Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/lItt5VGmt1LnltF97_kUdq2GlCo.roa
File: lItt5VGmt1LnltF97_kUdq2GlCo.roa (raw, json)
Hash identifier: GH4xpV29RIYSaj1Yh5mgd0oqslXPUwSn+bpI8Wnm7WA=
Subject key identifier: 94:8B:6D:E5:51:A6:B7:52:E7:96:D1:7D:EF:F9:14:76:AD:86:94:2A
Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial: 01900CFA04C9BC8B9FE7BE248B2E6CEC69A2
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/lItt5VGmt1LnltF97_kUdq2GlCo.roa
Signing time: Wed 12 Jun 2024 15:03:50 +0000
ROA not before: Wed 12 Jun 2024 15:03:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399641
IP address blocks: 188.93.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:fa:04:c9:bc:8b:9f:e7:be:24:8b:2e:6c:ec:69:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Validity
Not Before: Jun 12 15:03:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=948b6de551a6b752e796d17deff91476ad86942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:14:5e:45:ef:5b:79:91:bc:c7:18:df:49:
91:49:6c:fc:51:1c:e5:82:91:66:eb:d7:44:6e:4f:
82:7b:ba:4a:43:79:bd:9f:42:d8:09:a7:fb:16:10:
a1:1f:da:b5:55:59:7e:be:2f:92:0d:2a:e6:e1:0a:
a7:74:bc:48:6a:09:a2:4f:f6:62:56:71:15:e2:d1:
89:d0:17:c7:f4:f0:eb:6e:fa:e1:05:7a:15:35:86:
88:3a:23:19:14:3e:56:e6:86:2c:4a:c4:12:78:49:
eb:72:65:f5:5a:12:41:b7:c9:e2:7d:a4:62:a3:b0:
f4:cd:2c:a4:ac:7f:22:76:3b:aa:b0:5a:22:cc:6a:
f3:f4:48:65:6a:08:99:e2:73:02:69:df:79:dc:b9:
9e:89:c4:a7:24:5a:c7:44:20:e7:20:0c:14:86:70:
0b:da:93:f9:65:c4:d6:d7:b0:ca:99:63:47:20:ec:
7a:f8:5b:d7:99:5a:c2:0d:4c:8a:ef:9d:f5:60:a6:
b5:82:09:5c:14:94:75:34:e5:71:77:43:16:c2:5d:
af:0e:e7:4d:32:67:e5:82:71:0e:8d:db:a7:89:2a:
83:7e:da:1c:9d:c4:6c:11:a8:25:d9:ef:22:2b:51:
97:ce:1c:da:51:ad:c7:cf:e6:a0:99:39:1f:b8:52:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:6D:E5:51:A6:B7:52:E7:96:D1:7D:EF:F9:14:76:AD:86:94:2A
X509v3 Authority Key Identifier:
keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/lItt5VGmt1LnltF97_kUdq2GlCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:38:01:b7:33:81:1e:af:8a:cd:3c:7c:8b:22:bb:4f:e2:af:
ae:fe:9b:0f:cd:99:b5:97:ee:1a:a2:77:2a:e2:e4:ce:cc:70:
74:96:b9:68:f8:52:67:11:38:fe:b1:b1:09:f4:b5:70:d0:be:
43:88:0c:37:9f:8e:6d:63:a2:fc:45:f0:37:8a:d9:97:6e:19:
cd:a8:d7:a9:11:a8:f0:87:79:6a:43:3f:cd:8a:5d:66:e6:f2:
da:0e:5d:9f:74:75:47:e8:bf:07:37:b8:f1:3f:8a:40:75:eb:
ef:de:1b:1c:f5:4b:7c:a8:7c:e9:e8:fe:61:9a:0e:34:87:47:
f2:00:c5:62:07:8a:76:11:2a:16:2d:0e:7c:c1:c3:dd:88:bd:
98:b6:af:b6:54:64:48:a6:ae:1a:e5:bb:3a:ae:d2:a5:17:0c:
58:fe:46:89:85:e1:73:2a:2d:30:89:88:10:5b:b0:c4:54:0e:
89:5a:9b:35:ef:df:27:26:c0:dd:62:7e:52:5e:68:a7:b9:f4:
cc:e7:94:d7:14:2c:1c:e8:fd:52:00:50:c6:4d:3a:d9:95:d9:
fc:31:51:c7:30:37:65:f9:f1:29:b2:87:a7:90:d8:47:51:cd:
cc:27:5f:70:6c:0a:9a:64:28:22:b0:ad:4b:06:be:8b:8f:f6:
ba:2b:d4:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAM+gTJvIuf574kiy5s7GmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTFmMzQ1YTUwM2NiOGM4YTlkZTQyN2U4ODEyZWZmZjIx
YjIyYjUwHhcNMjQwNjEyMTUwMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDhiNmRlNTUxYTZiNzUyZTc5NmQxN2RlZmY5MTQ3NmFkODY5NDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD0UXkXvW3mRvMcY30mRSWz8URzl
gpFm69dEbk+Ce7pKQ3m9n0LYCaf7FhChH9q1VVl+vi+SDSrm4QqndLxIagmiT/Zi
VnEV4tGJ0BfH9PDrbvrhBXoVNYaIOiMZFD5W5oYsSsQSeEnrcmX1WhJBt8nifaRi
o7D0zSykrH8idjuqsFoizGrz9EhlagiZ4nMCad953LmeicSnJFrHRCDnIAwUhnAL
2pP5ZcTW17DKmWNHIOx6+FvXmVrCDUyK7531YKa1gglcFJR1NOVxd0MWwl2vDudN
MmflgnEOjduniSqDftocncRsEagl2e8iK1GXzhzaUa3Hz+agmTkfuFJZewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJSLbeVRprdS55bRfe/5FHathpQqMB8GA1UdIwQY
MBaAFMaR80WlA8uMip3kJ+iBLv/yGyK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEt
ZTdjYWY1ZTViY2JhLzEvbEl0dDVWR210MUxubHRGOTdfa1VkcTJHbENvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEtZTdjYWY1ZTViY2Jh
LzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF13MA0G
CSqGSIb3DQEBCwUAA4IBAQBcOAG3M4Eer4rNPHyLIrtP4q+u/psPzZm1l+4aoncq
4uTOzHB0lrlo+FJnETj+sbEJ9LVw0L5DiAw3n45tY6L8RfA3itmXbhnNqNepEajw
h3lqQz/Nil1m5vLaDl2fdHVH6L8HN7jxP4pAdevv3hsc9Ut8qHzp6P5hmg40h0fy
AMViB4p2ESoWLQ58wcPdiL2Ytq+2VGRIpq4a5bs6rtKlFwxY/kaJheFzKi0wiYgQ
W7DEVA6JWps1798nJsDdYn5SXminufTM55TXFCwc6P1SAFDGTTrZldn8MVHHMDdl
+fEpsoenkNhHUc3MJ19wbAqaZCgisK1LBr6Lj/a6K9SX
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:57:47 2024 by rpki-client on console-fra.rpki-client.org