Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/cKLlZpVyVVX6LGYCSz9Agz8N_oM.roa
File: cKLlZpVyVVX6LGYCSz9Agz8N_oM.roa (raw, json)
Hash identifier: iDUATfm6+3aaYZBecjAuXbw8yvLYB5I7Z6xA0NdvBcE=
Subject key identifier: 70:A2:E5:66:95:72:55:55:FA:2C:66:02:4B:3F:40:83:3F:0D:FE:83
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 01907C4DE7723076621669F2FC9FE63F4758
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/cKLlZpVyVVX6LGYCSz9Agz8N_oM.roa
Signing time: Thu 04 Jul 2024 05:53:18 +0000
ROA not before: Thu 04 Jul 2024 05:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205240
IP address blocks: 193.218.204.0/24 maxlen: 24
193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
2a0f:99c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:4d:e7:72:30:76:62:16:69:f2:fc:9f:e6:3f:47:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jul 4 05:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70a2e56695725555fa2c66024b3f40833f0dfe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:20:56:2b:d9:a3:e7:18:c9:26:22:6a:54:
a6:a5:91:51:0a:2b:5e:e5:22:55:da:00:77:60:1d:
7d:a8:04:00:7a:a5:70:74:37:02:a6:b7:64:4b:9e:
05:8b:60:ec:2c:6e:37:d4:11:70:54:cf:73:9f:11:
6f:f8:dc:11:f5:03:ee:f4:14:1b:d3:6b:47:3c:f7:
76:f8:0a:07:1d:58:a5:c7:b0:a8:13:35:46:7e:46:
e0:61:e3:51:36:f4:6b:a8:2d:ed:ae:12:76:d0:fa:
41:ec:16:4f:0a:82:ab:65:aa:0e:b4:e2:ab:6b:ed:
b3:2d:98:b1:f6:02:ec:14:d9:b5:35:3f:d8:9c:76:
76:44:40:0b:45:56:41:d9:1f:5e:02:c7:27:14:ff:
f6:92:be:b1:21:90:0b:4e:0e:4c:37:77:d1:a1:74:
94:59:41:6c:c7:36:6d:35:fb:77:43:ce:a0:50:b3:
f5:44:17:38:2f:ea:44:bd:54:ec:15:d0:cf:c1:e8:
5f:b6:21:b8:f3:fe:87:c8:5f:4b:5a:1d:73:8e:b3:
ef:57:e7:b9:c3:47:75:6f:e9:6c:9f:45:8c:5f:5e:
47:e0:60:75:78:39:30:f5:6f:0c:74:8b:10:a5:da:
68:81:6b:9c:35:d6:a1:f0:e7:24:d9:2e:aa:4b:ab:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:E5:66:95:72:55:55:FA:2C:66:02:4B:3F:40:83:3F:0D:FE:83
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/cKLlZpVyVVX6LGYCSz9Agz8N_oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
193.218.222.0/24
193.219.0.0/24
IPv6:
2a0f:99c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:47:ff:40:8a:58:ab:e0:62:ff:a5:ec:2d:51:77:23:8d:ea:
9e:4d:9e:10:e7:8d:b0:cb:30:6e:e9:cf:f1:4b:39:23:a9:69:
61:7e:2d:59:65:1b:47:96:06:3c:c0:f0:41:ff:3c:de:82:19:
3d:44:52:8a:b6:3e:b8:82:9a:bd:63:5f:c4:b1:de:be:e0:df:
93:a6:85:96:6e:12:2e:13:e0:8b:74:e2:96:ee:ec:5c:a3:03:
ff:31:29:87:73:16:e5:87:6c:16:68:8b:30:61:ec:af:3c:4b:
f9:ab:00:a1:d5:84:df:8a:ba:b9:b9:81:eb:92:9b:d9:e9:1d:
1b:86:66:52:55:60:dc:d2:b1:78:fc:18:e2:a6:ed:4b:f1:96:
93:75:95:ca:cd:2d:eb:5d:f3:b1:21:14:65:5f:3b:16:9e:b4:
b0:eb:b4:02:c5:b1:1f:ba:ae:0e:2b:fa:c5:f6:49:61:ae:0b:
9f:d5:39:eb:f4:81:6e:86:94:69:b4:10:48:be:c1:ba:b8:60:
48:bd:49:50:46:94:d9:22:18:1f:94:b8:e6:0f:fd:de:5f:7f:
77:a4:c8:02:ee:3a:d2:fb:bd:a6:6e:90:bb:f2:9b:56:50:d0:
5f:51:40:e1:c9:2d:d9:97:1d:e6:f6:51:3e:dd:c4:ca:a0:69:
13:e4:e9:09
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZB8TedyMHZiFmny/J/mP0dYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi
ODg2NWMwHhcNMjQwNzA0MDU1MzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGEyZTU2Njk1NzI1NTU1ZmEyYzY2MDI0YjNmNDA4MzNmMGRmZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7IgVivZo+cYySYialSmpZFRCite
5SJV2gB3YB19qAQAeqVwdDcCprdkS54Fi2DsLG431BFwVM9znxFv+NwR9QPu9BQb
02tHPPd2+AoHHVilx7CoEzVGfkbgYeNRNvRrqC3trhJ20PpB7BZPCoKrZaoOtOKr
a+2zLZix9gLsFNm1NT/YnHZ2REALRVZB2R9eAscnFP/2kr6xIZALTg5MN3fRoXSU
WUFsxzZtNft3Q86gULP1RBc4L+pEvVTsFdDPwehftiG48/6HyF9LWh1zjrPvV+e5
w0d1b+lsn0WMX15H4GB1eDkw9W8MdIsQpdpogWucNdah8Ock2S6qS6uIWwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFHCi5WaVclVV+ixmAks/QIM/Df6DMB8GA1UdIwQY
MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It
ODk3OTlkZWFkYzQ3LzEvY0tMbFpwVnlWVlg2TEdZQ1N6OUFnejhOX29NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3
LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwdrMAwQA
wdreAwQAwdsAMA8EAgACMAkDBwAqD5nAAAAwDQYJKoZIhvcNAQELBQADggEBAENH
/0CKWKvgYv+l7C1RdyON6p5NnhDnjbDLMG7pz/FLOSOpaWF+LVllG0eWBjzA8EH/
PN6CGT1EUoq2PriCmr1jX8Sx3r7g35OmhZZuEi4T4It04pbu7FyjA/8xKYdzFuWH
bBZoizBh7K88S/mrAKHVhN+Kurm5geuSm9npHRuGZlJVYNzSsXj8GOKm7UvxlpN1
lcrNLetd87EhFGVfOxaetLDrtALFsR+6rg4r+sX2SWGuC5/VOev0gW6GlGm0EEi+
wbq4YEi9SVBGlNkiGB+UuOYP/d5ff3ekyALuOtL7vaZukLvym1ZQ0F9RQOHJLdmX
Heb2UT7dxMqgaRPk6Qk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:52 2024 by rpki-client on console-ams.rpki-client.org