Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LIkelvP9gT5080JSBVJcciia008.roa
File: LIkelvP9gT5080JSBVJcciia008.roa (raw, json)
Hash identifier: 9I+sctpqCuQwyjdpC95JHM6sA1E53zCnrcF1HSyASFQ=
Subject key identifier: 2C:89:1E:96:F3:FD:81:3E:74:F3:42:52:05:52:5C:72:28:9A:D3:4F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C135899CAD698790D9797E2516EEC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LIkelvP9gT5080JSBVJcciia008.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16157
IP address blocks: 194.176.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:13:58:99:ca:d6:98:79:0d:97:97:e2:51:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c891e96f3fd813e74f3425205525c72289ad34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:5e:76:3a:47:15:00:8e:77:e1:35:c4:e5:
3e:98:9e:0a:81:db:63:ab:84:26:f2:dc:40:d9:e1:
5e:ec:de:5d:4d:d1:7c:3d:0d:0c:f2:91:41:84:db:
9e:54:6a:65:ba:ca:20:22:96:6f:33:c6:25:a4:1b:
81:b5:b2:ef:b4:24:5a:31:5f:70:8e:fc:fc:cd:f9:
b9:c6:82:b6:b8:3c:bc:74:e8:57:20:7a:06:8e:3b:
71:94:f7:d4:d3:f9:3e:25:04:96:07:75:64:f5:28:
7f:28:a2:67:0a:52:56:00:b8:99:a9:87:8a:ae:24:
59:45:1d:f0:2a:07:ef:70:a9:db:c3:f9:6f:86:87:
f0:19:95:70:94:5a:56:1d:f1:63:51:73:ad:38:68:
a0:08:aa:e2:94:3f:de:46:48:6b:4f:61:91:15:a0:
6f:9e:2b:98:f9:9e:55:f1:cc:90:7c:a5:2e:cf:01:
6d:8f:3d:01:ea:17:56:4a:2c:62:e8:8c:83:ae:80:
df:35:20:c1:69:48:a9:7a:33:41:0d:02:79:4d:13:
20:46:99:ba:e6:a4:76:f9:e2:eb:8f:e1:a7:e1:7d:
9a:20:1b:9c:1c:4a:cd:67:97:38:3e:d3:da:c3:dc:
e9:89:a5:50:8d:af:90:13:80:6e:e7:ff:07:ac:34:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:1E:96:F3:FD:81:3E:74:F3:42:52:05:52:5C:72:28:9A:D3:4F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LIkelvP9gT5080JSBVJcciia008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ef:e5:47:31:75:b2:4a:39:6e:9b:a0:ef:53:9b:fc:b0:b3:
d7:29:29:a2:cd:56:3b:06:7e:84:81:a5:b9:6a:0b:07:4a:18:
62:ac:2d:25:b9:d7:dc:33:02:50:4f:e4:7c:4f:85:af:25:42:
ac:73:83:9a:01:93:74:10:c6:09:58:77:02:61:90:d1:d2:2c:
c7:49:87:57:12:76:ec:b2:73:b7:be:a0:27:d5:cf:c2:4f:4c:
73:9e:67:ce:f8:f5:c8:31:5e:d1:18:cd:52:f7:f1:44:76:88:
93:31:5a:9e:63:c2:e6:fb:14:7a:5b:e0:50:84:12:90:c1:1c:
8e:f3:98:30:8c:f9:90:cb:32:26:c6:e8:f5:a8:06:6b:18:d8:
9a:76:c1:d8:9a:b2:9c:33:4d:91:f7:0c:f2:22:36:3d:e6:97:
65:15:d0:93:15:ba:84:e8:d0:90:87:80:5c:72:f6:8b:ab:a5:
a6:79:ad:78:13:ec:55:6d:a5:18:1a:ba:00:07:75:62:4e:2f:
b2:b8:55:13:e1:ea:0f:00:6a:d5:a8:b5:14:a5:4e:d0:b7:f7:
f0:7e:19:f0:45:fa:29:19:b7:bd:de:cd:50:b0:25:1d:0a:b9:
d8:cd:8a:db:ad:49:60:27:4e:c5:8c:1a:f6:8f:05:19:d6:3a:
d5:1e:1f:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjBNYmcrWmHkNl5fiUW7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzg5MWU5NmYzZmQ4MTNlNzRmMzQyNTIwNTUyNWM3MjI4OWFkMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOhedjpHFQCOd+E1xOU+mJ4Kgdtj
q4Qm8txA2eFe7N5dTdF8PQ0M8pFBhNueVGplusogIpZvM8YlpBuBtbLvtCRaMV9w
jvz8zfm5xoK2uDy8dOhXIHoGjjtxlPfU0/k+JQSWB3Vk9Sh/KKJnClJWALiZqYeK
riRZRR3wKgfvcKnbw/lvhofwGZVwlFpWHfFjUXOtOGigCKrilD/eRkhrT2GRFaBv
niuY+Z5V8cyQfKUuzwFtjz0B6hdWSixi6IyDroDfNSDBaUipejNBDQJ5TRMgRpm6
5qR2+eLrj+Gn4X2aIBucHErNZ5c4PtPaw9zpiaVQja+QE4Bu5/8HrDQt2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyJHpbz/YE+dPNCUgVSXHIomtNPMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvTElrZWx2UDlnVDUwODBKU0JWSmNjaWlhMDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrC5MA0G
CSqGSIb3DQEBCwUAA4IBAQAM7+VHMXWySjlum6DvU5v8sLPXKSmizVY7Bn6EgaW5
agsHShhirC0ludfcMwJQT+R8T4WvJUKsc4OaAZN0EMYJWHcCYZDR0izHSYdXEnbs
snO3vqAn1c/CT0xznmfO+PXIMV7RGM1S9/FEdoiTMVqeY8Lm+xR6W+BQhBKQwRyO
85gwjPmQyzImxuj1qAZrGNiadsHYmrKcM02R9wzyIjY95pdlFdCTFbqE6NCQh4Bc
cvaLq6Wmea14E+xVbaUYGroAB3ViTi+yuFUT4eoPAGrVqLUUpU7Qt/fwfhnwRfop
Gbe93s1QsCUdCrnYzYrbrUlgJ07FjBr2jwUZ1jrVHh9U
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:52:57 2025 by rpki-client