Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/lzrHoDKe-xHdlgd5xindVPhLI7U.roa
File: lzrHoDKe-xHdlgd5xindVPhLI7U.roa (raw, json)
Hash identifier: MjNG037jJHN2UrVqTSCHAEnFIPibquA4gJXPa5dSVVU=
Subject key identifier: 97:3A:C7:A0:32:9E:FB:11:DD:96:07:79:C6:29:DD:54:F8:4B:23:B5
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 019174B59421A12D3C267CC5D313554CA71B
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/lzrHoDKe-xHdlgd5xindVPhLI7U.roa
Signing time: Wed 21 Aug 2024 11:32:22 +0000
ROA not before: Wed 21 Aug 2024 11:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 149.223.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:b5:94:21:a1:2d:3c:26:7c:c5:d3:13:55:4c:a7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Aug 21 11:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=973ac7a0329efb11dd960779c629dd54f84b23b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:7f:6e:0c:65:26:c0:8b:95:a2:82:e7:14:
63:24:a6:2c:a7:0c:70:45:ab:fe:37:55:41:46:a9:
a7:f2:31:e6:73:18:8d:38:d1:00:39:8d:46:06:60:
99:0e:35:af:70:3a:bc:e3:60:cf:7e:a0:2a:bb:00:
0d:03:ec:c6:a3:29:2e:ee:ec:c2:94:7b:ae:40:ba:
05:58:f9:b6:4d:13:4b:03:86:15:07:06:0a:0b:e3:
d1:ba:e3:60:e1:c0:b9:ef:52:15:98:c0:45:42:19:
e7:d6:e0:ff:3c:84:dd:d2:51:8c:dc:12:f5:dd:b9:
8d:cf:96:3e:06:ff:f1:85:3c:29:1c:7d:a9:3d:74:
33:aa:9c:da:87:6c:ea:ba:7f:08:ca:9f:1a:f2:29:
94:ef:4e:30:36:cc:f9:9a:21:b7:a4:15:c7:c9:e0:
ee:2f:05:c6:a3:11:4a:99:e4:5e:b3:86:9b:98:47:
07:cf:18:29:6e:db:95:b4:50:e8:ec:a9:a6:fb:bd:
15:69:86:e9:ec:88:d0:a9:e2:ff:9c:97:38:f4:8e:
d3:10:52:b4:ee:ea:e6:e3:63:88:fc:05:2c:5c:e0:
00:07:ee:b2:3f:a1:a9:bd:e6:ce:f3:7d:05:28:dd:
5b:98:54:2a:0e:51:56:0b:38:a2:b3:52:84:4f:90:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:C7:A0:32:9E:FB:11:DD:96:07:79:C6:29:DD:54:F8:4B:23:B5
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/lzrHoDKe-xHdlgd5xindVPhLI7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:cc:7d:ec:63:24:34:79:b7:17:86:c0:92:71:b8:ce:30:fe:
ac:f9:35:56:0b:6a:df:78:96:a0:8e:68:23:bf:9e:36:19:57:
e3:75:a2:6d:c0:90:04:23:b4:cc:a1:42:59:a2:f3:54:ff:27:
7f:e2:ed:8b:91:67:5a:63:90:7c:c2:1c:4b:d8:64:d1:19:b0:
81:82:62:56:01:b0:48:c6:9b:5f:49:0c:c7:ae:36:fd:e4:d8:
0d:05:e7:b9:fb:02:ca:c4:1d:73:e2:e4:29:a3:0d:56:96:07:
4c:f7:5f:86:c6:8c:d2:00:1f:49:d4:b4:7b:89:1e:9e:4e:8c:
95:e3:00:72:9c:0a:d7:ee:41:1b:10:cc:eb:db:66:fc:3d:43:
f6:62:51:67:48:a1:13:69:bc:33:e4:4b:fb:0e:00:18:e1:1e:
56:1e:32:4a:31:1a:fd:15:d2:a3:02:2c:23:92:7c:b9:cc:c5:
1a:0c:c2:6e:f1:d6:38:74:42:4b:77:ba:e0:4f:93:59:1e:d7:
3c:70:ec:60:c5:21:ea:95:b8:26:34:37:cb:90:f9:41:eb:3d:
c6:db:b9:fc:48:f3:b3:d8:b4:f7:9b:bd:91:a7:34:56:de:10:
07:66:cf:73:19:5d:56:c6:11:6a:b6:8c:3f:e7:68:6c:f5:c7:
df:c2:19:6f
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZF0tZQhoS08JnzF0xNVTKcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjQwODIxMTEzMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzNhYzdhMDMyOWVmYjExZGQ5NjA3NzljNjI5ZGQ1NGY4NGIyM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkx/bgxlJsCLlaKC5xRjJKYspwxw
Rav+N1VBRqmn8jHmcxiNONEAOY1GBmCZDjWvcDq842DPfqAquwANA+zGoyku7uzC
lHuuQLoFWPm2TRNLA4YVBwYKC+PRuuNg4cC571IVmMBFQhnn1uD/PITd0lGM3BL1
3bmNz5Y+Bv/xhTwpHH2pPXQzqpzah2zqun8Iyp8a8imU704wNsz5miG3pBXHyeDu
LwXGoxFKmeRes4abmEcHzxgpbtuVtFDo7Kmm+70VaYbp7IjQqeL/nJc49I7TEFK0
7urm42OI/AUsXOAAB+6yP6GpvebO830FKN1bmFQqDlFWCziis1KET5BJJwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFJc6x6AynvsR3ZYHecYp3VT4SyO1MB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvbHpySG9ES2UteEhkbGdkNXhpbmRWUGhMSTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAld8wDQYJ
KoZIhvcNAQELBQADggEBAKXMfexjJDR5txeGwJJxuM4w/qz5NVYLat94lqCOaCO/
njYZV+N1om3AkAQjtMyhQlmi81T/J3/i7YuRZ1pjkHzCHEvYZNEZsIGCYlYBsEjG
m19JDMeuNv3k2A0F57n7AsrEHXPi5CmjDVaWB0z3X4bGjNIAH0nUtHuJHp5OjJXj
AHKcCtfuQRsQzOvbZvw9Q/ZiUWdIoRNpvDPkS/sOABjhHlYeMkoxGv0V0qMCLCOS
fLnMxRoMwm7x1jh0Qkt3uuBPk1ke1zxw7GDFIeqVuCY0N8uQ+UHrPcbbufxI87PY
tPebvZGnNFbeEAdmz3MZXVbGEWq2jD/naGz1x9/CGW8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:51:17 2024 by rpki-client on console-fra.rpki-client.org