Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/LCdhLXoYqeOTWCIL_-3w8EVXnoY.roa
File: LCdhLXoYqeOTWCIL_-3w8EVXnoY.roa (raw, json)
Hash identifier: E0RoG8Xh/JAObPCBS7SfbTrThgOV++02lNix7dTTD90=
Subject key identifier: 2C:27:61:2D:7A:18:A9:E3:93:58:22:0B:FF:ED:F0:F0:45:57:9E:86
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 018CCA2A6621909968D4B43138B6E9E014DF
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/LCdhLXoYqeOTWCIL_-3w8EVXnoY.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196716
IP address blocks: 91.213.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:66:21:90:99:68:d4:b4:31:38:b6:e9:e0:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c27612d7a18a9e39358220bffedf0f045579e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:45:0c:82:9e:56:6b:18:93:f6:d0:15:c3:
a5:ce:79:7b:4b:bd:92:5e:b7:63:a2:1c:37:b7:f7:
a4:b3:5d:1f:39:a0:4e:ce:e7:d4:eb:51:bf:98:35:
c6:0b:a3:9a:04:3f:ae:5e:62:96:4c:34:ff:d3:8d:
5c:3d:31:02:21:68:d9:5c:42:ab:34:00:5f:95:53:
2c:6d:e9:7c:70:a9:82:dc:76:23:b6:1f:51:58:73:
7c:7e:79:7c:4c:e2:d5:2b:e9:94:81:5c:e0:80:fa:
98:99:22:c1:13:f4:e1:b2:e1:64:3e:80:d7:13:76:
3e:80:a5:9a:da:69:7b:3c:b5:48:75:64:a3:71:f0:
a9:da:be:70:64:12:4a:a9:6a:fa:87:b7:0c:cc:79:
41:47:1e:43:c8:e5:af:be:c1:12:fd:26:65:61:42:
13:74:4a:6a:c6:67:85:02:22:08:09:38:fd:34:d9:
f4:25:34:78:5b:fa:42:3b:48:c5:f0:23:0f:e7:f4:
f7:c4:52:c9:02:51:3b:91:dd:a9:25:82:97:26:87:
33:f2:19:3d:a0:ca:d6:2e:74:59:b2:e2:50:60:9c:
03:53:08:eb:1b:20:d0:9d:89:77:0b:64:2d:f1:99:
15:6f:a9:76:d2:7a:7f:da:cf:57:b8:a2:0c:77:f9:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:27:61:2D:7A:18:A9:E3:93:58:22:0B:FF:ED:F0:F0:45:57:9E:86
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/LCdhLXoYqeOTWCIL_-3w8EVXnoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3f:14:04:7a:16:e7:09:bc:5b:23:27:93:9e:30:1f:7c:33:
34:85:d8:ee:53:53:f8:ef:7e:ec:de:52:5d:f4:39:a5:36:c0:
2c:aa:ef:41:a4:84:3b:94:df:40:45:4e:83:61:80:4a:45:25:
74:31:66:1a:f8:a2:8b:ef:8e:91:d3:db:62:a2:d1:a8:ab:9c:
67:f6:9c:32:a9:55:4b:77:31:98:8f:da:30:7d:2b:26:9a:84:
f4:82:f1:73:4f:14:fe:4b:6f:e8:d9:11:ac:a2:16:64:4b:57:
39:7d:c0:56:12:8b:cc:f0:35:13:36:6c:07:c8:4a:db:80:db:
08:6c:e6:64:29:2a:2e:6b:b2:3f:55:6c:57:3f:96:8d:45:66:
bf:37:98:81:73:ed:94:36:03:a0:df:67:11:a8:a1:15:9d:20:
c8:e6:8c:12:a1:9c:a9:65:56:0f:30:92:74:b0:d9:29:7d:79:
56:55:14:ad:92:b8:c1:ef:34:66:e3:56:a7:98:90:0f:22:ba:
ee:40:f9:93:31:b0:f6:a8:f7:8a:81:42:8c:82:5d:ae:ee:71:
d2:e2:b4:00:58:64:3c:83:20:0f:15:43:21:e3:9f:cf:31:df:
0a:bf:94:86:50:8a:33:24:0a:8d:6f:c4:5f:2a:eb:87:d5:38:
c7:7f:7f:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKmYhkJlo1LQxOLbp4BTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4
YjlkODcwHhcNMjQwMTAyMTIzMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzI3NjEyZDdhMThhOWUzOTM1ODIyMGJmZmVkZjBmMDQ1NTc5ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoJFDIKeVmsYk/bQFcOlznl7S72S
Xrdjohw3t/eks10fOaBOzufU61G/mDXGC6OaBD+uXmKWTDT/041cPTECIWjZXEKr
NABflVMsbel8cKmC3HYjth9RWHN8fnl8TOLVK+mUgVzggPqYmSLBE/ThsuFkPoDX
E3Y+gKWa2ml7PLVIdWSjcfCp2r5wZBJKqWr6h7cMzHlBRx5DyOWvvsES/SZlYUIT
dEpqxmeFAiIICTj9NNn0JTR4W/pCO0jF8CMP5/T3xFLJAlE7kd2pJYKXJocz8hk9
oMrWLnRZsuJQYJwDUwjrGyDQnYl3C2Qt8ZkVb6l20np/2s9XuKIMd/lGPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwnYS16GKnjk1giC//t8PBFV56GMB8GA1UdIwQY
MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt
Y2Q5NzQwNDI2NDlmLzEvTENkaExYb1lxZU9UV0NJTF8tM3c4RVZYbm9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm
LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9V9MA0G
CSqGSIb3DQEBCwUAA4IBAQB+PxQEehbnCbxbIyeTnjAffDM0hdjuU1P4737s3lJd
9DmlNsAsqu9BpIQ7lN9ARU6DYYBKRSV0MWYa+KKL746R09tiotGoq5xn9pwyqVVL
dzGYj9owfSsmmoT0gvFzTxT+S2/o2RGsohZkS1c5fcBWEovM8DUTNmwHyErbgNsI
bOZkKSoua7I/VWxXP5aNRWa/N5iBc+2UNgOg32cRqKEVnSDI5owSoZypZVYPMJJ0
sNkpfXlWVRStkrjB7zRm41anmJAPIrruQPmTMbD2qPeKgUKMgl2u7nHS4rQAWGQ8
gyAPFUMh45/PMd8Kv5SGUIozJAqNb8RfKuuH1TjHf397
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:15:43 2024 by rpki-client on console-ams.rpki-client.org