd:6c:ca:56:a9:f1:78:
d6:39:4b:42:e7:81:84:eb:8f:8b:3f:4b:4c:fa:6b:fb:ac:a2:
22:87:08:3a:f7:13:60:83:81:de:21:1b:68:24:c8:ee:6c:36:
8b:f5:2e:a3:0d:e1:46:87:d4:e9:6d:ad:77:7a:a5:31:a2:b9:
d9:b8:bb:fd:ce:eb:8a:d4:f2:04:0e:92:ba:49:77:f0:ab:5f:
53:8b:66:91:c1:43:c6:2a:dd:c1:3f:d3:09:5f:ce:e5:53:08:
8f:4a:f0:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlFUpVcGuGYoPKDEi9LPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj
NDc5NDQwHhcNMjQwMTAyMDAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGMwODZlY2QyMmIzMmNlOTcxOGI5YmMzOTcyNWJjNTkzMDJkM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsczmVraIBHo/uHqWopvox0r4jJVT
jOV0SoKZjF2yg7XNFKDNcRV4vJFX+8zRW/pB9mAoRsyeoAvZqhK2kn/IND2JwRGG
8JDC54qSU2/gAw/JnW59GlTeiyqnOtpzq/t/sedCKga209TmXPtV41FFnhY9ZTMk
ADkAtV04VG9nTWwjZbprSTgf0nTWmYUIJCiv0LrGuKnIzIHzgR+Xs1tcSRqcUgiY
3AhULyzmiMR8JTs4w4JJUnflm1ww5WJKHK3hk2ml0MaO+PU1bVB8gJG/pa+1Gaha
rP1fvxFqdtLB2VhZibAVyfSb/4NnLcY0aIIejShvlIbdBrYxbMdWS7HJswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJTAhuzSKzLOlxi5vDlyW8WTAtP0MB8GA1UdIwQY
MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt
MTExM2FlNTYzMzY5LzEvbE1DRzdOSXJNczZYR0xtOE9YSmJ4Wk1DMF9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5
LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwghLMA0G
CSqGSIb3DQEBCwUAA4IBAQBhrEGLRGqlb7b8eWdl2guVAlRzqqpUtKjMDwk5poJQ
xWvUk4Ma5hnm2KCL7PWmlmCeExgsX8UkCPGAHIawdJOLC1yZQkcLl4HaMU/tAy0V
Z5vkXMPnnzlOP4aATHfB5cDUQJKHKnKk8EetqNeETl58EPw7V+zWLAC4heyR8QFb
baS7n9js7UHM5WjenETEtSV9EYCM3+iQsUBWyf1sylap8XjWOUtC54GE64+LP0tM
+mv7rKIihwg69xNgg4HeIRtoJMjubDaL9S6jDeFGh9Tpba13eqUxornZuLv9zuuK
1PIEDpK6SXfwq19Ti2aRwUPGKt3BP9MJX87lUwiPSvCj
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:25:27 2024 by rpki-client on console-ams.rpki-client.org