Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/LC2-LBciin8SVqmWuLwN69vR8y4.roa
File: LC2-LBciin8SVqmWuLwN69vR8y4.roa (raw, json)
Hash identifier: qTb+4EJYCQXqjzq82RsghAM6QYF1U4Uf+vy2awZANzE=
Subject key identifier: 2C:2D:BE:2C:17:22:8A:7F:12:56:A9:96:B8:BC:0D:EB:DB:D1:F3:2E
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 018CC801460B5E84A3C1D82CAF52907F38BF
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/LC2-LBciin8SVqmWuLwN69vR8y4.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 194.33.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:46:0b:5e:84:a3:c1:d8:2c:af:52:90:7f:38:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c2dbe2c17228a7f1256a996b8bc0debdbd1f32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:61:97:04:71:b5:37:b2:f9:69:9c:76:34:
16:f2:18:e4:2e:40:4d:3c:8d:98:9a:19:6f:55:f2:
2a:78:0a:3d:7d:72:d1:bc:e7:5e:ba:b9:b7:df:94:
71:59:45:08:90:74:23:f1:7e:ae:ba:c6:85:42:cf:
4b:e1:5b:d6:b3:d8:8b:68:69:49:10:21:7c:39:77:
ab:09:49:d6:9c:51:fb:e8:e3:21:65:7f:9e:16:c0:
e7:34:85:9f:f7:40:33:52:14:30:fd:0b:b6:4e:7a:
3b:8e:89:08:91:b9:5f:1e:d5:d7:95:3a:b4:b0:3f:
74:72:75:7a:a4:e3:99:b0:8a:15:a5:01:04:7d:12:
a8:56:aa:6c:44:72:c0:7a:35:e1:df:b0:42:f5:64:
68:e2:be:35:16:c9:40:4c:51:81:2a:2e:e9:24:16:
fb:3e:7c:82:04:26:3c:20:35:f8:56:be:f8:65:df:
d8:cc:7e:0a:8d:96:8f:b2:f8:bf:7f:9a:9a:e8:d7:
8f:a6:c2:79:70:e2:7e:35:8c:f9:6a:57:fd:1d:8c:
7f:d8:71:ac:3e:c5:c4:2f:ae:c5:51:c0:b9:80:9b:
48:8f:27:a9:dd:72:40:c1:de:fb:9c:5b:67:de:85:
54:85:b0:66:67:a6:10:14:83:38:38:dd:7c:0b:13:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2D:BE:2C:17:22:8A:7F:12:56:A9:96:B8:BC:0D:EB:DB:D1:F3:2E
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/LC2-LBciin8SVqmWuLwN69vR8y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.191.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f7:84:0a:e9:85:d5:3a:79:38:50:10:35:17:59:84:61:58:
f7:b9:12:af:7a:48:d2:a2:f6:33:dd:58:5d:ce:7c:f9:a3:8a:
72:65:f8:1a:e8:3c:e5:00:49:70:1c:5c:55:1a:87:8d:ac:32:
e1:35:7d:e8:03:06:eb:92:13:76:c4:0e:cd:6a:49:9d:d8:31:
9e:1f:07:be:6b:bb:ce:6d:1a:b2:f2:47:cf:14:91:44:b1:c3:
75:2f:d6:f7:f4:0d:fa:c5:58:a7:2f:40:bc:5f:a1:30:7a:92:
4e:c9:e4:96:aa:5c:08:24:89:11:dd:b8:4c:c5:38:8c:21:21:
ab:24:7d:0d:f9:25:6a:0c:f3:ae:d1:b5:a1:fe:26:8b:7b:9e:
c7:03:40:d4:c3:60:d0:bf:2f:65:f5:a4:9f:77:8c:26:e7:f9:
06:f1:d6:5e:b2:54:75:f3:fc:67:87:1b:f3:64:3f:e0:ce:d5:
e3:e5:47:28:84:72:a0:50:85:a1:df:40:8b:99:35:e7:d9:e3:
d1:44:f1:2e:70:6e:a1:d0:f1:ce:c9:eb:26:32:ca:00:ae:a5:
10:53:5a:f4:d8:02:91:56:0a:7f:f3:61:61:78:4e:68:42:b8:
32:38:17:6c:b3:ae:c4:a7:23:65:a6:28:18:ab:35:1e:4c:b8:
be:93:82:6e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzIAUYLXoSjwdgsr1KQfzi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh
NWQ0MGIwHhcNMjQwMTAyMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzJkYmUyYzE3MjI4YTdmMTI1NmE5OTZiOGJjMGRlYmRiZDFmMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjlhlwRxtTey+WmcdjQW8hjkLkBN
PI2YmhlvVfIqeAo9fXLRvOdeurm335RxWUUIkHQj8X6uusaFQs9L4VvWs9iLaGlJ
ECF8OXerCUnWnFH76OMhZX+eFsDnNIWf90AzUhQw/Qu2Tno7jokIkblfHtXXlTq0
sD90cnV6pOOZsIoVpQEEfRKoVqpsRHLAejXh37BC9WRo4r41FslATFGBKi7pJBb7
PnyCBCY8IDX4Vr74Zd/YzH4KjZaPsvi/f5qa6NePpsJ5cOJ+NYz5alf9HYx/2HGs
PsXEL67FUcC5gJtIjyep3XJAwd77nFtn3oVUhbBmZ6YQFIM4ON18CxMQDwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCwtviwXIop/Elaplri8Devb0fMuMB8GA1UdIwQY
MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2
LThjZTYwYTVjOGIxZi8xL0xDMi1MQmNpaW44U1ZxbVd1THdONjl2Ujh5NC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2LThjZTYwYTVjOGIx
Zi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCIb8w
DQYJKoZIhvcNAQELBQADggEBAEf3hArphdU6eThQEDUXWYRhWPe5Eq96SNKi9jPd
WF3OfPmjinJl+BroPOUASXAcXFUah42sMuE1fegDBuuSE3bEDs1qSZ3YMZ4fB75r
u85tGrLyR88UkUSxw3Uv1vf0DfrFWKcvQLxfoTB6kk7J5JaqXAgkiRHduEzFOIwh
IaskfQ35JWoM867RtaH+Jot7nscDQNTDYNC/L2X1pJ93jCbn+Qbx1l6yVHXz/GeH
G/NkP+DO1ePlRyiEcqBQhaHfQIuZNefZ49FE8S5wbqHQ8c7J6yYyygCupRBTWvTY
ApFWCn/zYWF4TmhCuDI4F2yzrsSnI2WmKBirNR5MuL6Tgm4=
-----END CERTIFICATE-----
Generated at Mon Apr 29 13:37:49 2024 by rpki-client on console-ams.rpki-client.org