Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/LNxITSD8taFVvTseW3nyAyO02-s.roa
File: LNxITSD8taFVvTseW3nyAyO02-s.roa (raw, json)
Hash identifier: kZ1X+Vv0P5PQRsuRZcvn4zOre1sAmO4Le2847090tOQ=
Subject key identifier: 2C:DC:48:4D:20:FC:B5:A1:55:BD:3B:1E:5B:79:F2:03:23:B4:DB:EB
Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial: 018CC5013DAAD8CB4A6DF69F312B07DB6B6E
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/LNxITSD8taFVvTseW3nyAyO02-s.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12997
IP address blocks: 212.97.16.0/20 maxlen: 20
37.218.128.0/18 maxlen: 18
37.218.128.0/19 maxlen: 19
212.97.0.0/19 maxlen: 19
212.97.0.0/20 maxlen: 20
185.66.252.0/22 maxlen: 22
185.66.252.0/23 maxlen: 23
185.66.254.0/23 maxlen: 23
37.218.160.0/19 maxlen: 19
212.241.16.0/20 maxlen: 20
85.113.16.0/20 maxlen: 20
80.72.176.0/21 maxlen: 21
80.72.176.0/20 maxlen: 20
89.237.192.0/19 maxlen: 19
89.237.192.0/18 maxlen: 18
80.72.184.0/21 maxlen: 21
31.29.0.0/20 maxlen: 20
31.29.0.0/19 maxlen: 19
89.237.224.0/19 maxlen: 19
212.241.0.0/19 maxlen: 19
85.113.0.0/19 maxlen: 19
212.241.0.0/20 maxlen: 20
85.113.0.0/20 maxlen: 20
213.145.129.0/24 maxlen: 24
213.145.128.0/20 maxlen: 20
213.145.128.0/24 maxlen: 24
213.145.130.0/24 maxlen: 24
213.145.128.0/19 maxlen: 19
213.145.144.0/20 maxlen: 20
213.145.140.0/24 maxlen: 24
31.29.16.0/20 maxlen: 20
195.114.240.0/20 maxlen: 20
195.114.240.0/21 maxlen: 21
195.114.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3d:aa:d8:cb:4a:6d:f6:9f:31:2b:07:db:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cdc484d20fcb5a155bd3b1e5b79f20323b4dbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:1a:a4:11:33:20:8f:74:05:09:c9:ea:7d:
2c:55:a0:11:2c:94:54:04:b7:f2:7f:68:10:7d:74:
55:46:ef:73:d1:c7:ca:ae:93:e2:6a:f0:fe:1e:62:
23:c2:28:81:31:22:75:a5:5c:90:da:11:5e:2b:9d:
2d:dc:df:63:c7:cb:c5:83:13:cb:f9:f8:25:c1:f8:
bc:9f:fb:89:01:5e:66:89:76:da:d7:2a:3b:17:ec:
f8:de:98:83:1c:38:96:b8:ec:37:f8:e3:4f:49:90:
6c:58:4e:4a:41:55:e5:8d:9d:2b:a5:b0:8c:81:d8:
0a:90:fa:f5:d9:bf:36:78:53:fc:2c:39:04:3b:2e:
0e:a2:17:17:cd:56:af:ee:2e:c2:e1:4f:49:42:6d:
20:16:b7:a1:a2:ca:63:6c:4d:5a:79:c4:58:fa:6b:
07:f5:2c:c9:1f:6c:81:9e:b6:7d:a2:5d:a6:12:45:
12:43:29:dc:73:6a:71:0f:eb:1d:d4:80:ed:96:b3:
07:2d:13:da:de:c1:cd:a5:27:1d:02:0d:65:dd:d2:
28:5d:50:a5:c6:65:35:61:aa:ca:18:3c:9e:24:d9:
56:cd:c5:64:1a:79:5c:5b:70:e9:57:35:ae:6a:b9:
4a:f2:c1:55:90:ef:90:23:d8:5c:e0:23:01:89:c5:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:48:4D:20:FC:B5:A1:55:BD:3B:1E:5B:79:F2:03:23:B4:DB:EB
X509v3 Authority Key Identifier:
keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/LNxITSD8taFVvTseW3nyAyO02-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.29.0.0/19
