Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lPfAJjyWBXtg81q39pHCYCer4dM.roa
File: lPfAJjyWBXtg81q39pHCYCer4dM.roa (raw, json)
Hash identifier: Zn98MH0XqRu1ohhCd0v0GM9Ve+bcB7rLtMRIR7KQprU=
Subject key identifier: 94:F7:C0:26:3C:96:05:7B:60:F3:5A:B7:F6:91:C2:60:27:AB:E1:D3
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 018CC9BB41EA5F1CD61981778663D6CBC34B
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lPfAJjyWBXtg81q39pHCYCer4dM.roa
Signing time: Tue 02 Jan 2024 10:32:21 +0000
ROA not before: Tue 02 Jan 2024 10:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13037
IP address blocks: 185.81.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:41:ea:5f:1c:d6:19:81:77:86:63:d6:cb:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Jan 2 10:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94f7c0263c96057b60f35ab7f691c26027abe1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:7d:f1:fb:44:40:ee:88:3d:5f:87:9a:4d:
7a:2f:0b:bb:b4:38:ae:d6:1a:a0:65:b7:c6:fc:6b:
ae:2e:2e:79:44:ab:5c:38:59:6e:d2:74:84:3a:4b:
a7:63:4a:45:57:35:58:31:8f:33:0d:0e:c4:7e:5a:
07:b0:93:c4:d4:41:5e:95:78:7a:e3:1b:2d:bb:98:
03:46:af:76:76:1e:8f:9c:41:55:ed:73:fb:bf:d5:
07:31:4e:b7:d1:0b:97:59:1c:d3:92:43:17:34:78:
d8:e6:11:68:73:f2:cb:33:11:06:1b:48:63:3d:91:
70:94:12:f6:bb:7b:b9:b5:01:af:ad:74:69:90:6b:
5f:4d:21:2c:25:cf:fd:e3:35:3d:ba:96:77:9c:49:
ce:50:e4:55:71:89:d1:18:92:b4:09:31:06:ba:bc:
ab:f7:dd:58:bf:ba:e8:93:28:5a:af:b9:7a:b0:60:
ec:79:75:ac:c8:16:af:d4:48:76:cf:a0:f0:24:26:
ff:d0:3f:fa:c2:14:28:bd:8b:48:e6:d2:9f:b2:35:
2d:0a:4a:fe:7b:7c:78:2b:b6:51:b4:a8:c8:50:73:
f3:fb:b4:4f:64:b4:cd:c2:d4:c5:83:55:cf:c0:85:
ca:e6:fe:3c:b9:ca:db:9a:4b:7a:44:d8:30:99:97:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:C0:26:3C:96:05:7B:60:F3:5A:B7:F6:91:C2:60:27:AB:E1:D3
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lPfAJjyWBXtg81q39pHCYCer4dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.232.0/22
Signature Algorithm: sha256WithRSAEncryption
53:d7:10:bb:2f:3a:c5:3d:ce:cf:fe:d7:bd:18:31:9f:62:ed:
83:9b:f3:a0:27:a1:3c:e8:fd:62:e4:e3:b0:8e:e2:e8:78:98:
10:ba:57:ac:36:a9:22:d8:7d:42:be:12:15:b7:00:5e:69:b5:
25:55:e9:51:05:1a:cc:01:21:ef:50:e1:a3:03:cd:de:2e:b5:
80:7f:08:66:08:f3:88:fd:62:fb:e5:c1:e0:41:ad:fe:04:21:
7b:c4:e6:ce:be:e8:af:a8:1c:7a:b4:b5:e0:72:83:1a:1d:40:
9d:15:00:ea:4a:22:60:5d:2a:25:fd:86:96:03:a7:2e:fd:b0:
7f:96:8c:c0:2d:64:6a:79:86:5d:6b:ee:a2:fb:7e:93:c0:9c:
e0:b9:61:52:1d:65:c3:c4:6d:6b:5d:61:16:55:fd:51:e7:80:
a4:16:23:10:7c:d9:2c:ef:6b:aa:0f:4b:2e:1d:e1:7d:1c:33:
e4:ea:27:a6:64:15:14:3e:f1:8d:88:b0:7e:c0:1a:be:47:cf:
9a:a0:47:b5:be:0b:f7:e2:95:a7:dc:7f:93:da:c8:d6:82:82:
bb:15:c7:22:8d:bc:88:ec:d6:16:ec:c5:a7:22:3a:0f:95:08:
9b:2b:cf:b5:ad:64:cc:13:7a:34:54:3c:51:fb:af:63:d0:14:
bd:e0:72:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu0HqXxzWGYF3hmPWy8NLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NzczZTljYzk3NDMwMWE3OGI3ZWU2ZDk5NDUyOGYxZjg4
MmU0NmYwHhcNMjQwMTAyMTAzMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGY3YzAyNjNjOTYwNTdiNjBmMzVhYjdmNjkxYzI2MDI3YWJlMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SR98ftEQO6IPV+Hmk16Lwu7tDiu
1hqgZbfG/GuuLi55RKtcOFlu0nSEOkunY0pFVzVYMY8zDQ7EfloHsJPE1EFelXh6
4xstu5gDRq92dh6PnEFV7XP7v9UHMU630QuXWRzTkkMXNHjY5hFoc/LLMxEGG0hj
PZFwlBL2u3u5tQGvrXRpkGtfTSEsJc/94zU9upZ3nEnOUORVcYnRGJK0CTEGuryr
991Yv7rokyhar7l6sGDseXWsyBav1Eh2z6DwJCb/0D/6whQovYtI5tKfsjUtCkr+
e3x4K7ZRtKjIUHPz+7RPZLTNwtTFg1XPwIXK5v48ucrbmkt6RNgwmZdsxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJT3wCY8lgV7YPNat/aRwmAnq+HTMB8GA1UdIwQY
MBaAFJZ3PpzJdDAaeLfubZlFKPH4guRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTct
NzU3ODM4NjcwOTQ4LzEvbFBmQUpqeVdCWHRnODFxMzlwSENZQ2VyNGRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTctNzU3ODM4NjcwOTQ4
LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVHoMA0G
CSqGSIb3DQEBCwUAA4IBAQBT1xC7LzrFPc7P/te9GDGfYu2Dm/OgJ6E86P1i5OOw
juLoeJgQulesNqki2H1CvhIVtwBeabUlVelRBRrMASHvUOGjA83eLrWAfwhmCPOI
/WL75cHgQa3+BCF7xObOvuivqBx6tLXgcoMaHUCdFQDqSiJgXSol/YaWA6cu/bB/
lozALWRqeYZda+6i+36TwJzguWFSHWXDxG1rXWEWVf1R54CkFiMQfNks72uqD0su
HeF9HDPk6iemZBUUPvGNiLB+wBq+R8+aoEe1vgv34pWn3H+T2sjWgoK7FccijbyI
7NYW7MWnIjoPlQibK8+1rWTME3o0VDxR+69j0BS94HLq
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:23 2024 by rpki-client on console-fra.rpki-client.org