Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/lKnB-dwdKFedEmFULnp35ClP_1I.roa
File: lKnB-dwdKFedEmFULnp35ClP_1I.roa (raw, json)
Hash identifier: X26wI6Wl+4ao0Tgc3dI3I46YSui7tH0+Vvj9sS/7OKY=
Subject key identifier: 94:A9:C1:F9:DC:1D:28:57:9D:12:61:54:2E:7A:77:E4:29:4F:FF:52
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 0193267802BD8D5772F4A852C20D2890B9F1
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/lKnB-dwdKFedEmFULnp35ClP_1I.roa
Signing time: Wed 13 Nov 2024 17:00:19 +0000
ROA not before: Wed 13 Nov 2024 17:00:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
212.39.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:78:02:bd:8d:57:72:f4:a8:52:c2:0d:28:90:b9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Nov 13 17:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94a9c1f9dc1d28579d1261542e7a77e4294fff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:99:3a:38:28:1b:a1:d7:fe:26:c6:e3:33:
ae:8d:bc:f4:2e:80:d4:5d:cb:31:6b:e5:75:72:8e:
31:51:40:41:7a:1c:f8:3e:c5:f2:4b:cd:d7:3a:2b:
0b:92:04:5c:fd:68:49:4d:82:45:52:75:28:7f:6f:
a3:fb:4d:7a:f9:53:8e:f8:80:5d:5b:1d:b0:1a:03:
24:b1:af:a5:11:94:3c:42:db:fe:cc:38:09:08:fd:
36:1d:52:55:e1:ab:e4:51:89:0a:a2:da:c3:fe:d2:
75:a9:63:0e:02:30:fd:07:05:d0:fe:8b:d8:7d:6e:
8c:94:7e:ec:e5:cf:5c:b6:af:da:22:94:20:a8:72:
69:1f:a4:cf:30:b1:b6:b9:7b:8a:de:80:e9:3d:9f:
38:ff:5d:9a:0f:d1:63:ae:ac:78:7a:03:65:2d:e4:
a1:89:a5:cf:1e:4b:0e:dd:11:d7:0a:1b:7f:d7:77:
6d:a6:49:e9:e4:c1:5f:ef:c2:22:1e:17:d4:92:0d:
f4:fd:fa:35:84:90:b8:2e:22:9e:7e:7a:a9:4b:b2:
b8:84:0e:9d:ba:5e:30:b5:d4:48:c8:00:fb:90:4f:
c7:65:53:d3:3f:2a:a1:8c:0f:27:cf:0a:e1:0a:ef:
97:c6:33:34:8f:33:de:c0:09:12:8d:f4:f2:d7:f3:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:C1:F9:DC:1D:28:57:9D:12:61:54:2E:7A:77:E4:29:4F:FF:52
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/lKnB-dwdKFedEmFULnp35ClP_1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.148.0/23
212.39.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:03:d3:56:21:56:23:d0:6c:fc:58:43:f5:86:6b:89:21:25:
46:c3:4d:43:db:a9:9e:52:da:b6:2f:d5:cd:63:a6:f8:0c:41:
b1:1a:b9:3a:4a:f9:78:9f:f2:7b:54:81:c3:6a:82:d2:11:da:
c3:82:94:1d:02:18:12:70:89:c3:bf:33:08:5d:de:60:52:a0:
12:79:2e:6d:bb:96:49:1a:0f:b2:5d:84:ed:cc:01:91:50:71:
13:6e:45:78:b6:ca:3a:02:44:65:7b:ce:a6:25:a3:e0:f8:04:
0a:01:9a:ce:aa:8d:35:d5:86:2b:1c:e0:0d:c4:d5:66:8e:d6:
71:15:ec:9f:5a:46:c4:85:60:f5:15:ea:a3:ad:33:4d:1b:97:
5d:4b:cf:5a:f7:7d:58:28:96:e9:f0:65:46:6c:30:0f:44:e6:
8a:85:c3:df:43:29:f3:71:38:fc:a0:2d:a7:e1:a9:ca:f3:0f:
f4:b7:ec:3a:62:ae:20:e7:bc:c8:dd:ce:5c:7f:73:2a:41:12:
ab:de:c7:e4:75:97:9d:e9:c7:60:d9:ab:9c:b8:7d:5f:81:c3:
9d:15:70:00:5f:91:f7:2d:ea:29:db:b3:bc:55:b3:a8:e7:2c:
e0:5e:94:9d:12:df:12:16:e6:f3:2b:0f:6f:f5:c5:91:fc:c8:
3a:f5:73:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMmeAK9jVdy9KhSwg0okLnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjQxMTEzMTcwMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGE5YzFmOWRjMWQyODU3OWQxMjYxNTQyZTdhNzdlNDI5NGZmZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqWZOjgoG6HX/ibG4zOujbz0LoDU
Xcsxa+V1co4xUUBBehz4PsXyS83XOisLkgRc/WhJTYJFUnUof2+j+016+VOO+IBd
Wx2wGgMksa+lEZQ8Qtv+zDgJCP02HVJV4avkUYkKotrD/tJ1qWMOAjD9BwXQ/ovY
fW6MlH7s5c9ctq/aIpQgqHJpH6TPMLG2uXuK3oDpPZ84/12aD9Fjrqx4egNlLeSh
iaXPHksO3RHXCht/13dtpknp5MFf78IiHhfUkg30/fo1hJC4LiKefnqpS7K4hA6d
ul4wtdRIyAD7kE/HZVPTPyqhjA8nzwrhCu+XxjM0jzPewAkSjfTy1/M9uwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJSpwfncHShXnRJhVC56d+QpT/9SMB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvbEtuQi1kd2RLRmVkRW1GVUxucDM1Q2xQXzFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw6CUAwQA
1CflMA0GCSqGSIb3DQEBCwUAA4IBAQBrA9NWIVYj0Gz8WEP1hmuJISVGw01D26me
Utq2L9XNY6b4DEGxGrk6Svl4n/J7VIHDaoLSEdrDgpQdAhgScInDvzMIXd5gUqAS
eS5tu5ZJGg+yXYTtzAGRUHETbkV4tso6AkRle86mJaPg+AQKAZrOqo011YYrHOAN
xNVmjtZxFeyfWkbEhWD1FeqjrTNNG5ddS89a931YKJbp8GVGbDAPROaKhcPfQynz
cTj8oC2n4anK8w/0t+w6Yq4g57zI3c5cf3MqQRKr3sfkdZed6cdg2aucuH1fgcOd
FXAAX5H3Leop27O8VbOo5yzgXpSdEt8SFubzKw9v9cWR/Mg69XMm
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:55 2024 by rpki-client on console-ams.rpki-client.org