Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/ljV-KSzeT_fFae-RhEwCLRgiw3k.roa
File: ljV-KSzeT_fFae-RhEwCLRgiw3k.roa (raw, json)
Hash identifier: W5OCtWOpUFp49NNJfuL4QZvqxBS3H/UtxcdgREEuXNQ=
Subject key identifier: 96:35:7E:29:2C:DE:4F:F7:C5:69:EF:91:84:4C:02:2D:18:22:C3:79
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 018CC72732AF8B36A226C744314F9CC0B759
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/ljV-KSzeT_fFae-RhEwCLRgiw3k.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207176
IP address blocks: 193.56.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:32:af:8b:36:a2:26:c7:44:31:4f:9c:c0:b7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96357e292cde4ff7c569ef91844c022d1822c379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:ce:d8:69:58:99:f9:ee:55:9b:0d:72:21:
f8:4e:b3:2c:96:10:47:0d:50:da:b0:99:7c:04:b1:
be:d0:ea:f0:a2:be:74:b9:f4:8c:f7:bc:86:40:3c:
71:42:a1:2f:45:bd:63:37:6d:8e:56:96:ce:7e:ea:
63:e1:f7:40:f4:aa:33:28:4a:ba:1b:73:42:da:68:
b8:a1:d9:b1:bf:ed:ae:c3:c3:67:cc:8b:39:23:f8:
f4:58:3b:3f:cc:35:30:cc:43:6e:f8:54:95:6d:ba:
dd:15:9c:0a:b1:14:c0:b7:9e:f9:21:1c:65:9f:33:
f6:1a:37:7f:77:65:0b:3d:e4:76:b9:ea:84:a3:60:
0f:36:66:12:09:24:31:e7:0b:43:39:12:81:1c:42:
40:53:8f:1d:75:42:46:ea:27:38:68:cf:94:47:ee:
ee:f8:e6:2e:f6:1f:d9:ba:61:07:99:34:f1:3a:c4:
1b:9b:48:8f:bd:bf:e9:c6:27:8b:2a:18:6c:dc:83:
8c:77:5f:51:f9:c0:70:b2:97:12:f7:5e:c2:88:02:
3a:c9:1d:c1:c7:3d:64:e6:cb:0a:a6:6e:78:f6:fc:
2a:74:a8:40:84:ad:2e:66:62:84:60:68:ff:f8:d8:
fc:a7:a5:23:c2:d0:38:2f:a2:3b:9d:d7:27:69:bf:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:35:7E:29:2C:DE:4F:F7:C5:69:EF:91:84:4C:02:2D:18:22:C3:79
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/ljV-KSzeT_fFae-RhEwCLRgiw3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.14.0/24
Signature Algorithm: sha256WithRSAEncryption
35:95:c9:a8:28:2e:74:71:a9:a2:b9:41:d7:8c:bf:c7:3b:19:
c3:ed:87:01:c5:58:87:b9:7e:30:a9:b9:91:69:cd:97:ee:ea:
88:0d:4c:ec:8e:12:5a:68:ba:c1:d6:be:2c:9f:da:7c:ab:e7:
96:66:08:d0:0a:7e:0e:f2:52:ca:e8:d6:1e:d0:86:4b:b6:cc:
f2:ff:5d:75:3a:9e:ff:f0:6a:6d:d4:f7:5c:c8:5b:ad:17:c0:
24:5a:00:73:43:af:63:41:be:58:3d:c4:38:62:0c:35:59:ff:
3c:6a:7c:12:1d:53:28:03:dd:a6:51:b3:a1:b4:50:04:ff:c6:
b1:c2:cc:0f:02:eb:3e:4c:1a:cf:2e:ec:f0:04:d6:f0:97:5d:
ca:e1:ce:99:18:86:de:6d:c9:cd:6a:c0:8c:9e:5f:9e:68:17:
e8:1e:8b:31:40:ab:1a:4a:20:93:dd:70:59:b6:40:41:b2:53:
ca:fe:f0:2e:73:ab:b7:c3:81:8b:b7:5b:61:eb:e1:db:e2:5b:
dd:14:14:cd:b6:d0:16:ca:80:53:9a:00:a1:f5:d6:6a:1a:19:
84:73:6e:7c:5a:4f:b9:94:8c:d5:50:4e:c5:5b:f4:1c:6e:eb:
b4:4f:51:b0:e8:87:b2:6e:f1:22:eb:33:1d:a1:c7:29:88:aa:
ef:6b:cc:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJzKvizaiJsdEMU+cwLdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy
YjA3N2IwHhcNMjQwMTAxMjIzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjM1N2UyOTJjZGU0ZmY3YzU2OWVmOTE4NDRjMDIyZDE4MjJjMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuDO2GlYmfnuVZsNciH4TrMslhBH
DVDasJl8BLG+0Orwor50ufSM97yGQDxxQqEvRb1jN22OVpbOfupj4fdA9KozKEq6
G3NC2mi4odmxv+2uw8NnzIs5I/j0WDs/zDUwzENu+FSVbbrdFZwKsRTAt575IRxl
nzP2Gjd/d2ULPeR2ueqEo2APNmYSCSQx5wtDORKBHEJAU48ddUJG6ic4aM+UR+7u
+OYu9h/ZumEHmTTxOsQbm0iPvb/pxieLKhhs3IOMd19R+cBwspcS917CiAI6yR3B
xz1k5ssKpm549vwqdKhAhK0uZmKEYGj/+Nj8p6UjwtA4L6I7ndcnab/SYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJY1fiks3k/3xWnvkYRMAi0YIsN5MB8GA1UdIwQY
MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt
NWNlNGQ4ZGJkMTU5LzEvbGpWLUtTemVUX2ZGYWUtUmhFd0NMUmdpdzNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5
LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTgOMA0G
CSqGSIb3DQEBCwUAA4IBAQA1lcmoKC50camiuUHXjL/HOxnD7YcBxViHuX4wqbmR
ac2X7uqIDUzsjhJaaLrB1r4sn9p8q+eWZgjQCn4O8lLK6NYe0IZLtszy/111Op7/
8Gpt1PdcyFutF8AkWgBzQ69jQb5YPcQ4Ygw1Wf88anwSHVMoA92mUbOhtFAE/8ax
wswPAus+TBrPLuzwBNbwl13K4c6ZGIbebcnNasCMnl+eaBfoHosxQKsaSiCT3XBZ
tkBBslPK/vAuc6u3w4GLt1th6+Hb4lvdFBTNttAWyoBTmgCh9dZqGhmEc258Wk+5
lIzVUE7FW/Qcbuu0T1Gw6IeybvEi6zMdoccpiKrva8yz
-----END CERTIFICATE-----
Generated at Tue May 28 12:33:53 2024 by rpki-client on console-ams.rpki-client.org