Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/LIX5Ku6S2AYWWX85sO_V8f0rOu8.roa
File: LIX5Ku6S2AYWWX85sO_V8f0rOu8.roa (raw, json)
Hash identifier: erOTdSaVnRD2fUxIPaB7c346uJMPrVnrq1/g7tb8HTk=
Subject key identifier: 2C:85:F9:2A:EE:92:D8:06:16:59:7F:39:B0:EF:D5:F1:FD:2B:3A:EF
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 018CC26CF4C23510E93AA4809FD2937EB2C6
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/LIX5Ku6S2AYWWX85sO_V8f0rOu8.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49142
IP address blocks: 185.139.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f4:c2:35:10:e9:3a:a4:80:9f:d2:93:7e:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c85f92aee92d80616597f39b0efd5f1fd2b3aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:a6:6b:29:f6:53:1c:10:50:e8:47:fd:29:
1c:e2:6f:b3:40:d6:86:ad:8a:f3:be:c4:c4:93:98:
36:d9:78:23:a8:42:2f:2b:64:23:15:10:f5:8a:18:
fa:11:f8:f5:07:99:32:41:32:fc:c0:aa:78:9d:79:
11:26:af:f6:00:5b:b2:eb:30:11:93:1e:0a:95:08:
25:3f:f2:11:50:60:94:5a:da:e6:c9:85:81:dd:1e:
73:bd:f2:7a:1f:09:1c:04:33:c2:54:b0:82:45:aa:
10:a6:ac:47:9e:ab:d6:ae:02:32:74:7c:14:9b:9a:
39:ae:73:45:ea:97:0d:11:82:e0:f2:b1:36:0a:17:
ff:a8:18:a1:f3:80:69:52:a5:8b:cf:53:d7:c7:c6:
f9:59:28:33:d0:2e:32:4b:cd:10:fd:26:ef:dd:7d:
e3:7c:7a:10:78:48:bf:b2:04:5b:88:5a:e8:9c:43:
a7:ab:38:ee:59:e4:30:41:a4:2b:c8:e2:48:43:79:
99:9b:9c:b8:e9:ad:7c:24:d0:8e:71:ea:72:81:71:
95:5b:3a:75:ea:da:f7:21:86:32:5e:a2:fe:1c:c6:
9c:21:6e:a6:af:2b:26:2f:0e:e8:7e:aa:db:a2:a7:
2b:b8:36:f4:7d:52:35:42:2c:49:a6:d3:f4:a1:a8:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:F9:2A:EE:92:D8:06:16:59:7F:39:B0:EF:D5:F1:FD:2B:3A:EF
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/LIX5Ku6S2AYWWX85sO_V8f0rOu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.216.0/23
Signature Algorithm: sha256WithRSAEncryption
98:ef:78:01:67:09:0f:1f:c6:8a:2b:c8:88:25:f5:06:1c:08:
7b:89:62:49:02:d0:82:fc:a2:b6:29:ba:c5:bf:82:d5:2b:eb:
38:84:02:fc:bb:70:41:15:e4:4c:95:77:f8:d3:30:19:fe:1c:
b4:1e:1a:2d:79:8a:bc:ab:da:3e:4f:6e:27:5a:f2:bf:38:f9:
e5:bb:4a:0b:eb:50:9d:5d:22:62:35:53:61:48:fd:99:c6:da:
92:19:76:bb:9a:a5:2f:73:9c:f5:cf:87:9d:94:8f:80:ee:02:
f2:3f:70:dd:14:16:35:39:01:94:c4:53:93:d6:e9:0a:b8:26:
6b:e1:e3:ed:4a:40:e0:27:e4:df:59:2f:46:55:7c:8f:46:0a:
a6:a9:b7:c6:e2:40:b4:91:fe:f2:75:52:1e:b1:0e:fa:97:4c:
17:e0:53:7c:a4:0c:03:aa:31:ff:42:c4:f1:2d:c0:cf:1a:68:
51:83:39:82:49:ad:fe:ae:95:a1:67:0b:1f:f7:e9:9c:64:de:
ef:e2:a4:49:90:b2:e9:f7:b1:9d:b3:32:e1:fc:22:af:0c:28:
2b:8f:f0:a6:bc:58:84:99:31:b5:89:0d:ae:f8:c8:36:21:38:
ba:0d:cc:3b:b3:f3:47:b7:63:12:37:cf:66:57:da:5e:8f:e6:
89:27:84:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbPTCNRDpOqSAn9KTfrLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NGVmYzRjZTM2ZmM0NDNkYzU4MTYyNzRlYWMxZDc2OTMw
MjkwODEwHhcNMjQwMTAxMDAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzg1ZjkyYWVlOTJkODA2MTY1OTdmMzliMGVmZDVmMWZkMmIzYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrCmayn2UxwQUOhH/Skc4m+zQNaG
rYrzvsTEk5g22XgjqEIvK2QjFRD1ihj6Efj1B5kyQTL8wKp4nXkRJq/2AFuy6zAR
kx4KlQglP/IRUGCUWtrmyYWB3R5zvfJ6HwkcBDPCVLCCRaoQpqxHnqvWrgIydHwU
m5o5rnNF6pcNEYLg8rE2Chf/qBih84BpUqWLz1PXx8b5WSgz0C4yS80Q/Sbv3X3j
fHoQeEi/sgRbiFronEOnqzjuWeQwQaQryOJIQ3mZm5y46a18JNCOcepygXGVWzp1
6tr3IYYyXqL+HMacIW6mrysmLw7ofqrboqcruDb0fVI1QixJptP0oaiHCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyF+SruktgGFll/ObDv1fH9KzrvMB8GA1UdIwQY
MBaAFJlO/Ezjb8RD3FgWJ06sHXaTApCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEt
M2QyZmI4MTBlMTkxLzEvTElYNUt1NlMyQVlXV1g4NXNPX1Y4ZjByT3U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEtM2QyZmI4MTBlMTkx
LzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYvYMA0G
CSqGSIb3DQEBCwUAA4IBAQCY73gBZwkPH8aKK8iIJfUGHAh7iWJJAtCC/KK2KbrF
v4LVK+s4hAL8u3BBFeRMlXf40zAZ/hy0HhoteYq8q9o+T24nWvK/OPnlu0oL61Cd
XSJiNVNhSP2ZxtqSGXa7mqUvc5z1z4edlI+A7gLyP3DdFBY1OQGUxFOT1ukKuCZr
4ePtSkDgJ+TfWS9GVXyPRgqmqbfG4kC0kf7ydVIesQ76l0wX4FN8pAwDqjH/QsTx
LcDPGmhRgzmCSa3+rpWhZwsf9+mcZN7v4qRJkLLp97GdszLh/CKvDCgrj/CmvFiE
mTG1iQ2u+Mg2ITi6Dcw7s/NHt2MSN89mV9pej+aJJ4RX
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:32 2024 by rpki-client on console-ams.rpki-client.org