37.218.128.0/18
80.72.176.0/20
85.113.0.0/19
89.237.192.0/18
185.66.252.0/22
195.114.240.0/20
212.97.0.0/19
212.241.0.0/19
213.145.128.0/19
Signature Algorithm: sha256WithRSAEncryption
92:33:1d:06:73:63:7d:dd:ce:88:b9:93:e7:b6:b6:3e:cb:95:
c5:4f:fc:df:a3:41:33:6b:33:bc:fe:db:02:3f:6f:d2:84:e1:
18:ec:40:d3:1b:ae:a3:1c:3f:f8:25:a6:6c:07:3e:9f:dc:43:
e1:84:6c:2f:a6:a1:6d:ac:52:8e:48:f8:9b:ac:4e:d9:bd:af:
ae:a2:42:da:f4:f7:a6:c6:c8:66:3f:d3:92:f9:71:3e:97:9a:
9d:90:cc:fe:79:38:30:9b:28:dc:74:bb:77:80:70:a1:6b:f2:
9a:97:12:e3:f0:8f:cd:f9:82:d1:ec:4e:e2:b8:e3:cb:6e:16:
23:7c:f7:b8:f2:74:71:d5:9b:fe:7b:d2:b8:6e:2b:8e:93:68:
67:9c:f5:9f:ff:85:89:50:d2:05:78:91:c7:65:db:99:45:30:
90:5c:4e:d0:2c:4c:51:6c:53:0d:b3:13:fc:11:ec:8d:c8:92:
a0:9d:ee:e3:df:75:eb:43:13:ac:96:f6:4e:0b:96:c8:ac:71:
34:14:9e:6f:a5:52:44:09:87:43:2a:2a:30:ce:7c:2a:34:7f:
74:d7:ea:1d:79:81:4e:1c:a1:46:38:7e:a1:1e:c0:a3:54:f0:
f8:bc:6d:82:4d:16:43:d9:36:c9:3a:30:4c:3a:69:be:5e:c3:
ef:e7:6e:61
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYzFAT2q2MtKbfafMSsH22tuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjMyMTQyODAwNTVhNDdkZWI1NTRmZTljYjI4ZGMwYzE3
OTIzMDIwHhcNMjQwMTAxMTIzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2RjNDg0ZDIwZmNiNWExNTViZDNiMWU1Yjc5ZjIwMzIzYjRkYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDAapBEzII90BQnJ6n0sVaARLJRU
BLfyf2gQfXRVRu9z0cfKrpPiavD+HmIjwiiBMSJ1pVyQ2hFeK50t3N9jx8vFgxPL
+fglwfi8n/uJAV5miXba1yo7F+z43piDHDiWuOw3+ONPSZBsWE5KQVXljZ0rpbCM
gdgKkPr12b82eFP8LDkEOy4OohcXzVav7i7C4U9JQm0gFrehospjbE1aecRY+msH
9SzJH2yBnrZ9ol2mEkUSQyncc2pxD+sd1IDtlrMHLRPa3sHNpScdAg1l3dIoXVCl
xmU1YarKGDyeJNlWzcVkGnlcW3DpVzWuarlK8sFVkO+QI9hc4CMBicVUQQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFCzcSE0g/LWhVb07Hlt58gMjtNvrMB8GA1UdIwQY
MBaAFBdjIUKABVpH3rVU/pyyjcDBeSMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEt
Nzk2Nzk2MmU3Yzc1LzEvTE54SVRTRDh0YUZWdlRzZVczbnlBeU8wMi1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEtNzk2Nzk2MmU3Yzc1
LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQFHx0AAwQG
JdqAAwQEUEiwAwQFVXEAAwQGWe3AAwQCuUL8AwQEw3LwAwQF1GEAAwQF1PEAAwQF
1ZGAMA0GCSqGSIb3DQEBCwUAA4IBAQCSMx0Gc2N93c6IuZPntrY+y5XFT/zfo0Ez
azO8/tsCP2/ShOEY7EDTG66jHD/4JaZsBz6f3EPhhGwvpqFtrFKOSPibrE7Zva+u
okLa9PemxshmP9OS+XE+l5qdkMz+eTgwmyjcdLt3gHCha/KalxLj8I/N+YLR7E7i
uOPLbhYjfPe48nRx1Zv+e9K4biuOk2hnnPWf/4WJUNIFeJHHZduZRTCQXE7QLExR
bFMNsxP8EeyNyJKgne7j33XrQxOslvZOC5bIrHE0FJ5vpVJECYdDKiowznwqNH90
1+odeYFOHKFGOH6hHsCjVPD4vG2CTRZD2TbJOjBMOmm+XsPv525h
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:14 2024 by rpki-client on console-ams.rpki-client.org