Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/LeWK8LOvO1HQDm1VAAHxLyGsRJg.roa
File: LeWK8LOvO1HQDm1VAAHxLyGsRJg.roa (raw, json)
Hash identifier: 18DIsAypDLh9iS5XLK33FEIEyuVF57zzMST1KQI1xVw=
Subject key identifier: 2D:E5:8A:F0:B3:AF:3B:51:D0:0E:6D:55:00:01:F1:2F:21:AC:44:98
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0190458F418C781B164ED93E3FB1A44ED0F2
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/LeWK8LOvO1HQDm1VAAHxLyGsRJg.roa
Signing time: Sun 23 Jun 2024 14:45:34 +0000
ROA not before: Sun 23 Jun 2024 14:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.194.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:8f:41:8c:78:1b:16:4e:d9:3e:3f:b1:a4:4e:d0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jun 23 14:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de58af0b3af3b51d00e6d550001f12f21ac4498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:8b:e8:c3:4e:a2:7b:80:e2:04:7d:62:c6:
35:4f:f2:13:63:23:32:b4:47:7e:40:20:ef:6a:e6:
62:87:82:7d:00:75:dd:80:14:5f:a2:4a:81:44:56:
ab:07:cc:27:7f:00:4c:90:dd:29:1d:d9:3b:e8:dd:
6d:18:39:a9:91:48:40:b9:df:d4:8d:d6:e8:b3:a4:
05:d1:20:42:8f:02:a3:54:b3:ee:c3:02:da:f1:85:
fa:3d:4b:5e:ba:39:4d:f7:a9:1b:9e:88:06:24:a7:
17:21:be:90:1b:42:eb:e8:21:e6:31:ee:51:07:25:
00:df:0a:1c:27:82:0f:d4:1c:a4:62:17:dc:4b:91:
7f:a9:89:67:6e:d7:19:b6:74:b6:54:9b:4b:fc:41:
04:4d:4c:fe:89:6e:1f:73:d4:9a:d3:09:06:8f:5a:
77:85:58:ca:bd:55:9c:5e:96:7a:c0:c6:21:1d:18:
7a:a1:6c:96:5d:41:2b:0e:da:d2:68:88:e4:25:33:
db:31:10:18:58:03:a6:86:40:23:79:90:48:30:05:
f1:ff:21:90:41:61:04:bd:72:9b:ce:fb:79:d1:79:
6a:69:9d:2c:bd:29:af:6f:a3:9a:1c:42:c6:29:9b:
37:7a:25:fb:c7:9a:66:85:d2:65:6b:40:b2:0b:ae:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:8A:F0:B3:AF:3B:51:D0:0E:6D:55:00:01:F1:2F:21:AC:44:98
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/LeWK8LOvO1HQDm1VAAHxLyGsRJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:4f:43:dc:4b:ce:a0:25:fa:52:2e:68:00:19:bc:a5:76:e5:
6c:91:f5:66:78:9a:7b:63:f2:fc:c9:70:7e:cb:ab:13:56:ff:
22:0e:07:98:47:99:ab:c8:bb:2b:cd:72:c6:9c:4d:d2:58:c5:
a2:8a:44:f5:66:46:ac:ad:46:cd:de:3a:51:23:84:04:46:43:
14:97:77:d4:3e:f4:02:f1:da:cf:8a:a4:7c:ad:0e:7f:3a:dd:
63:6e:12:c4:f7:20:38:78:29:05:05:29:fa:6a:ff:5d:bf:5d:
b0:fb:b3:c6:42:80:9d:e7:dc:79:ea:a8:0f:1c:f0:7f:7f:fb:
5d:f4:8a:95:4d:33:e3:2c:ee:88:10:d6:0c:20:02:03:09:34:
52:7c:64:1e:bd:c6:49:a5:6c:ae:9c:36:3b:ad:86:01:d2:a8:
2e:1c:4b:34:3a:8d:72:76:b0:02:2e:34:c8:30:9f:b9:25:0c:
21:01:fd:14:ed:31:f4:db:0f:a9:8c:05:47:fb:32:b7:ac:21:
9f:43:60:1c:ce:03:ef:55:ac:7b:cf:e5:46:63:42:86:f9:f2:
a7:a4:45:af:31:a5:be:dd:74:5e:a1:e9:6e:23:a6:fb:0b:ae:
1d:a0:07:8f:85:5b:54:62:c3:1f:7f:b3:5c:40:e7:91:e4:28:
e5:bd:63:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBFj0GMeBsWTtk+P7GkTtDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjQwNjIzMTQ0NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGU1OGFmMGIzYWYzYjUxZDAwZTZkNTUwMDAxZjEyZjIxYWM0NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCiL6MNOonuA4gR9YsY1T/ITYyMy
tEd+QCDvauZih4J9AHXdgBRfokqBRFarB8wnfwBMkN0pHdk76N1tGDmpkUhAud/U
jdbos6QF0SBCjwKjVLPuwwLa8YX6PUteujlN96kbnogGJKcXIb6QG0Lr6CHmMe5R
ByUA3wocJ4IP1BykYhfcS5F/qYlnbtcZtnS2VJtL/EEETUz+iW4fc9Sa0wkGj1p3
hVjKvVWcXpZ6wMYhHRh6oWyWXUErDtrSaIjkJTPbMRAYWAOmhkAjeZBIMAXx/yGQ
QWEEvXKbzvt50XlqaZ0svSmvb6OaHELGKZs3eiX7x5pmhdJla0CyC65LFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3livCzrztR0A5tVQAB8S8hrESYMB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvTGVXSzhMT3ZPMUhRRG0xVkFBSHhMeUdzUkpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucLMMA0G
CSqGSIb3DQEBCwUAA4IBAQAbT0PcS86gJfpSLmgAGbylduVskfVmeJp7Y/L8yXB+
y6sTVv8iDgeYR5mryLsrzXLGnE3SWMWiikT1ZkasrUbN3jpRI4QERkMUl3fUPvQC
8drPiqR8rQ5/Ot1jbhLE9yA4eCkFBSn6av9dv12w+7PGQoCd59x56qgPHPB/f/td
9IqVTTPjLO6IENYMIAIDCTRSfGQevcZJpWyunDY7rYYB0qguHEs0Oo1ydrACLjTI
MJ+5JQwhAf0U7TH02w+pjAVH+zK3rCGfQ2AczgPvVax7z+VGY0KG+fKnpEWvMaW+
3XReoeluI6b7C64doAePhVtUYsMff7NcQOeR5CjlvWOX
-----END CERTIFICATE-----
Generated at Mon Jul 1 12:54:43 2024 by rpki-client on console-fra.rpki-client.org