Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/lgA3OzlgN5mO-phBlXIn8VKgG_E.roa
File: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (raw, json)
Hash identifier: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=
Subject key identifier: 96:00:37:3B:39:60:37:99:8E:FA:98:41:95:72:27:F1:52:A0:1B:F1
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 01941F8C52CA2110AAFDE42FEEC1CF698E1F
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/lgA3OzlgN5mO-phBlXIn8VKgG_E.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49571
IP address blocks: 188.72.12.0/24 maxlen: 24
188.72.15.0/24 maxlen: 24
188.72.16.0/24 maxlen: 24
188.72.17.0/24 maxlen: 24
188.72.18.0/24 maxlen: 24
188.72.21.0/24 maxlen: 24
188.72.22.0/24 maxlen: 24
188.72.30.0/24 maxlen: 24
188.72.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:52:ca:21:10:aa:fd:e4:2f:ee:c1:cf:69:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9600373b396037998efa9841957227f152a01bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:e7:0f:09:f4:4a:c7:15:0e:0f:f3:59:d9:
f9:48:19:3e:c3:ca:e7:49:aa:e9:f6:cb:b5:a7:54:
17:8e:6f:a2:89:bc:53:ac:13:c8:68:3f:41:4d:4c:
13:6f:3a:34:92:c7:a6:2b:65:68:bb:07:79:a7:4d:
03:42:52:d6:b3:62:b6:74:37:08:e4:ae:b1:2e:07:
de:07:fb:53:b2:e2:1d:4b:98:ad:96:58:0d:4e:92:
dc:96:b2:4d:80:54:06:06:a5:13:ac:c5:13:94:08:
3d:4e:45:90:2d:3f:32:ad:41:04:8d:e6:8f:31:9d:
dd:ea:f5:13:6e:93:ad:9d:8a:73:62:61:2a:eb:7f:
75:fd:d0:24:20:4f:8f:20:37:b0:c4:57:38:bc:5a:
2e:5f:af:db:e5:30:b9:e1:48:ac:83:32:3f:12:de:
81:15:7f:95:04:a3:57:cc:73:c8:3b:55:00:b0:0d:
25:65:45:fc:dc:ad:73:d7:f3:b3:27:86:e2:bc:be:
fc:f8:17:85:66:e2:21:4e:03:86:5e:f6:55:46:05:
7f:1a:f7:a3:d8:91:d6:41:ea:4c:c7:a6:1c:96:46:
8e:15:1a:dc:6c:fe:2a:b7:db:9b:c1:5b:69:da:ed:
47:78:ae:7f:ea:56:b0:9a:e7:59:9a:98:36:b5:5c:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:37:3B:39:60:37:99:8E:FA:98:41:95:72:27:F1:52:A0:1B:F1
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/lgA3OzlgN5mO-phBlXIn8VKgG_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.12.0/24
188.72.15.0-188.72.18.255
188.72.21.0-188.72.22.255
188.72.30.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:fa:ba:83:5f:44:cc:fc:5c:70:f4:db:5e:c7:42:b6:7f:c4:
8a:42:70:35:61:41:8a:32:3e:0e:92:da:36:e3:90:fe:84:39:
11:c9:2d:b3:c6:d2:e0:4d:9a:f0:1c:e1:b2:47:23:6a:8b:5a:
4d:a2:99:fe:58:50:5d:e9:fa:ae:d9:89:ca:3e:48:d5:13:72:
af:98:11:9b:a1:c6:37:29:37:e5:f9:09:a8:fe:36:34:f6:d8:
75:0c:b7:96:ed:13:6a:bc:62:b6:32:3a:c8:ff:dd:2b:b4:5d:
01:95:46:33:93:c2:7b:61:b5:93:2b:8f:05:62:99:fb:77:ab:
ff:b3:fb:08:f5:d0:7c:68:9c:ca:49:b7:97:42:27:fc:c1:ca:
5f:78:3b:ba:51:da:b3:51:51:a7:21:99:f4:7d:48:7c:8b:95:
90:f3:80:b6:f8:ce:9e:24:97:65:e0:59:4f:b8:27:af:2e:fd:
8e:38:e5:e0:be:a4:85:b0:0c:b8:60:b0:91:55:66:1d:9c:a3:
9f:1b:18:c0:e3:17:b8:30:79:4c:21:36:49:d0:08:cd:5c:6a:
21:e8:ca:68:39:dc:95:e8:93:fe:02:50:25:36:6b:12:ff:9d:
1d:40:26:ad:cf:14:87:76:23:b9:7f:e1:57:9f:f3:61:53:73:
62:bf:20:f5
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQfjFLKIRCq/eQv7sHPaY4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjUwMTAxMDE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjAwMzczYjM5NjAzNzk5OGVmYTk4NDE5NTcyMjdmMTUyYTAxYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVfnDwn0SscVDg/zWdn5SBk+w8rn
Sarp9su1p1QXjm+iibxTrBPIaD9BTUwTbzo0ksemK2Vouwd5p00DQlLWs2K2dDcI
5K6xLgfeB/tTsuIdS5itllgNTpLclrJNgFQGBqUTrMUTlAg9TkWQLT8yrUEEjeaP
MZ3d6vUTbpOtnYpzYmEq6391/dAkIE+PIDewxFc4vFouX6/b5TC54UisgzI/Et6B
FX+VBKNXzHPIO1UAsA0lZUX83K1z1/OzJ4bivL78+BeFZuIhTgOGXvZVRgV/Gvej
2JHWQepMx6YclkaOFRrcbP4qt9ubwVtp2u1HeK5/6lawmudZmpg2tVx/9QIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJYANzs5YDeZjvqYQZVyJ/FSoBvxMB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvbGdBM096bGdONW1PLXBoQmxYSW44VktnR19FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAvEgMMAwD
BAC8SA8DBAC8SBIwDAMEALxIFQMEALxIFgMEAbxIHjANBgkqhkiG9w0BAQsFAAOC
AQEArfq6g19EzPxccPTbXsdCtn/EikJwNWFBijI+DpLaNuOQ/oQ5Eckts8bS4E2a
8BzhskcjaotaTaKZ/lhQXen6rtmJyj5I1RNyr5gRm6HGNyk35fkJqP42NPbYdQy3
lu0TarxitjI6yP/dK7RdAZVGM5PCe2G1kyuPBWKZ+3er/7P7CPXQfGicykm3l0In
/MHKX3g7ulHas1FRpyGZ9H1IfIuVkPOAtvjOniSXZeBZT7gnry79jjjl4L6khbAM
uGCwkVVmHZyjnxsYwOMXuDB5TCE2SdAIzVxqIejKaDncleiT/gJQJTZrEv+dHUAm
rc8Uh3YjuX/hV5/zYVNzYr8g9Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:28:03 2025 by rpki-client