Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/lTmaTwRPPrTR0IHZcxtqDDJSqtQ.roa
File: lTmaTwRPPrTR0IHZcxtqDDJSqtQ.roa (raw, json)
Hash identifier: 27Rj0T5LtwmYGjCG2KDw4zuxsd16t9GUkNcpFDP54LM=
Subject key identifier: 95:39:9A:4F:04:4F:3E:B4:D1:D0:81:D9:73:1B:6A:0C:32:52:AA:D4
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 018CC4253AF16AC2487C3FF8F6111680A5FC
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/lTmaTwRPPrTR0IHZcxtqDDJSqtQ.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 93.190.218.0/24 maxlen: 24
93.190.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3a:f1:6a:c2:48:7c:3f:f8:f6:11:16:80:a5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95399a4f044f3eb4d1d081d9731b6a0c3252aad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:54:ae:3c:a9:66:9e:76:ea:b7:9f:6c:e6:
ba:68:61:95:81:e8:18:2f:55:49:0a:bb:e3:8d:38:
4e:a1:f5:13:8e:8c:85:a6:9f:86:33:a3:c0:19:43:
ab:f5:88:53:05:86:c1:50:78:d6:c4:8d:1e:54:a8:
92:6d:1a:00:55:53:3f:00:d5:13:c7:5a:89:d6:b7:
31:28:0c:66:43:2f:04:cc:83:60:52:95:ec:f4:ea:
ab:88:71:a1:40:50:7b:89:00:12:00:01:26:9f:dd:
e2:17:f5:89:a8:7a:c8:9f:a9:09:2b:d9:ad:09:6e:
c8:75:23:64:d4:8f:ec:58:19:3b:49:45:b4:36:bf:
78:e9:b3:dd:5b:0f:a6:54:4f:21:ee:5c:4f:6a:a4:
f0:32:9b:59:91:be:48:d1:82:74:c1:9a:ef:c0:e8:
24:e1:39:f2:7f:de:1a:77:c3:a9:8b:b2:59:8c:eb:
b7:c5:33:22:9c:8d:eb:fa:bb:60:ef:fb:38:e9:f7:
68:7c:4d:3d:72:d1:76:11:aa:5a:a7:eb:e5:7f:ba:
54:2d:ac:85:12:ef:4a:54:e0:af:f2:ee:89:e4:d7:
0a:c5:46:61:bd:66:06:91:05:15:b2:88:fc:75:f3:
01:48:a8:08:c5:df:da:f9:74:84:3e:52:68:46:31:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:9A:4F:04:4F:3E:B4:D1:D0:81:D9:73:1B:6A:0C:32:52:AA:D4
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/lTmaTwRPPrTR0IHZcxtqDDJSqtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.218.0/23
Signature Algorithm: sha256WithRSAEncryption
e7:3b:ad:40:5c:5c:d3:1f:02:46:db:e0:6e:0f:0c:70:bc:76:
92:39:ff:2b:57:9f:f2:7a:4d:ca:9d:f7:54:37:01:4d:b6:51:
7e:0c:e4:e1:80:6f:46:aa:0c:cc:24:e8:e2:0f:73:d0:a5:f6:
8f:df:eb:9a:09:8d:6c:6b:07:3f:84:3d:02:0f:89:67:c9:89:
6e:d3:69:29:74:b5:d8:0c:88:cf:5b:f5:86:54:ea:83:45:2e:
1c:50:4d:ac:ce:e8:40:6f:ac:10:3d:f7:c9:da:11:0d:ef:da:
09:2b:16:0c:8e:be:8f:c0:37:37:ad:0f:d2:95:f1:81:90:55:
78:47:28:5f:ef:38:13:cf:ec:f0:15:e1:63:91:7a:17:ba:65:
45:e1:30:25:88:b2:bf:73:02:5a:cd:5e:e4:a7:bc:4e:78:62:
92:20:47:06:68:e2:88:73:bd:bc:c8:e0:84:82:51:60:fc:d6:
a5:c6:45:5b:02:70:60:53:fe:c7:73:83:7b:cd:f5:11:2e:18:
a3:80:1f:74:48:ef:1e:57:5d:fa:b2:91:b4:17:e9:f9:8b:0a:
b2:4e:f9:f6:fa:e8:ff:3d:49:92:a1:70:19:93:dd:0c:3c:b4:
fa:e0:35:0d:16:45:7d:6f:81:73:96:81:61:75:ff:f6:1f:60:
34:e8:ce:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJTrxasJIfD/49hEWgKX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMGUxOWJmMmYyZmRiNzMwMjMyZGEyYzQ1NTFhMzEyYmEz
ZTJlZTIwHhcNMjQwMTAxMDgzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTM5OWE0ZjA0NGYzZWI0ZDFkMDgxZDk3MzFiNmEwYzMyNTJhYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRRUrjypZp526refbOa6aGGVgegY
L1VJCrvjjThOofUTjoyFpp+GM6PAGUOr9YhTBYbBUHjWxI0eVKiSbRoAVVM/ANUT
x1qJ1rcxKAxmQy8EzINgUpXs9OqriHGhQFB7iQASAAEmn93iF/WJqHrIn6kJK9mt
CW7IdSNk1I/sWBk7SUW0Nr946bPdWw+mVE8h7lxPaqTwMptZkb5I0YJ0wZrvwOgk
4Tnyf94ad8Opi7JZjOu3xTMinI3r+rtg7/s46fdofE09ctF2Eapap+vlf7pULayF
Eu9KVOCv8u6J5NcKxUZhvWYGkQUVsoj8dfMBSKgIxd/a+XSEPlJoRjGo/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJU5mk8ETz600dCB2XMbagwyUqrUMB8GA1UdIwQY
MBaAFHMOGb8vL9tzAjLaLEVRoxK6Pi7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAt
Y2FmOTUxZTE1MzFkLzEvbFRtYVR3UlBQclRSMElIWmN4dHFEREpTcXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAtY2FmOTUxZTE1MzFk
LzEvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXb7aMA0G
CSqGSIb3DQEBCwUAA4IBAQDnO61AXFzTHwJG2+BuDwxwvHaSOf8rV5/yek3KnfdU
NwFNtlF+DOThgG9GqgzMJOjiD3PQpfaP3+uaCY1sawc/hD0CD4lnyYlu02kpdLXY
DIjPW/WGVOqDRS4cUE2szuhAb6wQPffJ2hEN79oJKxYMjr6PwDc3rQ/SlfGBkFV4
Ryhf7zgTz+zwFeFjkXoXumVF4TAliLK/cwJazV7kp7xOeGKSIEcGaOKIc728yOCE
glFg/NalxkVbAnBgU/7Hc4N7zfURLhijgB90SO8eV136spG0F+n5iwqyTvn2+uj/
PUmSoXAZk90MPLT64DUNFkV9b4FzloFhdf/2H2A06M6R
-----END CERTIFICATE-----
Generated at Thu May 2 00:01:51 2024 by rpki-client on console-fra.rpki-client.org