Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/LzdpYqSug1P5xsnQBNEIzRTo23w.roa
File: LzdpYqSug1P5xsnQBNEIzRTo23w.roa (raw, json)
Hash identifier: Uh8gVDakNEe4ugoos9sjo1R6fmcSAS3U1Q/E0+m4KG4=
Subject key identifier: 2F:37:69:62:A4:AE:83:53:F9:C6:C9:D0:04:D1:08:CD:14:E8:DB:7C
Certificate issuer: /CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Certificate serial: 018CC3B680658A68603CE71536529096D488
Authority key identifier: 87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/LzdpYqSug1P5xsnQBNEIzRTo23w.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212544
IP address blocks: 89.41.184.0/22 maxlen: 22
89.38.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:80:65:8a:68:60:3c:e7:15:36:52:90:96:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f376962a4ae8353f9c6c9d004d108cd14e8db7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:f4:b0:da:77:93:ed:64:19:e4:a5:0f:8f:
e5:6f:62:40:3d:12:9e:58:76:66:ce:5c:c5:31:75:
1c:cb:ab:29:19:9b:4b:0a:fa:b5:2d:b1:e4:a1:67:
a4:33:bc:ff:3f:de:c3:41:e9:e9:a4:55:f1:68:c9:
eb:42:c7:75:73:c1:9a:16:a9:f1:74:ac:4d:31:b7:
69:2f:34:f1:b2:52:5c:2e:c3:4b:a0:32:7f:01:b2:
be:00:56:d0:5c:c9:54:2e:77:27:c8:12:c0:57:af:
11:c7:f3:fa:51:04:56:bb:49:29:89:89:bc:94:8a:
13:74:6d:b7:7d:67:cd:72:48:bd:8c:8d:9a:57:37:
4c:23:60:c8:73:bf:97:de:bc:14:a5:c5:e5:0e:9a:
c7:d9:c1:4b:01:cc:01:b5:f9:a1:df:86:62:28:2e:
49:9e:11:ab:dd:a8:45:4c:d9:c1:27:3d:39:3c:ef:
7e:22:3d:2a:9e:1c:42:2f:f0:5e:e7:ab:03:c9:e2:
64:a6:95:cf:eb:18:67:ce:86:e3:5b:ee:a7:e7:da:
ae:33:73:b9:76:8b:9e:26:69:9b:3e:d3:82:0f:fb:
47:93:c7:9b:59:f4:04:9e:2a:46:21:6f:8f:72:cc:
0a:cf:92:fb:d2:44:0e:c7:8c:18:c9:d3:83:5e:f6:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:69:62:A4:AE:83:53:F9:C6:C9:D0:04:D1:08:CD:14:E8:DB:7C
X509v3 Authority Key Identifier:
keyid:87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/LzdpYqSug1P5xsnQBNEIzRTo23w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.212.0/22
89.41.184.0/22
Signature Algorithm: sha256WithRSAEncryption
de:b8:6c:7e:84:18:69:4e:0a:6e:58:df:eb:23:49:4d:a7:da:
91:9d:39:8c:cc:fa:53:78:89:d5:bd:22:3e:24:d4:62:20:39:
4d:46:2f:61:e5:1b:2b:74:dd:b2:75:93:f6:6e:c0:bd:4d:50:
be:a6:bb:58:51:43:cf:21:f6:0e:ef:ca:de:ba:02:72:89:20:
b6:fd:a4:9c:27:86:e0:08:63:2c:4d:8e:e0:9d:8a:e9:66:8d:
88:fc:32:85:4c:60:cc:85:3a:72:92:7f:d2:f4:06:81:d0:04:
6e:d9:e8:89:33:a9:95:d3:75:5d:4e:f6:dd:f3:b7:e3:96:eb:
cf:d6:81:41:2a:e2:a2:4f:09:ca:ec:09:13:40:f3:21:44:16:
19:6d:e7:b1:cc:c9:61:5a:f2:82:7f:12:a2:88:30:e1:3c:e1:
93:06:fd:fb:2f:de:84:ab:b2:b3:23:e1:21:f1:76:2b:ee:50:
f6:f5:53:04:10:88:f7:9a:7d:b8:87:8c:f3:13:dc:2f:06:8c:
45:7d:c0:b0:af:ce:bb:96:72:cd:4d:5d:b5:ae:a5:03:c1:6c:
9b:c7:61:aa:fb:7b:b3:2e:79:22:ed:e0:50:e1:c5:ed:ab:e6:
d8:0a:38:35:88:02:e4:3e:b3:44:7f:e6:74:07:e8:95:30:8d:
06:d7:08:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtoBlimhgPOcVNlKQltSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDM4YmExMmY0NjI5YzIxMzFmYzYwZTg5NTBkNmMzMDNi
ZTdkMjIwHhcNMjQwMTAxMDYyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjM3Njk2MmE0YWU4MzUzZjljNmM5ZDAwNGQxMDhjZDE0ZThkYjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua30sNp3k+1kGeSlD4/lb2JAPRKe
WHZmzlzFMXUcy6spGZtLCvq1LbHkoWekM7z/P97DQenppFXxaMnrQsd1c8GaFqnx
dKxNMbdpLzTxslJcLsNLoDJ/AbK+AFbQXMlULncnyBLAV68Rx/P6UQRWu0kpiYm8
lIoTdG23fWfNcki9jI2aVzdMI2DIc7+X3rwUpcXlDprH2cFLAcwBtfmh34ZiKC5J
nhGr3ahFTNnBJz05PO9+Ij0qnhxCL/Be56sDyeJkppXP6xhnzobjW+6n59quM3O5
doueJmmbPtOCD/tHk8ebWfQEnipGIW+PcswKz5L70kQOx4wYydODXvYZIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC83aWKkroNT+cbJ0ATRCM0U6Nt8MB8GA1UdIwQY
MBaAFIfTi6EvRinCEx/GDolQ1sMDvn0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlPTG9TOUdLY0lUSDhZT2lWRFd3d08tZlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDIxNDEtZWNiOC00Mjg5LTk2Njkt
ZmQ1NWM1OGVkYWY3LzEvTHpkcFlxU3VnMVA1eHNuUUJORUl6UlRvMjN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDIxNDEtZWNiOC00Mjg5LTk2NjktZmQ1NWM1OGVkYWY3
LzEvaDlPTG9TOUdLY0lUSDhZT2lWRFd3d08tZlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWSbUAwQC
WSm4MA0GCSqGSIb3DQEBCwUAA4IBAQDeuGx+hBhpTgpuWN/rI0lNp9qRnTmMzPpT
eInVvSI+JNRiIDlNRi9h5RsrdN2ydZP2bsC9TVC+prtYUUPPIfYO78reugJyiSC2
/aScJ4bgCGMsTY7gnYrpZo2I/DKFTGDMhTpykn/S9AaB0ARu2eiJM6mV03VdTvbd
87fjluvP1oFBKuKiTwnK7AkTQPMhRBYZbeexzMlhWvKCfxKiiDDhPOGTBv37L96E
q7KzI+Eh8XYr7lD29VMEEIj3mn24h4zzE9wvBoxFfcCwr867lnLNTV21rqUDwWyb
x2Gq+3uzLnki7eBQ4cXtq+bYCjg1iALkPrNEf+Z0B+iVMI0G1wg2
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:17 2024 by rpki-client on console-fra.rpki-client.org