Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/SkLXC-IwkCdDd7Ft68afX9OTFOQ.roa
File: SkLXC-IwkCdDd7Ft68afX9OTFOQ.roa (raw, json)
Hash identifier: FUvoPKZYazdZ9lozsLhh8do6qaj3RVjVNxSOgF5fcm0=
Subject key identifier: 4A:42:D7:0B:E2:30:90:27:43:77:B1:6D:EB:C6:9F:5F:D3:93:14:E4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 018CC4923846BA96396A776D3C8DF3E788BB
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/SkLXC-IwkCdDd7Ft68afX9OTFOQ.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57069
IP address blocks: 89.22.64.0/19 maxlen: 19
89.22.64.0/24 maxlen: 24
89.22.66.0/23 maxlen: 23
89.22.68.0/22 maxlen: 22
89.22.72.0/21 maxlen: 21
89.22.84.0/22 maxlen: 22
89.22.83.0/24 maxlen: 24
89.22.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:38:46:ba:96:39:6a:77:6d:3c:8d:f3:e7:88:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a42d70be23090274377b16debc69f5fd39314e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:4c:f8:28:51:f1:ef:fa:38:d0:b2:ab:1c:
97:09:8f:e8:62:17:7f:9b:f4:01:75:eb:fa:f4:d6:
3a:f3:75:6a:60:32:1d:5c:ab:78:54:8c:a2:89:26:
b4:2d:d2:e7:fc:ab:0c:a3:f5:0a:65:89:46:f1:9c:
c3:f5:68:6d:bb:6e:b0:e5:e8:43:6e:95:7c:ec:e6:
a3:57:bb:70:79:5e:b8:8c:b4:1d:59:5f:52:82:36:
5b:9f:8f:4a:6d:37:6e:3b:f7:9c:fc:69:7a:bb:0b:
18:e0:b5:7e:6a:d2:cc:ad:78:e6:81:54:d2:18:8f:
60:ff:61:4e:75:e4:30:f4:19:c8:d6:31:d1:c2:12:
69:c8:bf:bf:ce:1d:4f:d6:60:ad:b6:2a:95:c5:bb:
1b:6a:74:bb:af:ec:b2:44:8e:6d:41:81:5a:af:bf:
7e:f7:68:21:1f:f9:7d:ea:1d:df:cd:a4:2b:12:dd:
d7:e7:d6:99:bf:4a:70:38:2d:a6:4c:22:97:54:e2:
9f:cc:1a:9f:15:27:b5:c7:d0:ff:b2:0d:15:ac:ae:
04:40:57:23:cb:59:c0:84:52:d4:c5:54:df:84:b6:
1f:ca:55:51:2a:34:3b:59:0d:4a:85:7b:84:e9:c3:
f3:6a:7c:de:bf:92:31:d8:64:d7:ab:23:23:5e:4f:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:D7:0B:E2:30:90:27:43:77:B1:6D:EB:C6:9F:5F:D3:93:14:E4
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/SkLXC-IwkCdDd7Ft68afX9OTFOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.64.0/19
Signature Algorithm: sha256WithRSAEncryption
37:30:ed:0f:0d:63:7e:1c:21:e1:c1:53:cf:90:87:74:f9:00:
eb:66:a1:1f:59:06:87:47:5a:75:7f:b3:ad:ce:57:32:c2:5f:
03:08:8a:d8:b4:d7:2b:62:1e:30:f1:63:b7:38:db:bb:60:a8:
fc:cb:b4:fa:8a:44:7d:0e:d6:3e:ea:fb:1d:46:6c:24:c2:cc:
c1:9d:75:da:52:9b:f9:d0:c8:f8:ef:af:71:91:e6:db:33:12:
31:2b:0d:1b:c7:be:ec:66:e1:4f:da:a5:56:9d:a3:15:00:f8:
d4:32:41:b3:8c:cc:4d:52:4d:84:f1:71:7a:4b:f4:93:36:5f:
88:8e:55:00:88:e6:1d:d9:c7:4c:f1:8d:24:cf:a0:55:68:df:
37:58:be:a8:3e:23:d4:85:86:6a:70:72:db:0b:a8:10:90:2b:
33:73:b5:02:75:3c:ff:bd:cc:cc:71:a3:10:80:80:34:f6:11:
1b:53:e5:99:88:f3:94:cc:90:60:ec:7f:b7:eb:fe:d0:60:44:
a2:5a:71:f6:a4:36:86:80:10:86:92:09:e1:79:e9:04:af:3b:
24:ec:47:6f:ce:7e:b1:9b:6c:be:45:e1:68:d9:6a:84:0c:53:
55:53:cf:37:e7:a7:f6:dd:a3:ea:c1:5a:61:b4:74:02:f4:89:
21:fb:52:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkjhGupY5andtPI3z54i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy
YTg1ZjQwHhcNMjQwMTAxMTAyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTQyZDcwYmUyMzA5MDI3NDM3N2IxNmRlYmM2OWY1ZmQzOTMxNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3lM+ChR8e/6ONCyqxyXCY/oYhd/
m/QBdev69NY683VqYDIdXKt4VIyiiSa0LdLn/KsMo/UKZYlG8ZzD9Whtu26w5ehD
bpV87OajV7tweV64jLQdWV9SgjZbn49KbTduO/ec/Gl6uwsY4LV+atLMrXjmgVTS
GI9g/2FOdeQw9BnI1jHRwhJpyL+/zh1P1mCttiqVxbsbanS7r+yyRI5tQYFar79+
92ghH/l96h3fzaQrEt3X59aZv0pwOC2mTCKXVOKfzBqfFSe1x9D/sg0VrK4EQFcj
y1nAhFLUxVTfhLYfylVRKjQ7WQ1KhXuE6cPzanzev5Ix2GTXqyMjXk+MFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEpC1wviMJAnQ3exbevGn1/TkxTkMB8GA1UdIwQY
MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt
MjE5ZTc5ZDg0ZTQzLzEvU2tMWEMtSXdrQ2REZDdGdDY4YWZYOU9URk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz
LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWRZAMA0G
CSqGSIb3DQEBCwUAA4IBAQA3MO0PDWN+HCHhwVPPkId0+QDrZqEfWQaHR1p1f7Ot
zlcywl8DCIrYtNcrYh4w8WO3ONu7YKj8y7T6ikR9DtY+6vsdRmwkwszBnXXaUpv5
0Mj4769xkebbMxIxKw0bx77sZuFP2qVWnaMVAPjUMkGzjMxNUk2E8XF6S/STNl+I
jlUAiOYd2cdM8Y0kz6BVaN83WL6oPiPUhYZqcHLbC6gQkCszc7UCdTz/vczMcaMQ
gIA09hEbU+WZiPOUzJBg7H+36/7QYESiWnH2pDaGgBCGkgnheekErzsk7Edvzn6x
m2y+ReFo2WqEDFNVU88356f23aPqwVphtHQC9Ikh+1KT
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:51 2024 by rpki-client on console-ams.rpki-client.org