Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/lFC-_S7LLjYTac5xLO2UPcTIncI.roa
File: lFC-_S7LLjYTac5xLO2UPcTIncI.roa (raw, json)
Hash identifier: 6B97FrpUZf5Qr4qCJUNasTMM7nOMh4VHE+ZjJgBrD1A=
Subject key identifier: 94:50:BE:FD:2E:CB:2E:36:13:69:CE:71:2C:ED:94:3D:C4:C8:9D:C2
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 018CC9BCBE248AAD1FFADB87F69F21D35F03
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/lFC-_S7LLjYTac5xLO2UPcTIncI.roa
Signing time: Tue 02 Jan 2024 10:33:58 +0000
ROA not before: Tue 02 Jan 2024 10:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43804
IP address blocks: 193.200.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:be:24:8a:ad:1f:fa:db:87:f6:9f:21:d3:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Jan 2 10:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9450befd2ecb2e361369ce712ced943dc4c89dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:15:f1:e9:55:eb:cc:5f:77:1c:ba:ec:51:
59:61:58:cf:73:70:74:67:df:3d:da:f8:eb:6d:8b:
75:d0:92:ef:93:88:cb:63:a5:d4:ca:ea:d8:51:ff:
7e:fb:81:32:07:34:3a:9e:2a:34:b2:14:6c:a3:c8:
43:92:57:ee:2b:8b:29:b0:57:1d:03:0b:e0:d0:42:
f5:99:e2:58:a2:71:01:96:d2:6d:4c:31:b9:41:f1:
94:54:b2:60:83:aa:6c:4f:18:f0:b0:0a:6b:52:45:
0b:43:f8:85:d3:51:20:22:3e:cf:79:a3:de:f6:f4:
fc:a3:13:a6:09:74:b0:7b:92:82:2b:76:5f:ef:59:
72:7e:08:30:4b:06:7e:bd:51:6b:e8:5a:fb:75:5f:
40:8e:c3:36:21:d3:b8:2c:26:91:d8:15:20:59:9a:
66:73:6f:92:ed:1e:e0:95:33:0a:e3:69:70:93:5b:
c8:33:a8:6d:72:ac:42:8b:47:86:24:42:33:cc:59:
39:32:b0:32:7c:50:e7:79:00:f1:20:21:11:c0:24:
8f:25:d6:d9:9e:e0:be:41:fc:7b:11:9a:b0:d7:54:
11:25:e9:1f:81:9e:b1:9c:9f:c4:51:ec:c5:a7:97:
e6:25:77:32:95:33:0c:10:ff:ad:68:d3:80:32:be:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:BE:FD:2E:CB:2E:36:13:69:CE:71:2C:ED:94:3D:C4:C8:9D:C2
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/lFC-_S7LLjYTac5xLO2UPcTIncI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.203.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b0:6f:2b:92:02:79:87:f0:d2:45:74:42:3d:a2:49:e0:36:
03:6b:18:a2:96:09:2b:e9:31:42:3f:a9:34:1f:fc:26:d9:c2:
56:40:bb:c3:c8:c9:b5:65:c2:cc:ff:97:74:36:04:18:81:e5:
f0:e3:79:5c:a4:44:6c:4a:17:89:93:e3:9e:93:44:0d:11:c3:
30:86:97:96:29:f0:0e:33:53:97:8d:12:b4:e9:d9:59:07:71:
c8:9b:35:85:4f:dd:68:00:e3:bf:32:21:57:53:6d:44:4e:24:
d6:05:ed:32:1f:d0:d5:d6:a3:2b:70:9a:7f:18:1b:9d:03:7a:
32:96:b6:d4:78:72:1f:bc:71:65:e1:6e:c3:cd:ab:1f:58:fb:
59:d8:52:1e:4b:1c:f8:0e:3b:61:8e:2f:14:29:c2:03:0f:59:
ec:1e:07:5f:67:37:04:db:76:83:1e:10:88:72:21:51:5b:58:
59:e6:ca:e9:32:f9:94:5c:ed:75:2d:67:bb:7f:a2:0d:89:d0:
bd:47:ff:f2:8b:32:c7:48:8a:86:c6:dc:c0:29:8b:9b:8a:d7:
98:1c:a3:08:d9:6a:04:5c:4d:bb:98:f9:f0:a4:17:8f:36:15:
1c:1a:28:9a:d4:14:94:ba:03:6e:b2:b1:b1:52:3c:2a:5e:fd:
7d:01:85:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvL4kiq0f+tuH9p8h018DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBlZjIzYjQ1NmM5ZGIyMGQzMDc0MjkzMmIwMTdmYzU3
MjRlNTYwHhcNMjQwMTAyMTAzMzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDUwYmVmZDJlY2IyZTM2MTM2OWNlNzEyY2VkOTQzZGM0Yzg5ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNMV8elV68xfdxy67FFZYVjPc3B0
Z9892vjrbYt10JLvk4jLY6XUyurYUf9++4EyBzQ6nio0shRso8hDklfuK4spsFcd
Awvg0EL1meJYonEBltJtTDG5QfGUVLJgg6psTxjwsAprUkULQ/iF01EgIj7PeaPe
9vT8oxOmCXSwe5KCK3Zf71lyfggwSwZ+vVFr6Fr7dV9AjsM2IdO4LCaR2BUgWZpm
c2+S7R7glTMK42lwk1vIM6htcqxCi0eGJEIzzFk5MrAyfFDneQDxICERwCSPJdbZ
nuC+Qfx7EZqw11QRJekfgZ6xnJ/EUezFp5fmJXcylTMMEP+taNOAMr4AowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJRQvv0uyy42E2nOcSztlD3EyJ3CMB8GA1UdIwQY
MBaAFKWQ7yO0VsnbINMHQpMrAX/Fck5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzct
MTUyZDIwNGViZmEzLzEvbEZDLV9TN0xMallUYWM1eExPMlVQY1RJbmNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzctMTUyZDIwNGViZmEz
LzEvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcjLMA0G
CSqGSIb3DQEBCwUAA4IBAQACsG8rkgJ5h/DSRXRCPaJJ4DYDaxiilgkr6TFCP6k0
H/wm2cJWQLvDyMm1ZcLM/5d0NgQYgeXw43lcpERsSheJk+Oek0QNEcMwhpeWKfAO
M1OXjRK06dlZB3HImzWFT91oAOO/MiFXU21ETiTWBe0yH9DV1qMrcJp/GBudA3oy
lrbUeHIfvHFl4W7DzasfWPtZ2FIeSxz4Djthji8UKcIDD1nsHgdfZzcE23aDHhCI
ciFRW1hZ5srpMvmUXO11LWe7f6INidC9R//yizLHSIqGxtzAKYubiteYHKMI2WoE
XE27mPnwpBePNhUcGiia1BSUugNusrGxUjwqXv19AYWt
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:01:04 2024 by rpki-client on console-ams.rpki-client.org