Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/lf_Yv3CNl5tvmZS0kmMIeXBzovA.roa
File: lf_Yv3CNl5tvmZS0kmMIeXBzovA.roa (raw, json)
Hash identifier: nhOI5xcXmGcWkL/P2cZJlDGslxvmYvC2aCoVDZIm9vE=
Subject key identifier: 95:FF:D8:BF:70:8D:97:9B:6F:99:94:B4:92:63:08:79:70:73:A2:F0
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 018CC6B92660A47B0715CB30779E97392B12
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/lf_Yv3CNl5tvmZS0kmMIeXBzovA.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397688
IP address blocks: 2.58.10.0/24 maxlen: 24
2.58.9.0/24 maxlen: 24
2.58.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 16:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:26:60:a4:7b:07:15:cb:30:77:9e:97:39:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95ffd8bf708d979b6f9994b4926308797073a2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:1d:54:8c:cb:a1:78:d9:94:7f:b3:cb:b5:
02:a4:b5:36:fc:1b:a5:07:bc:c8:77:f4:06:84:41:
1a:ff:4f:84:58:40:fe:ae:ea:61:bf:75:f1:38:88:
e9:81:db:e8:c9:80:17:37:2f:e9:d1:c9:d7:64:f4:
5d:83:c9:3f:73:5e:ea:99:5e:22:4e:b2:c7:20:81:
53:10:93:f8:07:5b:14:1e:28:83:66:d0:9b:f2:df:
af:dc:3a:9d:a5:f6:9e:96:23:6b:16:36:a2:07:b6:
41:11:a9:4c:c3:d1:7d:2b:0a:65:2c:b0:58:51:fe:
46:19:8d:25:b0:5b:c1:f3:fd:95:41:6a:d1:73:db:
98:11:5e:65:41:c7:2b:0d:64:79:8f:e2:c9:de:64:
26:67:42:e1:41:c1:1f:22:97:ea:2b:8c:1d:57:d9:
35:c2:a3:12:d1:15:7e:28:65:fe:d4:34:f7:9f:60:
06:aa:c3:f2:bb:6f:f8:91:9d:f3:91:c5:58:52:29:
d4:84:61:9e:b0:9a:f5:c5:b6:7f:ac:01:c9:51:b9:
e1:e5:91:fe:a8:52:17:a7:63:4a:9a:a8:44:a9:e4:
73:58:c1:57:c9:d9:ff:29:c9:8b:55:62:65:90:b3:
3c:66:ca:78:92:d7:9a:b8:14:38:fd:e7:84:a4:d2:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FF:D8:BF:70:8D:97:9B:6F:99:94:B4:92:63:08:79:70:73:A2:F0
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/lf_Yv3CNl5tvmZS0kmMIeXBzovA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.8.0-2.58.10.255
Signature Algorithm: sha256WithRSAEncryption
3d:78:76:4d:17:6b:24:75:02:34:ea:a3:03:23:21:c9:15:0a:
2e:68:7d:29:e0:17:f9:68:0d:1d:13:25:33:a0:3c:e8:d5:d4:
6d:f0:5c:bf:31:bd:3c:4a:39:4e:0a:9e:ca:da:b6:52:11:29:
ec:67:3c:a9:fb:e9:c4:a2:ed:98:25:fa:a2:6a:fa:6a:cb:2b:
33:93:bb:65:d5:b0:97:4d:23:fe:49:04:7a:d7:a4:ae:fe:47:
f9:27:d7:5f:33:fe:a4:46:58:b9:5e:07:54:ca:13:51:1e:bd:
4c:29:f6:45:9c:bd:6a:83:75:04:6f:42:9a:fe:e9:79:ad:93:
dc:12:47:9a:44:8f:c8:4e:9b:ab:47:4e:a3:d6:88:6e:b3:b5:
0b:ba:9a:25:11:72:23:5b:3d:ad:a0:1b:ee:95:30:49:7f:23:
41:22:f4:b4:38:a6:2c:1c:6d:d1:e4:a1:aa:ea:45:4c:5b:d6:
6a:7e:4e:51:50:4d:8b:9d:18:25:cf:3f:51:c0:76:11:4c:56:
10:ba:39:25:82:50:fc:52:0d:fe:92:eb:92:c1:66:63:7d:72:
48:8c:75:31:5b:0c:9b:4c:fc:f3:13:ce:22:2f:01:22:8c:88:
4e:70:f3:eb:ba:bb:98:6b:1d:a5:5c:c6:02:55:dc:46:90:d6:
0f:65:18:5f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzGuSZgpHsHFcswd56XOSsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4
Y2NkNjcwHhcNMjQwMTAxMjAzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWZmZDhiZjcwOGQ5NzliNmY5OTk0YjQ5MjYzMDg3OTcwNzNhMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnIdVIzLoXjZlH+zy7UCpLU2/Bul
B7zId/QGhEEa/0+EWED+ruphv3XxOIjpgdvoyYAXNy/p0cnXZPRdg8k/c17qmV4i
TrLHIIFTEJP4B1sUHiiDZtCb8t+v3DqdpfaeliNrFjaiB7ZBEalMw9F9KwplLLBY
Uf5GGY0lsFvB8/2VQWrRc9uYEV5lQccrDWR5j+LJ3mQmZ0LhQcEfIpfqK4wdV9k1
wqMS0RV+KGX+1DT3n2AGqsPyu2/4kZ3zkcVYUinUhGGesJr1xbZ/rAHJUbnh5ZH+
qFIXp2NKmqhEqeRzWMFXydn/KcmLVWJlkLM8Zsp4kteauBQ4/eeEpNLWnwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJX/2L9wjZebb5mUtJJjCHlwc6LwMB8GA1UdIwQY
MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt
MTA5NTlhYWE4YjNlLzEvbGZfWXYzQ05sNXR2bVpTMGttTUllWEJ6b3ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl
LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMCOggD
BAACOgowDQYJKoZIhvcNAQELBQADggEBAD14dk0XayR1AjTqowMjIckVCi5ofSng
F/loDR0TJTOgPOjV1G3wXL8xvTxKOU4KnsratlIRKexnPKn76cSi7Zgl+qJq+mrL
KzOTu2XVsJdNI/5JBHrXpK7+R/kn118z/qRGWLleB1TKE1EevUwp9kWcvWqDdQRv
Qpr+6Xmtk9wSR5pEj8hOm6tHTqPWiG6ztQu6miURciNbPa2gG+6VMEl/I0Ei9LQ4
piwcbdHkoarqRUxb1mp+TlFQTYudGCXPP1HAdhFMVhC6OSWCUPxSDf6S65LBZmN9
ckiMdTFbDJtM/PMTziIvASKMiE5w8+u6u5hrHaVcxgJV3EaQ1g9lGF8=
-----END CERTIFICATE-----
Generated at Thu Jun 13 22:10:12 2024 by rpki-client on console-ams.rpki-client.org