Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/LgvUCkOBmA-WrsVjp61oeQFziw8.roa
File: LgvUCkOBmA-WrsVjp61oeQFziw8.roa (raw, json)
Hash identifier: QDywqc02VPqmtZKP6X7M4JDz5Q+TQAqe8aE73oAed3k=
Subject key identifier: 2E:0B:D4:0A:43:81:98:0F:96:AE:C5:63:A7:AD:68:79:01:73:8B:0F
Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial: 018CC56E5A7F1A0E2A78365733F90624059F
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/LgvUCkOBmA-WrsVjp61oeQFziw8.roa
Signing time: Mon 01 Jan 2024 14:29:52 +0000
ROA not before: Mon 01 Jan 2024 14:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50446
IP address blocks: 91.216.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5a:7f:1a:0e:2a:78:36:57:33:f9:06:24:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
Validity
Not Before: Jan 1 14:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e0bd40a4381980f96aec563a7ad687901738b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:a2:1c:a9:14:52:c0:30:fc:f3:7e:6a:d8:
06:92:ab:bf:64:68:95:30:d9:71:14:70:cf:54:92:
e4:da:d8:36:86:c3:ae:aa:a3:f9:f8:0f:c4:ac:f0:
30:99:a1:d7:39:83:d4:8d:29:35:77:66:b5:e7:c3:
95:84:c4:62:23:dc:0b:98:83:25:5f:60:f6:84:ab:
20:a4:37:90:13:ed:d1:57:9b:b8:40:bd:c1:ac:76:
8d:00:6e:a9:f0:6b:0c:d3:76:a1:8c:c6:84:22:70:
cd:66:5a:26:da:be:63:c4:17:44:76:de:fb:e4:bf:
50:37:2f:1c:8d:d9:0e:bb:14:9d:b0:99:25:a2:f2:
e4:d7:5c:fd:55:fa:51:78:ca:5b:b5:d4:64:8f:94:
4b:c6:81:f7:05:38:41:98:56:68:fa:fe:01:80:cc:
ca:a9:37:44:9e:be:df:40:eb:1b:ba:7c:4e:1c:7c:
6b:12:8c:00:41:0a:a3:01:d0:e6:75:0a:3e:95:e3:
04:fb:da:20:6c:51:e1:37:9f:df:7f:70:05:0e:70:
55:f6:f9:58:c7:90:ea:f3:4d:db:d0:2e:9c:0a:01:
ec:93:ac:1c:02:af:1c:1c:e8:82:99:5f:c2:c4:20:
1a:44:8b:25:98:3a:fd:fb:14:fa:7d:21:f7:21:b6:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:D4:0A:43:81:98:0F:96:AE:C5:63:A7:AD:68:79:01:73:8B:0F
X509v3 Authority Key Identifier:
keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/LgvUCkOBmA-WrsVjp61oeQFziw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.234.0/24
Signature Algorithm: sha256WithRSAEncryption
60:20:87:33:41:55:58:13:cd:23:6c:85:0c:01:6c:8f:db:58:
d8:c4:fb:8a:aa:37:c6:40:65:c3:e9:d4:23:4e:b7:cf:01:15:
06:98:e8:dc:5e:7f:f1:02:74:a2:3c:33:ac:50:88:c9:9f:a8:
56:a2:44:16:ec:38:05:ca:7e:cc:b4:b6:79:b9:1d:af:3e:32:
4b:d9:dc:38:f1:0c:c0:cc:13:0e:67:90:00:2c:83:35:9d:d5:
c1:a3:3b:d4:0f:4c:36:03:cb:d7:99:65:1d:ce:f1:b6:56:bb:
98:0c:71:1f:73:48:ca:7d:6b:05:6b:a7:0e:ea:c4:52:f8:db:
62:26:73:28:a8:45:b8:b8:52:90:88:fa:bc:94:f8:6a:fe:95:
a7:32:09:2a:26:1f:ef:71:68:dd:c8:d1:7a:fe:5f:40:43:59:
18:2c:b8:8c:3b:29:be:53:df:57:0b:92:f2:62:5c:87:04:63:
de:0e:77:94:ba:cd:ae:38:bb:d0:f4:23:e3:e1:db:64:82:b7:
0d:11:6c:38:88:62:f8:76:04:be:50:fd:35:5c:15:2c:42:41:
0a:26:79:96:b2:fb:68:52:0d:38:5e:ea:e3:5d:96:82:9b:69:
85:1d:23:e1:39:50:29:aa:0f:99:c7:e9:48:8e:3b:fc:9a:0c:
82:1b:e1:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFblp/Gg4qeDZXM/kGJAWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDg4MWZhM2U3NWEzODUxY2Y3MDQxOTEzNWFiZGQ1Mjlk
MmY2ODIwHhcNMjQwMTAxMTQyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTBiZDQwYTQzODE5ODBmOTZhZWM1NjNhN2FkNjg3OTAxNzM4YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXSiHKkUUsAw/PN+atgGkqu/ZGiV
MNlxFHDPVJLk2tg2hsOuqqP5+A/ErPAwmaHXOYPUjSk1d2a158OVhMRiI9wLmIMl
X2D2hKsgpDeQE+3RV5u4QL3BrHaNAG6p8GsM03ahjMaEInDNZlom2r5jxBdEdt77
5L9QNy8cjdkOuxSdsJklovLk11z9VfpReMpbtdRkj5RLxoH3BThBmFZo+v4BgMzK
qTdEnr7fQOsbunxOHHxrEowAQQqjAdDmdQo+leME+9ogbFHhN5/ff3AFDnBV9vlY
x5Dq803b0C6cCgHsk6wcAq8cHOiCmV/CxCAaRIslmDr9+xT6fSH3IbYpAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4L1ApDgZgPlq7FY6etaHkBc4sPMB8GA1UdIwQY
MBaAFLFIgfo+daOFHPcEGRNavdUp0vaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUt
MjBmMzMzYzI1M2FjLzEvTGd2VUNrT0JtQS1XcnNWanA2MW9lUUZ6aXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUtMjBmMzMzYzI1M2Fj
LzEvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jqMA0G
CSqGSIb3DQEBCwUAA4IBAQBgIIczQVVYE80jbIUMAWyP21jYxPuKqjfGQGXD6dQj
TrfPARUGmOjcXn/xAnSiPDOsUIjJn6hWokQW7DgFyn7MtLZ5uR2vPjJL2dw48QzA
zBMOZ5AALIM1ndXBozvUD0w2A8vXmWUdzvG2VruYDHEfc0jKfWsFa6cO6sRS+Nti
JnMoqEW4uFKQiPq8lPhq/pWnMgkqJh/vcWjdyNF6/l9AQ1kYLLiMOym+U99XC5Ly
YlyHBGPeDneUus2uOLvQ9CPj4dtkgrcNEWw4iGL4dgS+UP01XBUsQkEKJnmWsvto
Ug04XurjXZaCm2mFHSPhOVApqg+Zx+lIjjv8mgyCG+Fw
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:26 2024 by rpki-client on console-ams.rpki-client.org