Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/lrYoJPtqAbppZawA4aywsgnhF7s.roa
File: lrYoJPtqAbppZawA4aywsgnhF7s.roa (raw, json)
Hash identifier: VyRfNfXnUZGllAVxvY1gchAUZmaVdW8wCGl6KbmD+H0=
Subject key identifier: 96:B6:28:24:FB:6A:01:BA:69:65:AC:00:E1:AC:B0:B2:09:E1:17:BB
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 018CCA2A83091BA66E7E7AE133A036BF10B4
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/lrYoJPtqAbppZawA4aywsgnhF7s.roa
Signing time: Tue 02 Jan 2024 12:33:52 +0000
ROA not before: Tue 02 Jan 2024 12:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35041
IP address blocks: 109.235.168.0/21 maxlen: 21
194.30.169.0/24 maxlen: 24
195.74.36.0/22 maxlen: 22
193.17.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:83:09:1b:a6:6e:7e:7a:e1:33:a0:36:bf:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 2 12:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96b62824fb6a01ba6965ac00e1acb0b209e117bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:25:2a:59:c9:32:d9:3d:d2:94:dd:c7:f2:
89:91:d9:6b:9a:e0:87:df:95:c8:32:6b:a3:70:5a:
47:34:4c:ce:c0:5b:2d:53:46:17:c7:80:8b:59:0c:
bf:c3:a9:f3:c7:80:70:67:46:e5:d7:5f:5b:7b:4b:
bc:d9:79:ce:1b:dd:c9:73:0f:0c:8f:e7:2d:15:e8:
54:b3:5e:27:23:14:9f:52:c3:06:c3:85:40:09:1a:
a1:52:0c:c6:bd:f0:93:87:16:80:96:29:81:80:f4:
1c:77:e1:77:a7:01:87:57:c7:38:79:c5:b8:8a:7e:
ed:0f:70:20:b7:63:5a:e1:8b:6f:45:76:1f:87:f4:
19:5a:57:5d:25:f7:03:9a:19:7e:64:89:dd:73:42:
d9:73:b0:9d:da:f8:5c:d3:f8:74:e5:9b:48:07:20:
5c:0b:76:46:7f:2a:19:31:f2:11:42:d4:a3:82:dc:
db:bf:11:92:c0:08:bd:eb:53:e6:ed:8f:84:6b:c2:
04:f8:5e:ac:d1:90:6a:50:4c:46:d1:cd:a6:09:ec:
c6:1e:fd:40:12:0e:76:14:c3:23:17:4f:2b:c6:0a:
4d:b3:fe:f0:6c:3a:93:ab:d4:c3:ce:70:1a:dd:c8:
a6:86:12:60:af:d6:83:93:04:de:ce:62:b9:d0:ec:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B6:28:24:FB:6A:01:BA:69:65:AC:00:E1:AC:B0:B2:09:E1:17:BB
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/lrYoJPtqAbppZawA4aywsgnhF7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.168.0/21
193.17.218.0/24
194.30.169.0/24
195.74.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:5b:43:62:6d:d5:62:9c:24:bd:69:76:04:bb:00:6d:aa:3d:
2f:99:b7:28:96:d5:97:c2:cc:48:8f:68:61:e1:c3:37:01:6a:
23:d9:f4:d6:2c:da:9c:10:8a:ed:e6:b4:51:d9:a1:66:fc:37:
a3:9e:b3:4d:97:c5:c1:97:05:a8:a2:c1:6c:45:19:4b:9a:47:
c9:a5:1c:8a:14:e2:a9:99:e7:e9:10:c2:57:5b:94:f2:84:10:
50:c9:53:09:47:b1:c0:59:7e:a0:2c:6c:97:d8:93:27:19:5f:
cb:3b:ad:e7:b0:19:98:fe:b0:61:97:99:de:81:fe:d5:8a:8c:
e5:44:e8:fd:62:54:89:6f:72:d5:5c:bc:3d:36:d6:11:8c:4f:
aa:8d:16:17:d5:fb:a5:88:5e:79:fe:f4:b5:82:ce:72:3c:e8:
56:84:f6:78:7b:b1:e4:d9:a7:73:2a:c1:e6:44:b9:e3:e5:66:
8f:3c:7d:8c:6a:df:2c:5b:7e:1e:ba:ad:de:eb:37:9a:0d:bf:
c5:07:da:b2:ea:32:d7:59:6f:86:8b:f7:70:55:00:60:6e:34:
12:44:9c:d7:1c:06:51:4f:22:88:97:66:8f:ea:f9:4d:19:6d:
18:b7:b3:39:d1:ae:7e:2b:2b:0f:ad:f0:b9:2f:43:d8:6f:48:
a0:9b:96:63
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzKKoMJG6ZufnrhM6A2vxC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0
MWFlZjAwHhcNMjQwMTAyMTIzMzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmI2MjgyNGZiNmEwMWJhNjk2NWFjMDBlMWFjYjBiMjA5ZTExN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjwlKlnJMtk90pTdx/KJkdlrmuCH
35XIMmujcFpHNEzOwFstU0YXx4CLWQy/w6nzx4BwZ0bl119be0u82XnOG93Jcw8M
j+ctFehUs14nIxSfUsMGw4VACRqhUgzGvfCThxaAlimBgPQcd+F3pwGHV8c4ecW4
in7tD3Agt2Na4YtvRXYfh/QZWlddJfcDmhl+ZIndc0LZc7Cd2vhc0/h05ZtIByBc
C3ZGfyoZMfIRQtSjgtzbvxGSwAi961Pm7Y+Ea8IE+F6s0ZBqUExG0c2mCezGHv1A
Eg52FMMjF08rxgpNs/7wbDqTq9TDznAa3cimhhJgr9aDkwTezmK50Oy7lQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJa2KCT7agG6aWWsAOGssLIJ4Re7MB8GA1UdIwQY
MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt
NWRjMmZhNmEzNTAzLzEvbHJZb0pQdHFBYnBwWmF3QTRheXdzZ25oRjdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz
LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDbeuoAwQA
wRHaAwQAwh6pAwQCw0okMA0GCSqGSIb3DQEBCwUAA4IBAQAeW0NibdVinCS9aXYE
uwBtqj0vmbcoltWXwsxIj2hh4cM3AWoj2fTWLNqcEIrt5rRR2aFm/DejnrNNl8XB
lwWoosFsRRlLmkfJpRyKFOKpmefpEMJXW5TyhBBQyVMJR7HAWX6gLGyX2JMnGV/L
O63nsBmY/rBhl5negf7ViozlROj9YlSJb3LVXLw9NtYRjE+qjRYX1fuliF55/vS1
gs5yPOhWhPZ4e7Hk2adzKsHmRLnj5WaPPH2Mat8sW34euq3e6zeaDb/FB9qy6jLX
WW+Gi/dwVQBgbjQSRJzXHAZRTyKIl2aP6vlNGW0Yt7M50a5+KysPrfC5L0PYb0ig
m5Zj
-----END CERTIFICATE-----
Generated at Sat Jun 8 04:22:26 2024 by rpki-client on console-ams.rpki-client.org