Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/lu8TaFEU9ClUCgn4WEMuDUEXztA.roa
File: lu8TaFEU9ClUCgn4WEMuDUEXztA.roa (raw, json)
Hash identifier: Aiota3MNOp6RlEHNkqCOJKPu9a550TciEQLYuCjDkSs=
Subject key identifier: 96:EF:13:68:51:14:F4:29:54:0A:09:F8:58:43:2E:0D:41:17:CE:D0
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 0190EF4525A7CAA55ABCBCCD6F0EEEE2EEF0
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/lu8TaFEU9ClUCgn4WEMuDUEXztA.roa
Signing time: Fri 26 Jul 2024 13:40:04 +0000
ROA not before: Fri 26 Jul 2024 13:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31734
IP address blocks: 91.208.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:45:25:a7:ca:a5:5a:bc:bc:cd:6f:0e:ee:e2:ee:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Jul 26 13:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ef13685114f429540a09f858432e0d4117ced0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:ae:01:81:b5:b9:2b:ec:b1:32:1c:f2:da:
fc:50:62:85:1b:89:93:53:6f:ba:a8:8b:bc:4e:ba:
82:3d:19:b0:10:ae:be:e9:ea:ad:c7:3a:43:61:d2:
28:05:57:09:8b:7b:ed:1a:4c:02:b0:c3:d8:b1:44:
c3:23:21:b7:c5:e6:5c:73:cf:a5:ec:8d:d6:4f:ba:
d5:96:fe:60:8b:a3:24:c4:a7:23:59:f8:22:66:95:
a2:7c:7d:fb:c8:87:d7:f8:38:90:4e:cd:d0:7f:13:
2f:1a:6d:5b:03:fa:5a:7f:07:9b:4b:4b:85:93:10:
07:b0:39:10:8a:e2:50:c3:7f:ac:cb:51:b4:1d:0c:
ed:9f:40:18:59:fd:64:39:68:61:f9:aa:e1:8c:51:
8a:02:c7:6d:af:71:09:96:f3:91:7f:75:0d:f9:61:
8b:5a:2f:ec:56:0e:9f:53:1f:88:41:a0:e0:be:28:
74:b5:37:c8:30:5f:33:6a:9b:35:8a:e1:f2:ac:37:
4d:5d:8e:96:3f:e5:d2:aa:22:e2:81:b3:6e:05:0f:
b3:c0:8b:e3:b4:9a:ef:8e:4a:f2:46:44:cc:3f:85:
e5:aa:8f:d9:70:a9:80:1d:52:5a:ba:98:f1:4c:76:
f4:25:25:8c:72:56:77:16:5c:62:48:b6:4d:76:77:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:13:68:51:14:F4:29:54:0A:09:F8:58:43:2E:0D:41:17:CE:D0
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/lu8TaFEU9ClUCgn4WEMuDUEXztA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:75:67:e3:6c:a3:53:71:51:94:55:da:3e:0e:b3:73:4c:85:
31:72:20:c7:05:13:41:b3:96:21:82:49:98:94:64:d4:9c:38:
43:f5:18:16:e7:d7:2c:22:20:7b:59:87:7c:89:61:36:34:42:
ff:8a:48:92:3c:2b:29:2d:2a:89:78:3c:3f:a8:51:30:0c:33:
fd:1a:3d:76:f7:ab:67:88:2b:14:15:65:33:10:a2:e6:a8:1c:
f8:d5:85:b4:77:15:71:e4:87:9a:0b:58:71:17:43:16:4a:6f:
11:09:58:6e:12:a0:1f:43:e4:e0:5c:71:d8:e9:e9:5d:8f:9d:
53:09:19:8e:fc:e7:78:8d:6a:b6:35:06:9c:99:82:0b:f8:cb:
3f:ae:70:3a:f0:90:26:ab:6f:f7:9b:a9:94:0f:0b:7c:5e:19:
4e:2f:d0:57:18:da:93:fe:a1:30:ab:5d:12:dc:d5:56:fa:60:
cd:8e:c2:a7:e4:97:80:3c:ec:a6:ea:12:6d:ad:30:56:c9:b8:
0c:6e:cb:f1:8e:77:56:54:5a:a0:d5:e7:97:e2:b3:aa:eb:45:
98:e0:ad:28:8a:80:43:4f:55:b4:59:93:7c:1e:07:8f:b9:d8:
ad:07:a4:f3:34:60:ac:c7:c6:2f:15:f0:64:67:34:b6:04:d4:
0b:f2:d0:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDvRSWnyqVavLzNbw7u4u7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMmRkMDY1MDFmOTlkNDcwMjJkM2E0MDM5ZWZjZjQzOWQw
YmM3ZTYwHhcNMjQwNzI2MTM0MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmVmMTM2ODUxMTRmNDI5NTQwYTA5Zjg1ODQzMmUwZDQxMTdjZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFeuAYG1uSvssTIc8tr8UGKFG4mT
U2+6qIu8TrqCPRmwEK6+6eqtxzpDYdIoBVcJi3vtGkwCsMPYsUTDIyG3xeZcc8+l
7I3WT7rVlv5gi6MkxKcjWfgiZpWifH37yIfX+DiQTs3QfxMvGm1bA/pafwebS0uF
kxAHsDkQiuJQw3+sy1G0HQztn0AYWf1kOWhh+arhjFGKAsdtr3EJlvORf3UN+WGL
Wi/sVg6fUx+IQaDgvih0tTfIMF8zaps1iuHyrDdNXY6WP+XSqiLigbNuBQ+zwIvj
tJrvjkryRkTMP4Xlqo/ZcKmAHVJaupjxTHb0JSWMclZ3FlxiSLZNdnd6SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbvE2hRFPQpVAoJ+FhDLg1BF87QMB8GA1UdIwQY
MBaAFLIt0GUB+Z1HAi06QDnvz0OdC8fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMt
NzExZmZkZjkxNjk4LzEvbHU4VGFGRVU5Q2xVQ2duNFdFTXVEVUVYenRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMtNzExZmZkZjkxNjk4
LzEvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DfMA0G
CSqGSIb3DQEBCwUAA4IBAQCjdWfjbKNTcVGUVdo+DrNzTIUxciDHBRNBs5YhgkmY
lGTUnDhD9RgW59csIiB7WYd8iWE2NEL/ikiSPCspLSqJeDw/qFEwDDP9Gj1296tn
iCsUFWUzEKLmqBz41YW0dxVx5IeaC1hxF0MWSm8RCVhuEqAfQ+TgXHHY6eldj51T
CRmO/Od4jWq2NQacmYIL+Ms/rnA68JAmq2/3m6mUDwt8XhlOL9BXGNqT/qEwq10S
3NVW+mDNjsKn5JeAPOym6hJtrTBWybgMbsvxjndWVFqg1eeX4rOq60WY4K0oioBD
T1W0WZN8HgePuditB6TzNGCsx8YvFfBkZzS2BNQL8tAi
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:44:24 2024 by rpki-client on console-fra.rpki-client.org