Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/b_LrViVQtLtkMpQZuCtN7BPh4wI.roa
File: b_LrViVQtLtkMpQZuCtN7BPh4wI.roa (raw, json)
Hash identifier: 3j5MVyDssU8gVqdJxEFXlf85csIurl5WOg146OKo8qg=
Subject key identifier: 6F:F2:EB:56:25:50:B4:BB:64:32:94:19:B8:2B:4D:EC:13:E1:E3:02
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 018CC2DB04981922B22A9303FE4110E7D681
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/b_LrViVQtLtkMpQZuCtN7BPh4wI.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 129.194.0.0/15 maxlen: 16
192.33.212.0/22 maxlen: 22
192.33.216.0/22 maxlen: 22
192.33.222.0/23 maxlen: 23
192.33.220.0/24 maxlen: 24
192.33.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:04:98:19:22:b2:2a:93:03:fe:41:10:e7:d6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ff2eb562550b4bb64329419b82b4dec13e1e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:ec:a9:08:a1:46:06:02:bf:9f:d4:26:87:
d4:e2:e5:13:00:2c:8a:98:02:9c:d3:c4:9b:47:a6:
bb:c1:89:b3:08:6d:9e:8f:f3:d9:8a:0e:9d:a9:94:
74:93:ae:94:be:a5:ea:d0:40:ab:ae:99:b0:62:fb:
58:b4:fc:b1:9a:e7:ba:4a:fd:02:86:2a:44:1e:3d:
0a:f5:3b:4e:60:49:dc:0b:d7:d1:05:b6:87:4c:8e:
c3:ce:a1:ef:d1:94:20:1f:5f:6e:9f:74:08:f8:9f:
fb:dc:83:6a:da:f9:5a:4a:07:31:19:f6:ae:a2:31:
cb:95:ec:f9:b7:36:bf:88:fa:6a:62:86:d6:dd:6d:
bd:e3:51:27:2e:ea:ef:6c:4c:13:c3:ae:f3:c1:23:
e5:be:59:e6:a1:09:6e:e1:ef:16:fc:1d:2c:f4:b8:
28:83:14:77:a6:16:5b:d5:c1:fb:dd:a8:cc:96:c7:
3c:82:4b:4f:f2:d4:60:f1:a9:7a:bc:a3:0d:93:fb:
6a:73:45:9c:31:bd:1e:45:41:46:81:97:9a:92:e9:
da:76:af:3f:03:f7:87:32:f8:34:bb:75:1d:46:93:
c9:1f:67:45:f6:be:d7:ce:45:23:e8:37:4b:da:20:
65:3e:83:a0:67:84:38:12:ce:18:38:56:bf:fa:b0:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F2:EB:56:25:50:B4:BB:64:32:94:19:B8:2B:4D:EC:13:E1:E3:02
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/b_LrViVQtLtkMpQZuCtN7BPh4wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.194.0.0/15
192.33.212.0-192.33.220.255
192.33.222.0-192.33.231.255
Signature Algorithm: sha256WithRSAEncryption
34:d3:5e:e4:fd:5a:7d:82:f7:eb:cb:03:e8:cb:06:34:96:e7:
5c:10:b5:00:bd:fa:d2:0a:cc:a5:61:18:22:98:03:a3:c0:66:
5f:4f:94:cb:10:d5:7d:34:3c:7a:41:0a:79:f1:82:37:53:a9:
99:3f:f8:33:5a:2e:1e:77:de:b4:c8:41:57:44:07:03:ed:3b:
c4:3b:2a:34:49:74:f3:bd:9a:86:7e:ce:76:c9:75:d2:eb:91:
fd:db:50:a3:c4:09:18:90:50:34:05:e9:58:d7:a8:c1:02:2d:
3a:03:52:b2:6d:b4:d0:a2:8c:11:19:4b:d7:c1:4b:7a:64:80:
51:6b:52:0a:63:2b:d2:fb:85:54:01:01:28:5e:b5:0b:be:ee:
8d:30:b0:6f:98:01:2b:a2:92:47:c4:9f:d1:00:c6:81:c3:01:
10:3e:8e:c9:71:0a:10:8f:6c:9d:69:ad:2b:98:2d:13:f4:cf:
0a:40:cd:9b:92:fd:91:84:56:7f:88:23:5f:66:68:13:71:53:
b7:42:3a:10:55:60:30:e8:58:5d:a9:34:d3:0c:a2:7f:b2:f7:
5c:33:fc:9b:76:2f:cd:52:9b:bf:37:12:d1:6c:13:64:1e:26:
76:a2:42:01:05:97:5e:a9:2b:9d:ca:97:27:8b:72:30:1d:13:
84:e7:87:37
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzC2wSYGSKyKpMD/kEQ59aBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYjRkYTBmMTAxM2FjZGI2MWMyZjdhMjZkMTRjNGYwZGU4
MjIyZWMwHhcNMjQwMTAxMDIyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmYyZWI1NjI1NTBiNGJiNjQzMjk0MTliODJiNGRlYzEzZTFlMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0bsqQihRgYCv5/UJofU4uUTACyK
mAKc08SbR6a7wYmzCG2ej/PZig6dqZR0k66UvqXq0ECrrpmwYvtYtPyxmue6Sv0C
hipEHj0K9TtOYEncC9fRBbaHTI7DzqHv0ZQgH19un3QI+J/73INq2vlaSgcxGfau
ojHLlez5tza/iPpqYobW3W2941EnLurvbEwTw67zwSPlvlnmoQlu4e8W/B0s9Lgo
gxR3phZb1cH73ajMlsc8gktP8tRg8al6vKMNk/tqc0WcMb0eRUFGgZeakunadq8/
A/eHMvg0u3UdRpPJH2dF9r7XzkUj6DdL2iBlPoOgZ4Q4Es4YOFa/+rCweQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFG/y61YlULS7ZDKUGbgrTewT4eMCMB8GA1UdIwQY
MBaAFHC02g8QE6zbYcL3om0UxPDegiLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODct
ZjMwNjllZTU5MGRhLzEvYl9MclZpVlF0THRrTXBRWnVDdE43QlBoNHdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODctZjMwNjllZTU5MGRh
LzEvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMBgcIwDAME
AsAh1AMEAMAh3DAMAwQBwCHeAwQDwCHgMA0GCSqGSIb3DQEBCwUAA4IBAQA0017k
/Vp9gvfrywPoywY0ludcELUAvfrSCsylYRgimAOjwGZfT5TLENV9NDx6QQp58YI3
U6mZP/gzWi4ed960yEFXRAcD7TvEOyo0SXTzvZqGfs52yXXS65H921CjxAkYkFA0
BelY16jBAi06A1KybbTQoowRGUvXwUt6ZIBRa1IKYyvS+4VUAQEoXrULvu6NMLBv
mAEropJHxJ/RAMaBwwEQPo7JcQoQj2ydaa0rmC0T9M8KQM2bkv2RhFZ/iCNfZmgT
cVO3QjoQVWAw6FhdqTTTDKJ/svdcM/ybdi/NUpu/NxLRbBNkHiZ2okIBBZdeqSud
ypcni3IwHROE54c3
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:31:03 2024 by rpki-client on console-ams.rpki-client.org