Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/llyABaxc7xX_nMz8DCgCvXCVo0s.roa
File: llyABaxc7xX_nMz8DCgCvXCVo0s.roa (raw, json)
Hash identifier: plbTySM/epDZlmaVZFfKZCe0Y+gaAiF9FXCw68kC550=
Subject key identifier: 96:5C:80:05:AC:5C:EF:15:FF:9C:CC:FC:0C:28:02:BD:70:95:A3:4B
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 01905D222A743F8E25E4087DCDDEB4594E36
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/llyABaxc7xX_nMz8DCgCvXCVo0s.roa
Signing time: Fri 28 Jun 2024 04:37:18 +0000
ROA not before: Fri 28 Jun 2024 04:37:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207590
IP address blocks: 193.25.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:22:2a:74:3f:8e:25:e4:08:7d:cd:de:b4:59:4e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jun 28 04:37:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=965c8005ac5cef15ff9cccfc0c2802bd7095a34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:d5:9f:0c:58:53:0e:ce:46:29:28:3c:a3:
e5:59:03:c0:9a:19:f5:9d:3c:be:49:61:b2:bb:b1:
2e:ba:bf:b2:c4:5b:63:70:f0:9e:b3:d6:2c:d0:51:
32:a5:9b:21:77:96:b0:f9:7a:7e:2a:cd:bc:89:71:
f5:65:10:53:ec:c9:98:a5:78:58:5b:95:89:32:bc:
0b:9a:35:de:52:d0:79:8b:d2:15:97:9f:04:9f:12:
1b:ee:f7:d3:6d:8e:f1:ab:d9:f5:fb:01:3f:27:2c:
2d:b2:cc:59:e2:fb:db:e9:e6:af:09:6d:62:08:cc:
ca:ac:40:19:ac:99:e8:9a:7c:32:50:9d:da:d6:31:
19:7d:e4:8d:7d:d4:ae:5f:0d:d1:ff:d9:b3:df:8a:
a5:4f:62:16:18:23:08:e5:af:4c:9e:b9:86:ea:9d:
cb:00:f6:b6:02:c0:17:7d:9a:a0:7a:8f:a2:77:5b:
de:1e:b5:11:4b:f9:d8:78:3b:d5:44:b3:fc:41:24:
82:37:42:bc:14:f9:22:0c:b1:39:d8:7d:b1:ef:29:
a9:42:71:ec:c3:02:82:80:74:4c:29:37:46:fb:7c:
5a:85:1b:74:2f:6b:32:2a:37:4d:9e:41:1f:1f:0d:
33:11:ce:d8:0a:2b:5c:58:b4:53:f4:06:56:e0:87:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:80:05:AC:5C:EF:15:FF:9C:CC:FC:0C:28:02:BD:70:95:A3:4B
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/llyABaxc7xX_nMz8DCgCvXCVo0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.252.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b8:c2:75:26:da:f6:5a:39:d1:40:c6:87:09:36:9b:d4:68:
d0:a4:93:c8:41:73:7e:48:b7:22:7b:27:3a:fb:79:ef:cd:94:
f7:64:49:ae:1c:e8:d6:11:67:f0:69:70:fd:7a:26:9c:33:10:
26:b1:fe:06:e4:b7:76:55:6a:33:27:48:b1:be:2e:01:25:85:
74:47:a6:79:86:bb:96:ba:0b:0a:a5:24:4f:cc:e6:3c:92:a5:
09:9a:5f:28:1a:0e:08:c4:73:f6:51:71:c6:bb:6f:59:35:6c:
07:2d:db:9f:0e:e1:9a:24:fb:bd:3a:60:fb:61:2b:a5:1d:24:
c3:7e:c0:1f:dc:71:41:9c:30:e1:93:2f:97:99:c8:e6:65:92:
f9:da:3b:fd:5b:13:47:8a:8e:3d:12:ff:34:ba:5e:3c:12:7a:
27:95:30:b3:52:3d:ce:24:46:0f:c2:d3:d1:8c:5e:2b:54:03:
a8:c3:31:0d:36:aa:ff:f7:ab:56:d3:46:b5:9e:0c:43:48:35:
1a:d5:94:bf:2d:cd:c0:d0:3e:00:ba:a0:70:ce:ac:77:96:d1:
94:a4:fc:fd:e9:53:d5:09:5e:37:1a:5b:f1:37:f7:51:e8:44:
7b:d0:4d:a9:29:c6:53:81:ac:e6:b2:b4:a8:a5:e5:0a:09:26:
58:a9:9a:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBdIip0P44l5Ah9zd60WU42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw
NDE5NGUwHhcNMjQwNjI4MDQzNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjVjODAwNWFjNWNlZjE1ZmY5Y2NjZmMwYzI4MDJiZDcwOTVhMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZDVnwxYUw7ORikoPKPlWQPAmhn1
nTy+SWGyu7Euur+yxFtjcPCes9Ys0FEypZshd5aw+Xp+Ks28iXH1ZRBT7MmYpXhY
W5WJMrwLmjXeUtB5i9IVl58EnxIb7vfTbY7xq9n1+wE/JywtssxZ4vvb6eavCW1i
CMzKrEAZrJnomnwyUJ3a1jEZfeSNfdSuXw3R/9mz34qlT2IWGCMI5a9MnrmG6p3L
APa2AsAXfZqgeo+id1veHrURS/nYeDvVRLP8QSSCN0K8FPkiDLE52H2x7ympQnHs
wwKCgHRMKTdG+3xahRt0L2syKjdNnkEfHw0zEc7YCitcWLRT9AZW4IdnEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZcgAWsXO8V/5zM/AwoAr1wlaNLMB8GA1UdIwQY
MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt
MWFkNDdjY2QyZDlhLzEvbGx5QUJheGM3eFhfbk16OERDZ0N2WENWbzBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh
LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRn8MA0G
CSqGSIb3DQEBCwUAA4IBAQCUuMJ1Jtr2WjnRQMaHCTab1GjQpJPIQXN+SLcieyc6
+3nvzZT3ZEmuHOjWEWfwaXD9eiacMxAmsf4G5Ld2VWozJ0ixvi4BJYV0R6Z5hruW
ugsKpSRPzOY8kqUJml8oGg4IxHP2UXHGu29ZNWwHLdufDuGaJPu9OmD7YSulHSTD
fsAf3HFBnDDhky+XmcjmZZL52jv9WxNHio49Ev80ul48EnonlTCzUj3OJEYPwtPR
jF4rVAOowzENNqr/96tW00a1ngxDSDUa1ZS/Lc3A0D4AuqBwzqx3ltGUpPz96VPV
CV43GlvxN/dR6ER70E2pKcZTgazmsrSopeUKCSZYqZof
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:32 2024 by rpki-client on console-ams.rpki-client.org