Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/lWmAEUej78bWvoFKmPcvwhKShCU.roa
File: lWmAEUej78bWvoFKmPcvwhKShCU.roa (raw, json)
Hash identifier: Ls3Ry0++hcY26+zO3iusUQMpCRa7Kvwe1VMvQcqxvHo=
Subject key identifier: 95:69:80:11:47:A3:EF:C6:D6:BE:81:4A:98:F7:2F:C2:12:92:84:25
Certificate issuer: /CN=679d712b0ce66f4ed9b9340802cce29c2edb2b0d
Certificate serial: 018CC26D040182F4C0D756AF7B14A76C07A7
Authority key identifier: 67:9D:71:2B:0C:E6:6F:4E:D9:B9:34:08:02:CC:E2:9C:2E:DB:2B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z51xKwzmb07ZuTQIAszinC7bKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/lWmAEUej78bWvoFKmPcvwhKShCU.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62214
IP address blocks: 185.87.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/Z51xKwzmb07ZuTQIAszinC7bKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/Z51xKwzmb07ZuTQIAszinC7bKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z51xKwzmb07ZuTQIAszinC7bKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:04:01:82:f4:c0:d7:56:af:7b:14:a7:6c:07:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679d712b0ce66f4ed9b9340802cce29c2edb2b0d
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9569801147a3efc6d6be814a98f72fc212928425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:23:6a:8d:b9:a5:77:46:a2:2b:c9:70:ff:
90:99:4f:9f:08:1a:5a:7d:a2:8a:e0:33:38:0b:10:
48:0d:63:40:28:12:04:2b:99:7d:e8:63:7f:aa:dd:
9c:16:3b:4d:b7:f2:5b:6f:24:bb:47:02:c3:24:aa:
92:58:63:ad:8e:09:b7:74:da:0e:80:72:86:f8:ef:
5b:fe:e2:de:bb:dc:4f:d2:00:4f:b5:1e:68:59:33:
21:15:f1:5b:87:6d:10:e7:40:b5:9d:94:da:e7:e0:
90:ed:6e:95:81:78:a4:ae:9c:43:e6:ba:f8:b8:fd:
1b:60:0a:1e:91:4a:84:df:7d:90:52:6e:35:42:c6:
5b:6b:2c:75:02:e0:6a:5b:d5:ed:56:01:b5:c9:c2:
a9:32:63:f3:4c:03:6f:87:c8:27:3b:7e:9a:84:00:
4a:b2:e9:08:92:b9:3e:5b:ed:f7:c6:5a:58:60:29:
0b:45:e2:3c:8f:7b:43:dd:7e:47:1b:4a:a4:59:2c:
73:82:61:6e:fb:9c:e9:74:ed:a7:13:63:b5:57:51:
2e:d7:01:93:6e:3e:d7:b1:b8:16:6b:0a:51:8f:ea:
e1:f7:4f:ad:81:81:56:ba:b3:19:7c:c9:b9:13:1d:
63:7a:b8:c2:d9:ff:74:73:9a:16:33:c0:1f:b8:4a:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:69:80:11:47:A3:EF:C6:D6:BE:81:4A:98:F7:2F:C2:12:92:84:25
X509v3 Authority Key Identifier:
keyid:67:9D:71:2B:0C:E6:6F:4E:D9:B9:34:08:02:CC:E2:9C:2E:DB:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z51xKwzmb07ZuTQIAszinC7bKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/lWmAEUej78bWvoFKmPcvwhKShCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/Z51xKwzmb07ZuTQIAszinC7bKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.60.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f8:20:43:ff:6b:34:38:8b:c5:3e:2c:a8:1e:39:e1:0f:ec:
47:a2:d8:c4:e6:27:a6:fc:3f:a7:ec:50:a6:80:e1:e5:b6:5f:
45:ee:84:3d:20:fd:85:2a:88:d5:0d:2d:4d:01:82:d2:28:d4:
3e:5f:71:b7:79:40:4e:af:e2:7d:dc:cc:9a:f7:46:e3:5f:ff:
64:96:49:14:bf:ea:8b:6c:cb:18:e6:aa:9e:08:a7:de:16:e7:
56:b4:cf:c0:8a:1c:5a:d6:3b:59:46:ed:f7:71:37:e8:24:72:
76:14:0f:2e:2b:de:8d:bf:45:fa:79:31:87:fb:69:26:96:da:
76:de:0f:37:21:da:06:97:e2:f8:89:f8:d8:39:d3:ea:70:6b:
6f:e4:b2:3b:30:e5:19:7c:52:95:11:d8:8f:ef:45:96:57:71:
d8:c6:11:ce:9a:1f:37:c6:7b:26:8f:81:55:d0:8a:14:06:cf:
3c:59:e0:e4:26:68:d9:80:c5:20:a0:88:45:b6:65:17:56:c7:
1b:0c:0b:ed:c5:d6:f9:88:f5:cb:3d:82:4c:19:ac:f2:a9:2a:
c0:32:66:18:8a:a3:56:b8:9e:d7:0c:f6:fa:af:b3:71:89:9e:
e0:03:94:26:84:59:51:02:c9:64:9d:f0:bd:a7:f7:e7:11:c1:
03:ff:20:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbQQBgvTA11avexSnbAenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OWQ3MTJiMGNlNjZmNGVkOWI5MzQwODAyY2NlMjljMmVk
YjJiMGQwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTY5ODAxMTQ3YTNlZmM2ZDZiZTgxNGE5OGY3MmZjMjEyOTI4NDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEQjao25pXdGoivJcP+QmU+fCBpa
faKK4DM4CxBIDWNAKBIEK5l96GN/qt2cFjtNt/JbbyS7RwLDJKqSWGOtjgm3dNoO
gHKG+O9b/uLeu9xP0gBPtR5oWTMhFfFbh20Q50C1nZTa5+CQ7W6VgXikrpxD5rr4
uP0bYAoekUqE332QUm41QsZbayx1AuBqW9XtVgG1ycKpMmPzTANvh8gnO36ahABK
sukIkrk+W+33xlpYYCkLReI8j3tD3X5HG0qkWSxzgmFu+5zpdO2nE2O1V1Eu1wGT
bj7XsbgWawpRj+rh90+tgYFWurMZfMm5Ex1jerjC2f90c5oWM8AfuEpxMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVpgBFHo+/G1r6BSpj3L8ISkoQlMB8GA1UdIwQY
MBaAFGedcSsM5m9O2bk0CALM4pwu2ysNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjUxeEt3em1iMDdadVRRSUFzemluQzdiS3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83OWQ4ZGMtMzE3Mi00MWFiLWFhNTct
NDZmYTk1NGY3MWYzLzEvbFdtQUVVZWo3OGJXdm9GS21QY3Z3aEtTaENVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83OWQ4ZGMtMzE3Mi00MWFiLWFhNTctNDZmYTk1NGY3MWYz
LzEvWjUxeEt3em1iMDdadVRRSUFzemluQzdiS3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVc8MA0G
CSqGSIb3DQEBCwUAA4IBAQBS+CBD/2s0OIvFPiyoHjnhD+xHotjE5iem/D+n7FCm
gOHltl9F7oQ9IP2FKojVDS1NAYLSKNQ+X3G3eUBOr+J93Mya90bjX/9klkkUv+qL
bMsY5qqeCKfeFudWtM/Aihxa1jtZRu33cTfoJHJ2FA8uK96Nv0X6eTGH+2kmltp2
3g83IdoGl+L4ifjYOdPqcGtv5LI7MOUZfFKVEdiP70WWV3HYxhHOmh83xnsmj4FV
0IoUBs88WeDkJmjZgMUgoIhFtmUXVscbDAvtxdb5iPXLPYJMGazyqSrAMmYYiqNW
uJ7XDPb6r7NxiZ7gA5QmhFlRAslknfC9p/fnEcED/yDm
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:56:01 2024 by rpki-client on console-fra.rpki-client.org