Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/l1Ly9C_3G_-C_voxfMpgPOAp5Zc.roa
File: l1Ly9C_3G_-C_voxfMpgPOAp5Zc.roa (raw, json)
Hash identifier: yKN4xaGgWyv6hCtswgrTXvsxw1iCslnDDfNwMenixFo=
Subject key identifier: 97:52:F2:F4:2F:F7:1B:FF:82:FE:FA:31:7C:CA:60:3C:E0:29:E5:97
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBB48DBBFB65F9DA88A363A8F0D9B
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/l1Ly9C_3G_-C_voxfMpgPOAp5Zc.roa
Signing time: Tue 02 Jan 2024 10:33:58 +0000
ROA not before: Tue 02 Jan 2024 10:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44585
IP address blocks: 195.55.205.0/24 maxlen: 24
195.55.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bb:48:db:bf:b6:5f:9d:a8:8a:36:3a:8f:0d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9752f2f42ff71bff82fefa317cca603ce029e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:3a:4e:32:40:33:a8:eb:1b:09:62:37:50:
ad:ce:19:c2:0a:25:0a:5f:d6:16:a8:0e:b6:cd:b4:
09:74:f1:10:42:5c:61:24:3d:ce:de:dd:6d:7b:70:
73:f1:c2:75:ba:62:f1:28:91:41:b9:69:1b:73:ce:
bf:7c:b0:53:40:a4:8f:cd:15:3a:c9:93:c9:90:62:
ee:37:c0:cc:b3:cc:f7:d4:bc:16:28:33:63:6b:37:
c5:fb:bd:3d:fc:33:ba:df:38:ab:07:c4:5e:9a:b6:
f4:1e:55:02:fd:60:55:26:81:f0:c4:fb:4b:2b:4d:
7c:20:31:76:e2:de:bb:c3:93:bf:47:25:44:f6:2f:
73:90:ff:6f:4b:c9:4c:87:7b:48:d4:89:96:0b:62:
2f:4e:6d:60:9e:2c:99:fa:84:12:be:3c:58:5d:95:
51:51:72:07:11:fb:ed:27:52:e6:2a:08:c5:ea:db:
7b:7a:86:ac:84:07:36:af:0f:71:ed:92:75:2c:60:
de:ee:d7:4b:9c:50:09:1e:99:cc:4b:6a:df:81:24:
12:4a:d5:bb:30:b6:ee:bb:e3:a7:8a:d0:43:a7:2d:
e4:98:3e:97:b1:92:56:11:21:09:4d:d1:cc:23:3d:
5f:23:f1:28:32:0f:06:4b:05:68:c0:64:d3:f2:88:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:F2:F4:2F:F7:1B:FF:82:FE:FA:31:7C:CA:60:3C:E0:29:E5:97
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/l1Ly9C_3G_-C_voxfMpgPOAp5Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.174.0/24
195.55.205.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d4:71:64:f6:13:0f:e4:bd:bb:64:f6:44:9b:29:9f:0b:c0:
eb:75:0b:1f:00:8c:48:6e:ad:26:c5:db:ae:47:30:b2:15:06:
77:8a:6a:0b:1c:51:27:59:57:03:18:8c:dd:47:84:70:40:88:
60:f5:4a:63:d9:80:32:88:13:a5:4c:78:69:c1:f7:0b:89:f4:
2b:30:73:b5:95:e5:39:2b:0e:5d:a6:12:7a:fc:b4:9d:02:a0:
61:c3:24:9a:b5:59:82:d3:41:03:a2:93:cd:f9:be:ef:13:25:
e0:7d:ca:90:fd:99:0d:ad:15:a8:a1:8d:e6:0a:25:24:de:72:
16:ef:e9:b4:02:f6:1d:0c:2f:79:10:f2:6e:e3:81:9e:a5:30:
59:22:77:73:96:90:68:29:d8:fe:7b:72:48:4c:fd:a1:14:99:
18:7a:d4:a7:03:f4:83:68:5b:62:7f:1c:c9:71:21:dc:03:81:
f2:39:f2:58:aa:4e:f4:30:18:cb:c4:47:c1:91:dc:a3:5c:cb:
6d:4b:f5:7e:d3:26:d4:1b:26:17:c1:4f:a9:42:2d:9d:49:f5:
67:d8:ea:51:c9:a1:b3:84:91:1b:d6:47:9a:6d:97:74:9e:a3:
bf:59:c1:e0:58:ec:f0:df:db:f2:22:db:cb:b1:3e:bb:3c:26:
89:9e:9c:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJvLtI27+2X52oijY6jw2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMTAyMTAzMzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzUyZjJmNDJmZjcxYmZmODJmZWZhMzE3Y2NhNjAzY2UwMjllNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0c6TjJAM6jrGwliN1CtzhnCCiUK
X9YWqA62zbQJdPEQQlxhJD3O3t1te3Bz8cJ1umLxKJFBuWkbc86/fLBTQKSPzRU6
yZPJkGLuN8DMs8z31LwWKDNjazfF+709/DO63zirB8Remrb0HlUC/WBVJoHwxPtL
K018IDF24t67w5O/RyVE9i9zkP9vS8lMh3tI1ImWC2IvTm1gniyZ+oQSvjxYXZVR
UXIHEfvtJ1LmKgjF6tt7eoashAc2rw9x7ZJ1LGDe7tdLnFAJHpnMS2rfgSQSStW7
MLbuu+OnitBDpy3kmD6XsZJWESEJTdHMIz1fI/EoMg8GSwVowGTT8ohCqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJdS8vQv9xv/gv76MXzKYDzgKeWXMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvbDFMeTlDXzNHXy1DX3ZveGZNcGdQT0FwNVpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwzeuAwQA
wzfNMA0GCSqGSIb3DQEBCwUAA4IBAQB41HFk9hMP5L27ZPZEmymfC8DrdQsfAIxI
bq0mxduuRzCyFQZ3imoLHFEnWVcDGIzdR4RwQIhg9Upj2YAyiBOlTHhpwfcLifQr
MHO1leU5Kw5dphJ6/LSdAqBhwySatVmC00EDopPN+b7vEyXgfcqQ/ZkNrRWooY3m
CiUk3nIW7+m0AvYdDC95EPJu44GepTBZIndzlpBoKdj+e3JITP2hFJkYetSnA/SD
aFtifxzJcSHcA4HyOfJYqk70MBjLxEfBkdyjXMttS/V+0ybUGyYXwU+pQi2dSfVn
2OpRyaGzhJEb1keabZd0nqO/WcHgWOzw39vyItvLsT67PCaJnpwz
-----END CERTIFICATE-----
Generated at Sat Jun 1 21:00:53 2024 by rpki-client on console-fra.rpki-client.org