Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/lcbcumnjUhj8qVWu70KRAV-gvv4.roa
File: lcbcumnjUhj8qVWu70KRAV-gvv4.roa (raw, json)
Hash identifier: 5kl9Ymb+KwVBDEYPIXdG5FFWR3fPuqnIYjC6BmGcc0o=
Subject key identifier: 95:C6:DC:BA:69:E3:52:18:FC:A9:55:AE:EF:42:91:01:5F:A0:BE:FE
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 01942143CB8D8509DE9BD355B98B1FE7C33A
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/lcbcumnjUhj8qVWu70KRAV-gvv4.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34501
IP address blocks: 194.105.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cb:8d:85:09:de:9b:d3:55:b9:8b:1f:e7:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95c6dcba69e35218fca955aeef4291015fa0befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:01:82:56:5c:ac:00:2e:f8:bc:3e:e9:83:
8d:a0:d5:47:59:32:55:82:4b:b6:9f:fc:6a:32:03:
a0:a1:eb:5b:ae:27:7a:9b:4b:93:4e:89:28:d4:d3:
f0:2c:07:1d:28:06:f8:0e:ee:5c:93:74:15:50:d4:
5e:e1:ef:1b:af:7d:7c:2c:c6:2c:1c:b8:49:8b:46:
fc:af:27:76:05:2a:2f:63:fd:ba:6d:50:db:26:3d:
f6:fb:e9:55:5a:f5:d0:88:4d:27:a2:e9:62:c1:b6:
e3:e0:f4:33:9a:bf:5e:cf:c6:6e:18:ea:24:6b:55:
48:84:1e:07:e9:f5:c2:29:99:fa:2e:65:99:0b:5b:
4b:1b:a8:25:8c:fd:4f:66:1d:2d:63:43:5e:ea:66:
65:54:49:44:ba:33:8e:13:44:15:5e:a6:05:10:d5:
f5:06:ad:b5:fc:d1:2f:a6:0c:6e:ff:19:19:be:fc:
38:b4:22:b9:e0:2c:83:23:b6:1f:39:7b:a5:78:94:
c6:fd:8c:45:09:a6:bf:c0:df:6d:f7:5b:d3:86:56:
00:4b:c0:dd:8b:34:f8:8a:8d:ed:8d:f2:ed:32:6c:
8b:20:b5:58:19:9d:b6:8e:e8:20:f4:7e:80:ea:d1:
e0:43:74:43:37:02:6d:08:20:ab:85:fb:28:34:5a:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:DC:BA:69:E3:52:18:FC:A9:55:AE:EF:42:91:01:5F:A0:BE:FE
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/lcbcumnjUhj8qVWu70KRAV-gvv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.142.0/24
Signature Algorithm: sha256WithRSAEncryption
59:61:6b:67:75:4a:09:d9:0e:6f:b9:52:65:b1:bf:3c:ab:31:
e1:27:55:31:56:29:aa:02:07:4c:fc:57:8f:1f:14:7d:2b:95:
c5:27:10:c8:46:ec:67:01:28:7a:bb:70:05:0f:5c:ba:f1:a4:
0a:1c:7b:3b:f7:40:b1:98:1d:6d:5c:1b:9b:ef:4f:d7:85:2b:
7a:51:10:88:fa:34:fb:59:df:1f:cc:e7:09:de:ac:7c:7c:f1:
53:cf:64:a3:74:f4:1d:3a:1d:42:20:ca:67:70:89:7b:5b:f0:
85:81:f7:79:ff:f0:09:b3:1f:fe:8d:74:a5:0c:da:87:c4:98:
35:87:f8:4c:c4:c4:26:30:90:35:8e:f2:98:fc:94:41:db:48:
29:b3:64:95:0f:e6:0a:1d:97:4a:c0:3d:be:95:1b:8c:f7:59:
f1:fe:5c:22:ea:dd:90:24:b1:44:6f:df:00:e5:60:0f:51:83:
c0:fd:fc:a1:69:04:bd:60:8f:65:d3:c0:06:05:93:f4:0d:c4:
d2:79:e5:d7:44:32:b1:87:78:08:b1:99:bf:76:bd:ff:d4:a3:
03:cd:e6:e4:15:a6:fc:36:35:94:b2:5e:e6:d4:cd:56:36:e7:
40:09:a9:4e:28:3f:1c:04:69:39:66:96:f0:d4:9c:c3:20:ab:
fc:80:53:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ8uNhQnem9NVuYsf58M6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTA2ZDgwYWI1OTJkZTdiZTBhMzMxYmJmNGZhMDA2OGQ0
MTQwOGEwHhcNMjUwMTAxMDk0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWM2ZGNiYTY5ZTM1MjE4ZmNhOTU1YWVlZjQyOTEwMTVmYTBiZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ABglZcrAAu+Lw+6YONoNVHWTJV
gku2n/xqMgOgoetbrid6m0uTToko1NPwLAcdKAb4Du5ck3QVUNRe4e8br318LMYs
HLhJi0b8ryd2BSovY/26bVDbJj32++lVWvXQiE0nouliwbbj4PQzmr9ez8ZuGOok
a1VIhB4H6fXCKZn6LmWZC1tLG6gljP1PZh0tY0Ne6mZlVElEujOOE0QVXqYFENX1
Bq21/NEvpgxu/xkZvvw4tCK54CyDI7YfOXuleJTG/YxFCaa/wN9t91vThlYAS8Dd
izT4io3tjfLtMmyLILVYGZ22jugg9H6A6tHgQ3RDNwJtCCCrhfsoNFpYlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXG3Lpp41IY/KlVru9CkQFfoL7+MB8GA1UdIwQY
MBaAFDhQbYCrWS3nvgozG79PoAaNQUCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgt
OGRmOGFmMzAwMWJjLzEvbGNiY3VtbmpVaGo4cVZXdTcwS1JBVi1ndnY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgtOGRmOGFmMzAwMWJj
LzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmmOMA0G
CSqGSIb3DQEBCwUAA4IBAQBZYWtndUoJ2Q5vuVJlsb88qzHhJ1UxVimqAgdM/FeP
HxR9K5XFJxDIRuxnASh6u3AFD1y68aQKHHs790CxmB1tXBub70/XhSt6URCI+jT7
Wd8fzOcJ3qx8fPFTz2SjdPQdOh1CIMpncIl7W/CFgfd5//AJsx/+jXSlDNqHxJg1
h/hMxMQmMJA1jvKY/JRB20gps2SVD+YKHZdKwD2+lRuM91nx/lwi6t2QJLFEb98A
5WAPUYPA/fyhaQS9YI9l08AGBZP0DcTSeeXXRDKxh3gIsZm/dr3/1KMDzebkFab8
NjWUsl7m1M1WNudACalOKD8cBGk5Zpbw1JzDIKv8gFPM
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:38:50 2025 by rpki-client