Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/lSA3-P81lGkm7lfiM62ZONoLQ8o.roa
File: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (raw, json)
Hash identifier: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=
Subject key identifier: 95:20:37:F8:FF:35:94:69:26:EE:57:E2:33:AD:99:38:DA:0B:43:CA
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01941FFAB377FCF9803C08F60F160E7C1A36
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/lSA3-P81lGkm7lfiM62ZONoLQ8o.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214893
IP address blocks: 188.72.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:77:fc:f9:80:3c:08:f6:0f:16:0e:7c:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=952037f8ff35946926ee57e233ad9938da0b43ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:2f:8e:5f:e0:f3:9d:fc:a3:ca:07:8f:13:
c2:40:55:70:08:45:39:b2:6c:61:d9:27:e1:5d:70:
b9:32:15:8e:d7:56:c2:50:03:4e:6e:7f:2e:cc:71:
9d:83:95:5b:73:67:d8:20:a3:02:bc:20:42:3c:9e:
cb:90:a0:aa:d6:bf:fc:db:03:6f:51:ca:f7:5d:2f:
1e:99:5b:71:ba:1f:0d:56:e9:54:9b:81:e5:51:b4:
3c:dc:8c:b6:42:33:b9:f3:8d:83:cb:66:1f:b3:70:
02:e1:ae:6d:4c:0b:6a:cc:5b:99:8e:b3:6c:92:e1:
df:c2:7c:4a:1f:b4:a4:f8:3d:9e:96:af:21:2f:8c:
78:9f:96:39:37:b3:cb:96:40:f8:1f:13:04:69:f3:
7f:56:b5:ee:4a:0f:d6:b3:4e:70:96:64:fa:97:0b:
cb:96:5d:80:f1:98:56:ae:f5:b5:d4:cd:c1:57:0c:
c0:7a:0b:97:ce:ad:bf:a5:8d:07:db:5f:7d:50:b4:
5a:8d:94:5b:53:46:d9:19:ed:3d:6c:e3:3a:96:be:
12:d8:0b:8b:79:fa:8a:52:49:33:ea:1b:e6:04:0f:
7e:e4:2d:25:2c:2e:23:05:76:3c:79:45:67:84:29:
17:b3:11:c9:97:b0:9a:47:ce:55:f6:40:55:29:f4:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:37:F8:FF:35:94:69:26:EE:57:E2:33:AD:99:38:DA:0B:43:CA
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/lSA3-P81lGkm7lfiM62ZONoLQ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.9.0/24
Signature Algorithm: sha256WithRSAEncryption
68:85:3b:d8:cf:d3:d5:8d:64:27:18:f3:d8:63:e8:3b:a0:c5:
a6:9a:d0:09:23:1e:4d:9f:fa:29:2f:dc:ba:a6:3b:7b:ae:90:
3b:8f:ba:32:ad:ba:0a:58:60:10:70:73:e6:ed:25:ff:5d:3e:
4a:4c:36:2b:4e:e6:25:f3:25:ee:ce:cb:c4:ce:b8:ba:02:36:
eb:72:d5:8b:f2:49:ae:02:56:19:b5:9a:3e:37:1f:26:03:80:
ef:05:86:85:85:89:3b:64:19:cb:36:a3:5e:93:52:51:dc:d5:
cc:2c:b5:c3:15:f2:1b:61:0b:e3:90:2d:4d:c8:08:29:a2:58:
bf:9a:c2:0e:96:20:a9:ed:f8:3f:7c:5f:68:2a:0e:fe:65:47:
96:7d:6f:bd:4e:ad:09:80:9c:7e:31:3e:a3:e5:21:6b:20:b0:
c9:c1:d6:30:01:5e:2f:0a:30:67:71:df:06:65:33:f6:bd:1c:
c2:ea:b2:60:76:62:b1:7d:06:a5:b5:cf:b6:c0:7e:13:46:aa:
f0:3a:c5:e2:0f:0f:29:c4:cd:01:df:4a:50:7a:89:6a:49:27:
e9:2e:33:a3:98:de:4f:c5:3a:6f:de:17:42:1f:34:57:cf:c5:
83:60:d4:d0:68:d8:b0:f7:7a:dd:d3:55:c4:65:e3:87:70:c0:
3d:3a:41:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+rN3/PmAPAj2DxYOfBo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTIwMzdmOGZmMzU5NDY5MjZlZTU3ZTIzM2FkOTkzOGRhMGI0M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiucvjl/g8538o8oHjxPCQFVwCEU5
smxh2SfhXXC5MhWO11bCUANObn8uzHGdg5Vbc2fYIKMCvCBCPJ7LkKCq1r/82wNv
Ucr3XS8emVtxuh8NVulUm4HlUbQ83Iy2QjO5842Dy2Yfs3AC4a5tTAtqzFuZjrNs
kuHfwnxKH7Sk+D2elq8hL4x4n5Y5N7PLlkD4HxMEafN/VrXuSg/Ws05wlmT6lwvL
ll2A8ZhWrvW11M3BVwzAeguXzq2/pY0H2199ULRajZRbU0bZGe09bOM6lr4S2AuL
efqKUkkz6hvmBA9+5C0lLC4jBXY8eUVnhCkXsxHJl7CaR85V9kBVKfRmwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJUgN/j/NZRpJu5X4jOtmTjaC0PKMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvbFNBMy1QODFsR2ttN2xmaU02MlpPTm9MUThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgJMA0G
CSqGSIb3DQEBCwUAA4IBAQBohTvYz9PVjWQnGPPYY+g7oMWmmtAJIx5Nn/opL9y6
pjt7rpA7j7oyrboKWGAQcHPm7SX/XT5KTDYrTuYl8yXuzsvEzri6AjbrctWL8kmu
AlYZtZo+Nx8mA4DvBYaFhYk7ZBnLNqNek1JR3NXMLLXDFfIbYQvjkC1NyAgpoli/
msIOliCp7fg/fF9oKg7+ZUeWfW+9Tq0JgJx+MT6j5SFrILDJwdYwAV4vCjBncd8G
ZTP2vRzC6rJgdmKxfQaltc+2wH4TRqrwOsXiDw8pxM0B30pQeolqSSfpLjOjmN5P
xTpv3hdCHzRXz8WDYNTQaNiw93rd01XEZeOHcMA9OkGe
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:54:24 2025 by rpki-client