Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/lBC-69ALZDrbcimKLccUStO1ECU.roa
File: lBC-69ALZDrbcimKLccUStO1ECU.roa (raw, json)
Hash identifier: Rv2m9DcOnCbDM+79JRzc9AXF2cB0WPWex+i+9xTEiFE=
Subject key identifier: 94:10:BE:EB:D0:0B:64:3A:DB:72:29:8A:2D:C7:14:4A:D3:B5:10:25
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018CC8DF26C2EBEC5BC2569FBCE426060CB3
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/lBC-69ALZDrbcimKLccUStO1ECU.roa
Signing time: Tue 02 Jan 2024 06:31:56 +0000
ROA not before: Tue 02 Jan 2024 06:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211504
IP address blocks: 178.175.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:26:c2:eb:ec:5b:c2:56:9f:bc:e4:26:06:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9410beebd00b643adb72298a2dc7144ad3b51025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:b2:4e:a3:2d:a2:72:b1:d3:c5:33:75:e4:
4a:13:62:f3:ca:a8:8f:ac:15:0f:31:06:16:52:f9:
d1:a4:9b:25:e9:90:0d:78:63:b3:f4:71:0b:7c:aa:
0c:4a:87:32:a5:ff:7c:09:c1:90:93:9f:0c:55:a5:
b7:0e:63:8e:4f:41:e4:77:f2:ae:e6:3e:bc:c3:3e:
f7:9b:0a:d9:c9:2d:d4:75:ab:4f:59:b6:3a:c9:ab:
93:07:7e:04:7c:87:8c:08:c5:95:36:e3:3c:30:90:
b5:39:22:cb:1a:02:69:e1:7b:90:19:70:69:33:fe:
d2:af:c7:a0:8e:7e:77:03:a3:b9:c1:87:b6:a8:b9:
42:20:75:fb:06:b9:1c:0e:9a:5b:1e:01:2d:fa:d1:
40:57:ea:98:bb:fa:90:21:d5:89:67:1f:a5:0c:df:
f5:88:04:78:16:39:32:d3:28:b4:be:b9:7d:f3:8e:
43:07:0f:08:4a:eb:c6:a7:8a:df:94:dd:87:f3:b8:
fa:f9:aa:71:f6:46:29:3e:af:91:e8:b4:00:8d:5c:
65:71:09:6d:0a:dc:00:54:1f:32:58:d6:67:78:a9:
2b:1a:a9:35:c0:ce:1a:51:aa:7d:29:01:e4:a1:9b:
3a:2f:65:5a:52:3e:9d:e7:ab:52:82:f8:e3:1a:c3:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:BE:EB:D0:0B:64:3A:DB:72:29:8A:2D:C7:14:4A:D3:B5:10:25
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/lBC-69ALZDrbcimKLccUStO1ECU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:26:65:6a:78:27:f7:a7:9e:fb:05:05:d1:9d:23:e9:43:12:
dd:f2:0a:99:ba:06:11:4b:1e:0b:cb:84:f5:b6:90:01:29:fe:
1b:4a:d6:54:9f:c3:4f:4c:a2:35:28:00:d4:bc:2c:00:d3:50:
9b:5d:86:0b:7a:36:55:65:3d:4f:04:3e:5c:d2:b4:94:d5:06:
c0:6b:53:59:4b:ff:71:1a:0c:ae:07:c2:a0:1a:4a:e0:31:09:
9f:69:54:c7:ce:05:20:98:47:93:66:f9:b1:e2:21:00:47:81:
18:32:bd:37:ea:76:cd:55:17:6e:d3:54:e8:4d:36:13:aa:5d:
1f:dc:5e:06:ca:78:d7:1b:86:42:9a:2c:07:c8:d2:c0:6f:63:
a3:1d:77:04:67:35:5a:9c:53:82:a7:96:dd:9b:57:f7:b2:c8:
08:4d:f1:d8:b2:9c:d2:9f:7c:ad:ad:56:34:4c:cf:83:39:ae:
fd:c2:ef:49:18:b1:ed:5e:69:07:df:99:37:50:e0:1b:07:96:
94:8b:d7:d9:62:a8:32:77:a8:90:3b:73:6a:96:c2:32:30:d6:
f8:a8:29:6f:af:7a:ae:b4:9c:d2:c0:3e:b0:1a:8d:4a:26:38:
4a:78:46:ab:b3:e2:15:64:5e:58:dc:8b:29:27:76:47:56:05:
51:d4:6f:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3ybC6+xbwlafvOQmBgyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjQwMTAyMDYzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDEwYmVlYmQwMGI2NDNhZGI3MjI5OGEyZGM3MTQ0YWQzYjUxMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD+yTqMtonKx08UzdeRKE2LzyqiP
rBUPMQYWUvnRpJsl6ZANeGOz9HELfKoMSocypf98CcGQk58MVaW3DmOOT0Hkd/Ku
5j68wz73mwrZyS3UdatPWbY6yauTB34EfIeMCMWVNuM8MJC1OSLLGgJp4XuQGXBp
M/7Sr8egjn53A6O5wYe2qLlCIHX7BrkcDppbHgEt+tFAV+qYu/qQIdWJZx+lDN/1
iAR4Fjky0yi0vrl9845DBw8ISuvGp4rflN2H87j6+apx9kYpPq+R6LQAjVxlcQlt
CtwAVB8yWNZneKkrGqk1wM4aUap9KQHkoZs6L2VaUj6d56tSgvjjGsMzuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQQvuvQC2Q623Ipii3HFErTtRAlMB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvbEJDLTY5QUxaRHJiY2ltS0xjY1VTdE8xRUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+nMA0G
CSqGSIb3DQEBCwUAA4IBAQA8JmVqeCf3p577BQXRnSPpQxLd8gqZugYRSx4Ly4T1
tpABKf4bStZUn8NPTKI1KADUvCwA01CbXYYLejZVZT1PBD5c0rSU1QbAa1NZS/9x
GgyuB8KgGkrgMQmfaVTHzgUgmEeTZvmx4iEAR4EYMr036nbNVRdu01ToTTYTql0f
3F4GynjXG4ZCmiwHyNLAb2OjHXcEZzVanFOCp5bdm1f3ssgITfHYspzSn3ytrVY0
TM+DOa79wu9JGLHtXmkH35k3UOAbB5aUi9fZYqgyd6iQO3NqlsIyMNb4qClvr3qu
tJzSwD6wGo1KJjhKeEars+IVZF5Y3IspJ3ZHVgVR1G9G
-----END CERTIFICATE-----
Generated at Wed May 15 19:32:58 2024 by rpki-client on console-ams.rpki-client.org