Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/lkf0miEJnerSM4PYEEzH4htCKS8.roa
File: lkf0miEJnerSM4PYEEzH4htCKS8.roa (raw, json)
Hash identifier: YmP4AeorZW1NTGhEgsXqH9FgTcJRWYFmiE20v//ouzc=
Subject key identifier: 96:47:F4:9A:21:09:9D:EA:D2:33:83:D8:10:4C:C7:E2:1B:42:29:2F
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 018CC64AECCC51E7957DCAF3C1844F0A239A
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/lkf0miEJnerSM4PYEEzH4htCKS8.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43028
IP address blocks: 193.200.201.0/24 maxlen: 24
2001:67c:12c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ec:cc:51:e7:95:7d:ca:f3:c1:84:4f:0a:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9647f49a21099dead23383d8104cc7e21b42292f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:27:c7:fa:ef:bf:95:9d:8d:78:88:81:3f:
d3:af:ba:e4:22:33:6d:56:d5:8b:88:00:6d:44:88:
cf:0c:55:a9:40:87:9b:88:f0:3c:29:9e:97:22:d9:
6f:14:31:39:9f:21:8e:b5:9f:21:48:49:6b:28:45:
53:38:90:05:4d:e2:9c:a2:42:66:4d:9a:98:62:02:
5c:c9:d1:c8:6d:f7:cc:c4:2e:52:72:ea:73:28:17:
2b:d8:09:01:9f:18:c3:e3:e7:e7:26:f7:70:25:b2:
79:33:31:26:5e:65:7e:32:9a:3d:28:03:9e:2c:cb:
5b:6d:f0:de:38:e5:aa:0e:7e:20:31:be:af:c8:2a:
5d:de:4a:50:9c:bb:61:bb:89:b6:11:7d:a9:a1:1c:
91:40:85:ed:43:2d:7a:72:ba:93:23:3f:e6:7d:3b:
64:aa:b9:ab:fe:60:bf:63:83:41:e2:24:c0:61:df:
c5:26:da:5b:7d:c2:9b:0b:c8:37:dc:88:79:c6:b8:
f2:4f:ff:18:26:3e:56:25:d5:fc:ff:65:98:1d:cc:
d0:de:93:ad:1a:41:5e:a9:87:ae:a0:53:67:06:a1:
e2:c1:1f:7e:3c:c7:da:af:f0:45:d3:b2:43:9c:74:
6f:ce:13:e6:a7:e3:81:13:f2:ec:17:2c:3a:12:67:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:F4:9A:21:09:9D:EA:D2:33:83:D8:10:4C:C7:E2:1B:42:29:2F
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/lkf0miEJnerSM4PYEEzH4htCKS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.201.0/24
IPv6:
2001:67c:12c8::/48
Signature Algorithm: sha256WithRSAEncryption
95:d5:f2:d4:47:63:51:48:be:6e:af:3d:f6:6a:11:9f:c7:5f:
49:f2:a4:6e:7d:45:32:79:60:58:71:bb:ec:8c:13:d9:d4:ca:
dc:1a:79:7c:07:da:84:c7:96:91:8f:ef:3c:5c:dd:7e:98:4d:
72:3d:2d:9f:ad:e5:06:5a:78:c5:5b:20:6f:0d:d8:5c:76:75:
4c:86:65:5c:37:c2:42:21:1e:e2:72:31:a3:6c:c7:92:9d:e4:
7c:95:a1:8f:9b:1d:c2:ff:c2:79:06:8f:7d:09:8b:7f:62:d4:
47:c7:e6:46:4b:27:da:2f:cf:93:95:1c:9b:58:18:2f:f0:ac:
01:3b:06:10:61:39:b5:98:09:a5:50:36:c4:80:bd:9c:f9:3c:
8b:e1:3a:fc:3e:6c:66:3a:ed:59:1c:fd:18:57:1e:75:a7:60:
47:e5:19:12:79:98:70:e9:ae:60:10:22:a1:db:5b:bf:e4:d1:
5b:d9:12:f4:5f:3c:45:0e:e2:49:c1:12:f9:94:ba:37:9d:d0:
ea:4a:f4:69:03:35:37:d9:39:96:d9:5d:19:c9:ce:0a:d4:bb:
78:d1:f2:98:ee:66:6d:02:cb:81:d4:28:8c:e7:5c:7e:1b:58:
95:57:76:b5:1c:04:b0:6e:af:75:17:aa:02:2e:5f:38:7b:f8:
ee:63:e1:d3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzGSuzMUeeVfcrzwYRPCiOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx
ZGU1OWIwHhcNMjQwMTAxMTgzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjQ3ZjQ5YTIxMDk5ZGVhZDIzMzgzZDgxMDRjYzdlMjFiNDIyOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBQnx/rvv5WdjXiIgT/Tr7rkIjNt
VtWLiABtRIjPDFWpQIebiPA8KZ6XItlvFDE5nyGOtZ8hSElrKEVTOJAFTeKcokJm
TZqYYgJcydHIbffMxC5ScupzKBcr2AkBnxjD4+fnJvdwJbJ5MzEmXmV+Mpo9KAOe
LMtbbfDeOOWqDn4gMb6vyCpd3kpQnLthu4m2EX2poRyRQIXtQy16crqTIz/mfTtk
qrmr/mC/Y4NB4iTAYd/FJtpbfcKbC8g33Ih5xrjyT/8YJj5WJdX8/2WYHczQ3pOt
GkFeqYeuoFNnBqHiwR9+PMfar/BF07JDnHRvzhPmp+OBE/LsFyw6EmfcwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJZH9JohCZ3q0jOD2BBMx+IbQikvMB8GA1UdIwQY
MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt
ODAwOGQxZTdjMzhjLzEvbGtmMG1pRUpuZXJTTTRQWUVFekg0aHRDS1M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj
LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwcjJMA8E
AgACMAkDBwAgAQZ8EsgwDQYJKoZIhvcNAQELBQADggEBAJXV8tRHY1FIvm6vPfZq
EZ/HX0nypG59RTJ5YFhxu+yME9nUytwaeXwH2oTHlpGP7zxc3X6YTXI9LZ+t5QZa
eMVbIG8N2Fx2dUyGZVw3wkIhHuJyMaNsx5Kd5HyVoY+bHcL/wnkGj30Ji39i1EfH
5kZLJ9ovz5OVHJtYGC/wrAE7BhBhObWYCaVQNsSAvZz5PIvhOvw+bGY67Vkc/RhX
HnWnYEflGRJ5mHDprmAQIqHbW7/k0VvZEvRfPEUO4knBEvmUujed0OpK9GkDNTfZ
OZbZXRnJzgrUu3jR8pjuZm0Cy4HUKIznXH4bWJVXdrUcBLBur3UXqgIuXzh7+O5j
4dM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:25 2024 by rpki-client on console-fra.rpki-client.org