Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LSVF3kAa0H3F9Vnf5vXV4Bx7gNw.roa
File: LSVF3kAa0H3F9Vnf5vXV4Bx7gNw.roa (raw, json)
Hash identifier: LOQJzw7a5JOFCPU3IZC+8lzacmWLtZsQR2Zw0x531QI=
Subject key identifier: 2D:25:45:DE:40:1A:D0:7D:C5:F5:59:DF:E6:F5:D5:E0:1C:7B:80:DC
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E0DB17D7309F5200398EC055E34A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LSVF3kAa0H3F9Vnf5vXV4Bx7gNw.roa
Signing time: Mon 01 Jan 2024 18:29:39 +0000
ROA not before: Mon 01 Jan 2024 18:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51855
IP address blocks: 212.50.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e0:db:17:d7:30:9f:52:00:39:8e:c0:55:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d2545de401ad07dc5f559dfe6f5d5e01c7b80dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:7e:c0:96:26:9d:87:29:17:52:a6:22:19:
3e:44:13:a1:b4:8c:c1:e6:0d:26:68:be:05:f2:ae:
d2:a2:58:c1:9d:7c:90:8a:e9:85:2b:b2:07:71:5b:
a6:a0:4c:90:eb:65:46:f2:a6:29:f3:8c:44:92:ad:
a7:b3:2a:43:a6:78:9d:98:86:c7:e4:bb:c6:f7:0c:
99:76:55:f7:01:ee:4f:c5:88:03:2c:4c:06:c4:21:
9d:7a:21:18:fd:64:03:03:e1:23:c1:aa:cf:f2:ea:
1d:87:36:48:de:0d:f8:80:4a:19:ea:80:4a:4c:b7:
b0:27:7c:18:8d:fc:50:c5:cd:b6:0c:b3:18:20:a6:
39:3c:dd:88:8e:ad:fa:1b:0e:31:cd:f0:5f:0f:e5:
e1:9d:37:98:9e:92:ee:8d:1a:32:5a:c5:d4:4c:ac:
8e:ad:31:e0:a3:8a:90:cf:33:1f:5f:04:0d:13:07:
56:69:45:c1:15:a7:27:61:16:10:e4:54:9a:80:11:
29:43:0d:51:0e:50:39:6d:db:ce:b5:20:5a:f5:11:
e4:0b:99:a1:ce:65:26:4c:8f:dd:a0:2f:9b:74:88:
3c:fe:35:36:f0:1c:3b:c6:7f:9d:98:0f:dd:56:77:
dc:a9:5e:24:e3:d6:a8:11:50:c1:d4:7f:0e:1d:63:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:45:DE:40:1A:D0:7D:C5:F5:59:DF:E6:F5:D5:E0:1C:7B:80:DC
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LSVF3kAa0H3F9Vnf5vXV4Bx7gNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.50.21.0/24
Signature Algorithm: sha256WithRSAEncryption
50:06:b3:8d:5c:10:db:ac:2b:96:20:3f:59:f6:53:ce:45:88:
90:6b:1b:4c:8a:39:8f:70:11:ef:1b:68:1f:35:6b:51:5c:73:
32:0a:c5:1c:36:cd:6c:9c:ad:43:60:14:1e:8c:f2:ab:a3:20:
f0:e7:b8:17:ad:93:fc:40:be:30:87:5b:d2:77:6c:21:7f:b7:
a8:ea:0a:fa:4e:d6:6e:04:37:6d:bd:1b:f8:3a:67:56:1f:b4:
b2:80:4b:7b:5e:5e:c9:da:c2:ca:4f:4e:89:eb:99:44:04:13:
34:cc:9f:41:14:1d:12:cc:1d:ad:15:b6:be:ef:50:7d:a1:b6:
32:1f:68:0d:9c:75:18:c4:0d:5a:9f:cb:cf:6c:41:bc:e5:be:
fa:21:1d:93:ff:93:0f:e8:9b:fa:7f:f3:a7:be:48:7d:53:44:
85:57:85:ed:1d:cc:a1:a2:1b:c2:51:4f:89:5e:07:25:df:b5:
d6:f0:42:1b:c4:0d:94:9a:f4:df:2a:5a:fd:4b:71:e5:84:f4:
04:ab:ec:58:b9:07:5b:04:96:48:32:35:15:e1:09:9d:e5:e4:
84:c9:4d:13:f5:25:dc:53:72:75:06:a8:00:fc:f7:6f:1f:a1:
77:50:0e:6c:c5:92:c5:5d:8d:ec:d7:70:9e:f6:87:84:16:ee:
65:b0:5c:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSeDbF9cwn1IAOY7AVeNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDI1NDVkZTQwMWFkMDdkYzVmNTU5ZGZlNmY1ZDVlMDFjN2I4MGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI5+wJYmnYcpF1KmIhk+RBOhtIzB
5g0maL4F8q7SoljBnXyQiumFK7IHcVumoEyQ62VG8qYp84xEkq2nsypDpnidmIbH
5LvG9wyZdlX3Ae5PxYgDLEwGxCGdeiEY/WQDA+EjwarP8uodhzZI3g34gEoZ6oBK
TLewJ3wYjfxQxc22DLMYIKY5PN2Ijq36Gw4xzfBfD+XhnTeYnpLujRoyWsXUTKyO
rTHgo4qQzzMfXwQNEwdWaUXBFacnYRYQ5FSagBEpQw1RDlA5bdvOtSBa9RHkC5mh
zmUmTI/doC+bdIg8/jU28Bw7xn+dmA/dVnfcqV4k49aoEVDB1H8OHWNk8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC0lRd5AGtB9xfVZ3+b11eAce4DcMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvTFNWRjNrQWEwSDNGOVZuZjV2WFY0Qng3Z053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DIVMA0G
CSqGSIb3DQEBCwUAA4IBAQBQBrONXBDbrCuWID9Z9lPORYiQaxtMijmPcBHvG2gf
NWtRXHMyCsUcNs1snK1DYBQejPKroyDw57gXrZP8QL4wh1vSd2whf7eo6gr6TtZu
BDdtvRv4OmdWH7SygEt7Xl7J2sLKT06J65lEBBM0zJ9BFB0SzB2tFba+71B9obYy
H2gNnHUYxA1an8vPbEG85b76IR2T/5MP6Jv6f/Onvkh9U0SFV4XtHcyhohvCUU+J
Xgcl37XW8EIbxA2UmvTfKlr9S3HlhPQEq+xYuQdbBJZIMjUV4Qmd5eSEyU0T9SXc
U3J1BqgA/PdvH6F3UA5sxZLFXY3s13Ce9oeEFu5lsFyT
-----END CERTIFICATE-----
Generated at Mon May 6 22:52:38 2024 by rpki-client on console-ams.rpki-client.org