Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/NQHCfQfXwDB-zHIZxetSEDb_Lok.roa
File: NQHCfQfXwDB-zHIZxetSEDb_Lok.roa (raw, json)
Hash identifier: 4Yyn6Ij/JWFuP6WXAT7YJ6vdXDd2buTqy+wsnsZMuys=
Subject key identifier: 35:01:C2:7D:07:D7:C0:30:7E:CC:72:19:C5:EB:52:10:36:FF:2E:89
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018EE30348FE323675F4397A9A99855CDBE4
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/NQHCfQfXwDB-zHIZxetSEDb_Lok.roa
Signing time: Mon 15 Apr 2024 18:27:07 +0000
ROA not before: Mon 15 Apr 2024 18:27:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43444
IP address blocks: 193.233.128.0/22 maxlen: 22
193.233.208.0/23 maxlen: 23
193.233.216.0/22 maxlen: 22
193.233.220.0/23 maxlen: 23
193.233.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:03:48:fe:32:36:75:f4:39:7a:9a:99:85:5c:db:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 15 18:27:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3501c27d07d7c0307ecc7219c5eb521036ff2e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:77:a9:b2:b3:55:cb:8f:0e:cd:1d:60:2a:
29:61:41:58:27:a7:8a:4c:e7:8d:82:98:8a:a4:b8:
79:eb:51:17:08:4e:6b:6f:dd:28:38:82:7d:c5:30:
c3:77:70:f1:54:3c:f6:10:0c:38:c6:f8:9e:dd:0f:
2b:62:1d:e2:e4:8d:37:49:1d:70:cf:1b:30:78:c6:
49:47:d6:f8:b6:90:fc:79:99:32:ad:8d:f1:a6:4a:
c2:e0:d1:54:14:f0:94:59:e5:ed:cb:80:1c:35:19:
7c:d7:12:15:a2:cd:92:52:5b:99:d8:28:a8:06:a0:
ca:e9:03:12:62:ab:ef:28:0b:28:1b:ff:4b:e9:87:
6d:9a:0d:55:a1:c7:aa:66:6c:86:2b:76:d8:4d:68:
bf:ed:74:fc:f5:42:05:cb:ab:2d:9d:f9:08:3c:6e:
50:ef:3f:79:81:ef:87:01:1e:bc:71:15:8d:c5:94:
76:34:a0:7b:3d:3f:55:01:c7:8f:4c:00:36:8f:80:
12:6c:b2:99:cd:bf:fd:5e:57:e1:c6:f7:01:32:7b:
11:75:61:3f:e5:a1:ce:5d:fc:fa:17:b7:a2:32:cd:
fc:8c:08:af:e7:97:51:5d:92:ac:82:01:cb:7a:89:
5f:32:94:c8:f2:8b:6a:2f:7d:ac:b7:16:23:d6:e3:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:C2:7D:07:D7:C0:30:7E:CC:72:19:C5:EB:52:10:36:FF:2E:89
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/NQHCfQfXwDB-zHIZxetSEDb_Lok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.128.0/22
193.233.208.0/23
193.233.216.0/21
Signature Algorithm: sha256WithRSAEncryption
23:70:58:84:8d:b1:33:2a:d3:81:ba:d2:c1:6e:35:89:f9:ae:
f4:76:e7:f3:e2:33:8d:9e:18:e6:7a:39:f0:f6:7c:9b:30:a1:
5b:3a:3d:22:e9:4f:70:3f:5c:07:78:17:25:0f:6b:15:f6:2e:
91:df:58:a1:f1:cb:a2:26:c9:93:59:28:ba:a7:bf:2f:d1:16:
e0:f1:0b:9e:f4:5a:62:6b:91:d7:84:b7:11:ae:75:9b:dc:3c:
5a:7f:ce:1f:28:14:b6:f6:15:65:b0:dd:87:ba:d1:b1:89:1a:
a4:e7:aa:3d:32:57:c3:76:0f:c7:26:92:41:a2:ac:5b:d7:af:
4b:90:3b:4e:5a:c9:6e:9a:f7:c8:c6:96:7e:95:b0:01:22:42:
81:a4:51:47:c4:ff:be:bc:66:5c:35:72:bc:c8:b4:c4:59:ac:
d6:59:f6:cb:51:bd:0f:e0:9e:5b:72:36:d9:69:01:8a:13:ff:
63:61:6c:ae:46:7b:22:d8:f6:6c:93:27:33:f4:fe:a9:64:ec:
c8:ed:8c:2c:f0:77:26:4b:ca:ac:e9:5b:2f:8c:50:59:71:a1:
88:56:dd:83:e7:48:45:25:dd:6b:fc:55:37:f2:d1:64:47:8f:
69:a8:1c:ce:02:b1:58:ed:66:85:f9:2e:59:78:8c:ce:aa:68:
88:44:e9:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY7jA0j+MjZ19Dl6mpmFXNvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwNDE1MTgyNzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTAxYzI3ZDA3ZDdjMDMwN2VjYzcyMTljNWViNTIxMDM2ZmYyZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoN3qbKzVcuPDs0dYCopYUFYJ6eK
TOeNgpiKpLh561EXCE5rb90oOIJ9xTDDd3DxVDz2EAw4xvie3Q8rYh3i5I03SR1w
zxsweMZJR9b4tpD8eZkyrY3xpkrC4NFUFPCUWeXty4AcNRl81xIVos2SUluZ2Cio
BqDK6QMSYqvvKAsoG/9L6Ydtmg1VoceqZmyGK3bYTWi/7XT89UIFy6stnfkIPG5Q
7z95ge+HAR68cRWNxZR2NKB7PT9VAcePTAA2j4ASbLKZzb/9XlfhxvcBMnsRdWE/
5aHOXfz6F7eiMs38jAiv55dRXZKsggHLeolfMpTI8otqL32stxYj1uM3gQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDUBwn0H18AwfsxyGcXrUhA2/y6JMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvTlFIQ2ZRZlh3REItekhJWnhldFNFRGJfTG9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCwemAAwQB
wenQAwQDwenYMA0GCSqGSIb3DQEBCwUAA4IBAQAjcFiEjbEzKtOButLBbjWJ+a70
dufz4jONnhjmejnw9nybMKFbOj0i6U9wP1wHeBclD2sV9i6R31ih8cuiJsmTWSi6
p78v0Rbg8Que9Fpia5HXhLcRrnWb3Dxaf84fKBS29hVlsN2HutGxiRqk56o9MlfD
dg/HJpJBoqxb169LkDtOWslumvfIxpZ+lbABIkKBpFFHxP++vGZcNXK8yLTEWazW
WfbLUb0P4J5bcjbZaQGKE/9jYWyuRnsi2PZskycz9P6pZOzI7Yws8HcmS8qs6Vsv
jFBZcaGIVt2D50hFJd1r/FU38tFkR49pqBzOArFY7WaF+S5ZeIzOqmiIROnb
-----END CERTIFICATE-----
Generated at Sun May 5 06:16:02 2024 by rpki-client on console-ams.rpki-client.org