Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/liRmjtCZrawgbauYlg7v074_-lk.roa
File: liRmjtCZrawgbauYlg7v074_-lk.roa (raw, json)
Hash identifier: oD37Xl0fVcj1oWd2f3i1gzLy9jJpdIpRRzEHca0Lfe8=
Subject key identifier: 96:24:66:8E:D0:99:AD:AC:20:6D:AB:98:96:0E:EF:D3:BE:3F:FA:59
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 018D898167150606E64721E5D8495871ADA3
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/liRmjtCZrawgbauYlg7v074_-lk.roa
Signing time: Thu 08 Feb 2024 16:16:15 +0000
ROA not before: Thu 08 Feb 2024 16:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48276
IP address blocks: 176.96.186.0/24 maxlen: 24
176.96.187.0/24 maxlen: 24
176.96.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:81:67:15:06:06:e6:47:21:e5:d8:49:58:71:ad:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Feb 8 16:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9624668ed099adac206dab98960eefd3be3ffa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:ca:51:c1:34:77:e7:45:71:f7:6b:6d:8e:
76:fc:02:5c:2c:df:a5:17:a5:ab:b9:7c:11:93:65:
e4:77:01:df:d9:41:78:e5:5e:c5:c4:70:b1:f6:33:
2d:6b:53:32:86:4c:51:c2:a9:6b:6a:26:28:18:84:
3b:52:2f:cc:aa:32:20:a9:60:58:3d:11:8a:7e:99:
75:b6:c1:4d:87:4d:e0:81:91:a0:6a:ae:95:16:cf:
54:f4:5b:e7:21:70:11:f8:c9:d7:b9:fd:ce:2e:da:
eb:67:88:76:df:29:0e:3b:93:d5:3e:fd:72:f0:69:
72:43:77:9a:c5:f4:ef:f7:c2:b8:c2:0d:21:59:05:
52:31:e3:dc:68:cd:a3:7e:5b:a5:a7:44:36:24:a5:
18:1f:34:06:2f:45:b2:e4:be:f1:8c:f8:bc:e1:a9:
f2:38:79:3e:40:cb:fc:a8:88:3e:70:56:92:b3:58:
26:5f:5c:97:7b:ab:89:ac:0c:01:9c:3a:45:0b:8e:
11:1e:e2:9d:3c:f2:c2:ed:fb:82:43:6b:3c:02:08:
1e:0d:91:ab:83:e0:66:3f:61:d5:e5:1e:56:26:66:
e5:83:48:93:0d:f2:01:11:b1:03:80:16:71:4d:0e:
bd:16:3b:4e:60:6e:cc:7c:1a:ac:00:75:7b:4d:d2:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:66:8E:D0:99:AD:AC:20:6D:AB:98:96:0E:EF:D3:BE:3F:FA:59
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/liRmjtCZrawgbauYlg7v074_-lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.186.0-176.96.188.255
Signature Algorithm: sha256WithRSAEncryption
83:ba:be:76:e6:c2:9c:27:7a:9f:f6:75:77:72:ad:1c:91:f4:
d6:13:0d:83:ff:75:fe:b9:63:c4:2d:9a:a2:c4:a3:00:c1:ca:
87:3f:fb:54:f9:c7:a9:bc:4e:ca:f2:37:1c:b6:fe:b4:d7:c9:
8e:80:4b:cd:23:80:0b:ae:19:85:4d:e2:8c:f8:6a:e6:36:14:
81:4e:a0:a6:7f:05:e5:db:b5:71:12:bb:48:23:16:22:c1:69:
65:e8:46:08:2a:f3:b7:77:68:2f:b7:9b:53:97:9f:d8:72:5d:
b5:48:c6:3c:f7:6c:7a:5d:cc:0c:6d:50:fb:1b:76:62:20:b9:
e7:90:40:49:5f:c6:f1:1f:83:d1:0c:72:94:15:53:6b:a2:71:
57:e6:6e:fa:a0:85:12:74:17:8b:bd:60:6e:91:d1:0b:ba:20:
96:17:4a:d0:93:6f:ed:b2:31:64:7e:9e:f9:a3:76:fd:0d:22:
b8:eb:90:26:99:d0:c2:96:d1:f0:cf:79:7d:49:9a:66:c5:8d:
96:ab:39:60:4f:69:a4:bf:0c:c6:ed:cb:6c:17:6d:fd:b0:b6:
97:e8:42:80:5c:98:89:17:64:e4:c9:9f:a3:33:a2:12:23:2f:
ab:68:b6:43:08:4c:d1:5d:51:cc:2e:61:43:9f:2d:8b:4c:17:
b2:1c:e7:f8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY2JgWcVBgbmRyHl2ElYca2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx
ZGRhMTYwHhcNMjQwMjA4MTYxNjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjI0NjY4ZWQwOTlhZGFjMjA2ZGFiOTg5NjBlZWZkM2JlM2ZmYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/rKUcE0d+dFcfdrbY52/AJcLN+l
F6WruXwRk2XkdwHf2UF45V7FxHCx9jMta1MyhkxRwqlraiYoGIQ7Ui/MqjIgqWBY
PRGKfpl1tsFNh03ggZGgaq6VFs9U9FvnIXAR+MnXuf3OLtrrZ4h23ykOO5PVPv1y
8GlyQ3eaxfTv98K4wg0hWQVSMePcaM2jflulp0Q2JKUYHzQGL0Wy5L7xjPi84any
OHk+QMv8qIg+cFaSs1gmX1yXe6uJrAwBnDpFC44RHuKdPPLC7fuCQ2s8AggeDZGr
g+BmP2HV5R5WJmblg0iTDfIBEbEDgBZxTQ69FjtOYG7MfBqsAHV7TdICFQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJYkZo7Qma2sIG2rmJYO79O+P/pZMB8GA1UdIwQY
MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt
ZmVlOGYzNzkwNTY3LzEvbGlSbWp0Q1pyYXdnYmF1WWxnN3YwNzRfLWxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3
LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGwYLoD
BACwYLwwDQYJKoZIhvcNAQELBQADggEBAIO6vnbmwpwnep/2dXdyrRyR9NYTDYP/
df65Y8QtmqLEowDByoc/+1T5x6m8TsryNxy2/rTXyY6AS80jgAuuGYVN4oz4auY2
FIFOoKZ/BeXbtXESu0gjFiLBaWXoRggq87d3aC+3m1OXn9hyXbVIxjz3bHpdzAxt
UPsbdmIgueeQQElfxvEfg9EMcpQVU2uicVfmbvqghRJ0F4u9YG6R0Qu6IJYXStCT
b+2yMWR+nvmjdv0NIrjrkCaZ0MKW0fDPeX1JmmbFjZarOWBPaaS/DMbty2wXbf2w
tpfoQoBcmIkXZOTJn6MzohIjL6totkMITNFdUcwuYUOfLYtMF7Ic5/g=
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:03:14 2024 by rpki-client on console-fra.rpki-client.org