Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/LNCbGchNKPtwOhviLPoASnFwEo8.roa
File: LNCbGchNKPtwOhviLPoASnFwEo8.roa (raw, json)
Hash identifier: IHq4gDF+CqJbmE9++HSJT2YEOHN4ch9pToMNvPtYy7c=
Subject key identifier: 2C:D0:9B:19:C8:4D:28:FB:70:3A:1B:E2:2C:FA:00:4A:71:70:12:8F
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 018CC42525E51F20CDAC3FDA636A97FD9B75
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/LNCbGchNKPtwOhviLPoASnFwEo8.roa
Signing time: Mon 01 Jan 2024 08:30:17 +0000
ROA not before: Mon 01 Jan 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212833
IP address blocks: 188.215.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:25:e5:1f:20:cd:ac:3f:da:63:6a:97:fd:9b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 1 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cd09b19c84d28fb703a1be22cfa004a7170128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:97:ca:13:6c:41:4a:64:03:2e:12:7a:88:
b6:49:b8:3e:77:26:42:da:ff:e9:f3:8a:87:0b:03:
29:68:a7:f7:aa:36:58:e5:46:03:57:6c:f1:6c:13:
d2:1a:7e:52:dd:d3:92:07:6b:69:d1:96:dc:ba:b5:
47:34:6c:74:56:75:f1:20:98:3e:34:b9:23:7e:99:
90:ea:60:ab:41:80:55:c8:4c:33:c4:32:97:3d:c2:
92:24:3c:1d:83:b1:88:50:38:e7:b0:dc:06:f7:ea:
0d:79:52:3f:e6:61:a3:f5:51:2a:b8:bf:46:5e:e8:
0a:9b:97:96:3d:36:53:ef:bd:94:55:15:1b:11:ea:
49:d3:ac:11:99:ec:6c:9a:37:f4:f9:37:f0:6a:23:
07:a5:f5:6a:f5:f8:e2:ee:35:71:bd:65:a8:5f:77:
61:ad:95:50:ee:28:dd:b3:b9:1f:b0:17:77:92:33:
a9:f0:59:de:b3:2d:a4:50:1b:29:47:66:30:ba:bb:
cd:93:d1:d0:5a:02:66:9e:c4:68:13:0c:20:dd:04:
f5:76:96:1f:2b:3d:1c:56:12:47:d2:92:d2:76:8b:
9d:6e:a3:6d:83:97:bb:a7:70:1e:5a:80:f4:d1:ad:
2a:54:1d:0e:3d:bd:05:8c:01:4e:20:4c:37:90:56:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:9B:19:C8:4D:28:FB:70:3A:1B:E2:2C:FA:00:4A:71:70:12:8F
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/LNCbGchNKPtwOhviLPoASnFwEo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:67:90:78:a5:d1:95:b2:c4:4a:4d:2a:2a:2d:6f:40:96:12:
e8:c2:1b:96:d2:3d:11:9d:b1:78:e7:00:6f:e4:c0:de:1b:e4:
ed:74:36:0e:86:4f:34:05:f7:6d:8c:79:5e:d1:5d:24:2e:db:
6b:7e:4f:3c:1b:f2:e0:48:c9:aa:7a:c4:29:fe:81:c0:5c:4d:
4d:86:1f:39:e7:0c:77:64:f4:48:a8:96:95:cc:e7:72:ce:5a:
ba:f4:2a:21:c7:d0:29:99:80:d6:2c:83:53:52:e1:e0:c3:56:
40:f1:dd:6f:a9:45:26:ab:1f:1c:d6:1f:1f:dd:5e:34:05:89:
d6:b4:81:07:19:7a:95:38:64:87:7a:53:85:eb:8e:f6:36:bc:
b1:ec:d4:3d:44:5c:1e:d6:39:16:8c:d9:58:24:6a:6c:71:97:
85:57:a6:90:76:6f:d6:36:73:83:c3:d1:e8:b4:e3:f2:b9:e4:
ee:1d:e5:c3:42:3e:cd:c3:53:d0:3b:60:74:8a:29:27:38:68:
ce:e9:b1:b5:11:c1:4d:42:74:a6:61:38:fe:79:b6:2e:34:34:
ef:19:e8:2d:5b:1b:02:68:07:b1:f9:07:14:d2:7c:25:32:97:
7c:83:43:a5:08:48:d1:46:2a:49:d1:85:54:ed:3a:7c:f9:aa:
5e:84:97:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJSXlHyDNrD/aY2qX/Zt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5
MjNmMjAwHhcNMjQwMTAxMDgzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2QwOWIxOWM4NGQyOGZiNzAzYTFiZTIyY2ZhMDA0YTcxNzAxMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1iXyhNsQUpkAy4Seoi2Sbg+dyZC
2v/p84qHCwMpaKf3qjZY5UYDV2zxbBPSGn5S3dOSB2tp0ZbcurVHNGx0VnXxIJg+
NLkjfpmQ6mCrQYBVyEwzxDKXPcKSJDwdg7GIUDjnsNwG9+oNeVI/5mGj9VEquL9G
XugKm5eWPTZT772UVRUbEepJ06wRmexsmjf0+TfwaiMHpfVq9fji7jVxvWWoX3dh
rZVQ7ijds7kfsBd3kjOp8Fnesy2kUBspR2YwurvNk9HQWgJmnsRoEwwg3QT1dpYf
Kz0cVhJH0pLSdoudbqNtg5e7p3AeWoD00a0qVB0OPb0FjAFOIEw3kFZRowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzQmxnITSj7cDob4iz6AEpxcBKPMB8GA1UdIwQY
MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt
Nzc3MzczZTYwNTVlLzEvTE5DYkdjaE5LUHR3T2h2aUxQb0FTbkZ3RW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl
LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNfgMA0G
CSqGSIb3DQEBCwUAA4IBAQAcZ5B4pdGVssRKTSoqLW9AlhLowhuW0j0RnbF45wBv
5MDeG+TtdDYOhk80BfdtjHle0V0kLttrfk88G/LgSMmqesQp/oHAXE1Nhh855wx3
ZPRIqJaVzOdyzlq69Cohx9ApmYDWLINTUuHgw1ZA8d1vqUUmqx8c1h8f3V40BYnW
tIEHGXqVOGSHelOF6472Nryx7NQ9RFwe1jkWjNlYJGpscZeFV6aQdm/WNnODw9Ho
tOPyueTuHeXDQj7Nw1PQO2B0iiknOGjO6bG1EcFNQnSmYTj+ebYuNDTvGegtWxsC
aAex+QcU0nwlMpd8g0OlCEjRRipJ0YVU7Tp8+apehJcn
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:15 2024 by rpki-client on console-fra.rpki-client.org