Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/lXIDFG1AP_kexA_cJaDNRNW6Whk.roa
File: lXIDFG1AP_kexA_cJaDNRNW6Whk.roa (raw, json)
Hash identifier: lIVPeSP4ugNBKBDxS4PMg+bYQkYtMEa8QTePFcJhq48=
Subject key identifier: 95:72:03:14:6D:40:3F:F9:1E:C4:0F:DC:25:A0:CD:44:D5:BA:5A:19
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 018CC493477D4B80723DEFC9DB9ECA7D6EAC
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/lXIDFG1AP_kexA_cJaDNRNW6Whk.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35805
IP address blocks: 92.241.64.0/19 maxlen: 24
185.51.16.0/22 maxlen: 24
109.238.224.0/20 maxlen: 24
213.131.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:47:7d:4b:80:72:3d:ef:c9:db:9e:ca:7d:6e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=957203146d403ff91ec40fdc25a0cd44d5ba5a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:d5:03:99:a6:18:fd:a3:68:cf:5e:5c:64:
b2:96:df:89:b9:f9:16:3d:7e:a2:a9:7b:7d:70:53:
7b:3e:be:46:48:be:cb:26:3f:67:02:e9:d5:e4:98:
5f:38:34:97:ca:f8:f9:4a:90:71:0b:f7:79:28:64:
85:4a:db:aa:52:c3:9c:86:94:b9:1f:92:ba:2d:13:
9c:5c:40:f5:b3:25:04:c8:88:ef:95:21:65:a1:1f:
70:50:1e:ff:f9:7f:83:fa:97:ce:fb:7f:14:7e:df:
dc:b0:82:fe:a0:e5:74:68:5c:76:ee:e7:2d:1b:ab:
15:c2:e6:62:11:b1:33:92:53:7c:4d:ef:31:93:ae:
ce:c5:42:c4:f8:f1:9c:6a:fe:16:f3:63:ba:c4:42:
e7:57:30:51:03:92:23:1c:cc:e3:86:64:20:6a:4d:
93:e9:8a:4c:b2:57:bb:a5:9c:61:8a:37:a2:f5:24:
01:98:3b:6d:20:06:23:90:87:ed:1f:99:c4:9f:04:
9d:c6:f9:65:79:73:c0:99:26:9e:34:4c:e1:99:42:
2d:07:66:11:ad:2c:fe:2d:25:6e:dd:38:70:0f:de:
62:aa:89:6f:84:41:65:da:5e:06:21:e1:0a:19:04:
54:8c:42:0e:28:69:c0:41:e5:59:c4:29:f3:1e:5c:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:03:14:6D:40:3F:F9:1E:C4:0F:DC:25:A0:CD:44:D5:BA:5A:19
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/lXIDFG1AP_kexA_cJaDNRNW6Whk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.64.0/19
109.238.224.0/20
185.51.16.0/22
213.131.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b5:35:36:b0:95:41:62:22:f8:3d:15:7b:65:ee:57:7b:30:2a:
58:72:90:08:0b:82:71:22:0b:c1:67:0a:d4:58:7c:f8:f0:7b:
d2:77:11:e9:cf:05:66:42:ec:2d:d7:90:8c:93:c8:33:6b:37:
52:cc:32:cc:b9:9e:fb:e1:db:f1:c1:04:80:f4:6b:7e:1e:56:
a6:4a:17:eb:5d:80:9b:3e:3c:8f:c9:44:dc:4d:15:5e:37:c8:
f5:15:87:e1:95:3c:f1:35:7f:aa:64:ef:14:aa:d4:dc:c9:e9:
c2:9d:00:3a:6a:5f:12:17:5e:89:2a:5a:63:6a:5f:b6:11:92:
09:a1:3f:11:57:0e:3b:f4:52:c7:ce:db:42:37:1a:d6:6a:9c:
0b:19:34:d9:72:7a:2e:de:3e:8f:7f:5a:99:84:34:b1:9c:59:
37:eb:38:b2:e4:05:95:c6:a7:4c:0d:ac:1f:74:ca:3f:72:ee:
72:fe:c0:4f:28:64:32:36:c9:f5:af:ec:c1:f4:d3:46:6f:11:
cd:a2:f4:ed:2d:c6:9d:26:90:65:22:8a:c4:30:51:0e:48:8c:
8a:6e:d7:cd:93:68:b6:5e:5d:62:75:42:1d:c8:66:74:f4:69:
8f:1a:aa:45:19:1f:47:2d:b3:ca:78:36:bd:0d:59:7f:36:1b:
be:82:74:18
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzEk0d9S4ByPe/J257KfW6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh
ZDhmMTQwHhcNMjQwMTAxMTAzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTcyMDMxNDZkNDAzZmY5MWVjNDBmZGMyNWEwY2Q0NGQ1YmE1YTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiTVA5mmGP2jaM9eXGSylt+JufkW
PX6iqXt9cFN7Pr5GSL7LJj9nAunV5JhfODSXyvj5SpBxC/d5KGSFStuqUsOchpS5
H5K6LROcXED1syUEyIjvlSFloR9wUB7/+X+D+pfO+38Uft/csIL+oOV0aFx27uct
G6sVwuZiEbEzklN8Te8xk67OxULE+PGcav4W82O6xELnVzBRA5IjHMzjhmQgak2T
6YpMsle7pZxhijei9SQBmDttIAYjkIftH5nEnwSdxvlleXPAmSaeNEzhmUItB2YR
rSz+LSVu3ThwD95iqolvhEFl2l4GIeEKGQRUjEIOKGnAQeVZxCnzHlxcJQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJVyAxRtQD/5HsQP3CWgzUTVuloZMB8GA1UdIwQY
MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt
Mzc0MGIwOTQxZGI4LzEvbFhJREZHMUFQX2tleEFfY0phRE5STlc2V2hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4
LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFXPFAAwQE
be7gAwQCuTMQAwQF1YMgMA0GCSqGSIb3DQEBCwUAA4IBAQC1NTawlUFiIvg9FXtl
7ld7MCpYcpAIC4JxIgvBZwrUWHz48HvSdxHpzwVmQuwt15CMk8gzazdSzDLMuZ77
4dvxwQSA9Gt+HlamShfrXYCbPjyPyUTcTRVeN8j1FYfhlTzxNX+qZO8UqtTcyenC
nQA6al8SF16JKlpjal+2EZIJoT8RVw479FLHzttCNxrWapwLGTTZcnou3j6Pf1qZ
hDSxnFk36ziy5AWVxqdMDawfdMo/cu5y/sBPKGQyNsn1r+zB9NNGbxHNovTtLcad
JpBlIorEMFEOSIyKbtfNk2i2Xl1idUIdyGZ09GmPGqpFGR9HLbPKeDa9DVl/Nhu+
gnQY
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:39:18 2024 by rpki-client on console-ams.rpki-client.org