Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/LCmUJzOC2WoRnB6EKWpuOIs0Ni0.roa
File: LCmUJzOC2WoRnB6EKWpuOIs0Ni0.roa (raw, json)
Hash identifier: pkq+ILjU79ezdTiDybRrTPB7CzOcR9l+7WVGSb6nHZ8=
Subject key identifier: 2C:29:94:27:33:82:D9:6A:11:9C:1E:84:29:6A:6E:38:8B:34:36:2D
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 0191D76077910CCA4EF8C156C605C718700C
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/LCmUJzOC2WoRnB6EKWpuOIs0Ni0.roa
Signing time: Mon 09 Sep 2024 15:21:49 +0000
ROA not before: Mon 09 Sep 2024 15:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 143.223.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:60:77:91:0c:ca:4e:f8:c1:56:c6:05:c7:18:70:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Sep 9 15:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c2994273382d96a119c1e84296a6e388b34362d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:6e:e1:1c:44:54:69:24:78:5a:8f:59:56:
fc:85:78:17:f3:30:a9:11:b3:5e:ae:b4:5c:a5:e2:
0a:16:ce:c1:a0:00:f9:fb:4d:89:09:e4:87:b7:d9:
4d:67:6f:3b:0f:55:01:c5:cc:5d:e9:ee:d2:fe:14:
48:f3:0d:8c:31:8b:03:68:b4:35:aa:0a:c1:2a:65:
f2:05:95:30:5c:e4:ee:c1:de:3f:38:73:d5:b5:13:
a7:42:a4:f1:65:54:26:11:23:ac:58:96:bc:62:95:
16:fe:d7:56:86:dd:6f:6f:43:df:9b:82:95:e2:ff:
ad:34:83:25:e6:a4:20:cd:db:98:c0:2d:8e:0f:4a:
62:ae:50:79:eb:1b:fa:c8:33:2c:69:e2:ca:bb:46:
75:aa:93:ca:12:e0:09:d3:67:8f:fd:46:4c:1f:ba:
16:0e:16:1c:2f:6c:84:2b:ce:09:e8:de:aa:1c:2d:
22:1b:aa:d3:d3:62:d0:b3:b0:c3:52:82:38:36:34:
f5:15:c4:4c:98:a4:05:53:ec:ca:7b:b4:79:4a:0f:
34:38:1f:b4:85:60:ba:4b:15:14:71:49:19:1e:5e:
5f:04:68:f5:8c:13:cf:08:77:d3:fb:73:93:84:7c:
12:bb:ce:64:16:ff:71:d5:af:8d:ff:4b:78:12:c7:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:94:27:33:82:D9:6A:11:9C:1E:84:29:6A:6E:38:8B:34:36:2D
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/LCmUJzOC2WoRnB6EKWpuOIs0Ni0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.223.99.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8d:f9:a3:bf:c9:dd:e9:a9:99:43:b2:f7:bc:50:fd:6b:d7:
89:13:59:96:a0:fd:6e:0b:a9:48:9f:4d:28:91:43:e9:81:bd:
00:b4:cd:d9:9b:1a:b5:ea:b7:99:8d:b6:20:28:06:0b:5a:2f:
d1:69:72:81:28:a7:c1:d7:be:38:4b:f9:d1:5d:4b:f0:1d:44:
44:c9:71:dc:f8:97:43:97:95:62:84:93:55:b8:ca:1c:6e:e4:
e2:c3:8a:c5:62:5f:ad:69:5a:71:77:3a:07:c7:9b:0a:25:14:
ba:13:73:0a:3a:7e:49:eb:4c:1d:c6:a3:e4:8a:76:7c:0a:47:
cd:2e:57:b6:c6:66:80:bf:33:38:ea:5a:a1:3a:38:eb:32:fa:
c1:fe:9b:6f:90:54:55:35:db:b4:4b:fa:a6:90:fb:7a:eb:2d:
54:4a:11:5a:44:fc:26:95:d0:30:20:9e:f1:18:82:da:57:6d:
18:64:10:49:95:01:c3:a2:9c:20:72:12:05:d8:1a:be:1b:f8:
ea:5b:a1:f9:74:a8:77:5b:da:55:75:bd:58:e7:ce:7f:78:d9:
e8:cb:7d:dc:6c:f7:62:2b:9a:ea:14:ad:a3:f8:34:f6:9f:02:
fa:cc:4b:b2:d9:7a:72:a2:a1:8e:07:d2:37:58:f4:ee:10:76:
cf:60:90:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHXYHeRDMpO+MFWxgXHGHAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz
NWUyMmIwHhcNMjQwOTA5MTUyMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzI5OTQyNzMzODJkOTZhMTE5YzFlODQyOTZhNmUzODhiMzQzNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMdu4RxEVGkkeFqPWVb8hXgX8zCp
EbNerrRcpeIKFs7BoAD5+02JCeSHt9lNZ287D1UBxcxd6e7S/hRI8w2MMYsDaLQ1
qgrBKmXyBZUwXOTuwd4/OHPVtROnQqTxZVQmESOsWJa8YpUW/tdWht1vb0Pfm4KV
4v+tNIMl5qQgzduYwC2OD0pirlB56xv6yDMsaeLKu0Z1qpPKEuAJ02eP/UZMH7oW
DhYcL2yEK84J6N6qHC0iG6rT02LQs7DDUoI4NjT1FcRMmKQFU+zKe7R5Sg80OB+0
hWC6SxUUcUkZHl5fBGj1jBPPCHfT+3OThHwSu85kFv9x1a+N/0t4EscHnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwplCczgtlqEZwehClqbjiLNDYtMB8GA1UdIwQY
MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt
MWE4MGEyZjdkN2VhLzEvTENtVUp6T0MyV29SbkI2RUtXcHVPSXMwTmkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh
LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj99jMA0G
CSqGSIb3DQEBCwUAA4IBAQCBjfmjv8nd6amZQ7L3vFD9a9eJE1mWoP1uC6lIn00o
kUPpgb0AtM3Zmxq16reZjbYgKAYLWi/RaXKBKKfB1744S/nRXUvwHUREyXHc+JdD
l5VihJNVuMocbuTiw4rFYl+taVpxdzoHx5sKJRS6E3MKOn5J60wdxqPkinZ8CkfN
Lle2xmaAvzM46lqhOjjrMvrB/ptvkFRVNdu0S/qmkPt66y1UShFaRPwmldAwIJ7x
GILaV20YZBBJlQHDopwgchIF2Bq+G/jqW6H5dKh3W9pVdb1Y585/eNnoy33cbPdi
K5rqFK2j+DT2nwL6zEuy2XpyoqGOB9I3WPTuEHbPYJDE
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:38 2024 by rpki-client on console-ams.rpki-client.org