Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/l9-jCuCHJFmx0sVoEipqCzRZF6A.roa
File: l9-jCuCHJFmx0sVoEipqCzRZF6A.roa (raw, json)
Hash identifier: eja9+9CQxxZv39ZOxqsGUrnH/XDsNrr+USqPJMCzRDU=
Subject key identifier: 97:DF:A3:0A:E0:87:24:59:B1:D2:C5:68:12:2A:6A:0B:34:59:17:A0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 018CC8DEF88023F6D25AC5E5988F793EDA8D
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/l9-jCuCHJFmx0sVoEipqCzRZF6A.roa
Signing time: Tue 02 Jan 2024 06:31:44 +0000
ROA not before: Tue 02 Jan 2024 06:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f8:80:23:f6:d2:5a:c5:e5:98:8f:79:3e:da:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Jan 2 06:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97dfa30ae0872459b1d2c568122a6a0b345917a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:f2:38:3d:34:25:92:f6:66:51:d0:bc:5f:
1e:68:d8:9f:38:36:84:91:6e:c6:0d:7a:ce:37:1e:
0f:6a:00:b2:5e:4f:a2:16:1e:5d:ba:45:c4:46:01:
7d:63:38:d5:70:eb:61:de:36:27:2b:8f:bd:85:b3:
e2:17:9b:15:7c:5f:7f:05:38:90:ad:b5:e6:55:dc:
3b:af:d0:93:35:6e:14:2b:77:3e:29:f2:e5:7b:90:
49:cc:05:9d:71:d3:8e:58:26:7e:8f:24:59:06:b3:
62:29:54:01:4b:29:aa:ed:9e:94:30:76:81:29:58:
91:d1:1c:bc:90:8f:2b:97:d4:83:dd:f2:f7:9c:57:
7a:95:6f:fa:39:a3:8d:0b:37:5e:72:08:f3:d9:7a:
31:f1:11:b1:12:f4:a7:68:d0:e6:01:56:45:b7:9c:
84:19:f0:f6:fc:ec:88:c9:49:77:c7:42:e1:8d:58:
74:29:00:53:b7:0c:c5:b8:82:b3:20:2c:da:c8:a9:
8e:d6:64:eb:1f:ba:2e:12:f9:fc:08:02:ea:48:6d:
0f:39:07:e1:d4:86:9a:3f:41:a8:64:d9:27:66:96:
f6:ea:14:72:fd:81:ed:b1:5b:db:f8:76:42:a9:80:
7d:39:dc:56:f6:90:05:cd:6c:91:14:b5:3a:76:0c:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:A3:0A:E0:87:24:59:B1:D2:C5:68:12:2A:6A:0B:34:59:17:A0
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/l9-jCuCHJFmx0sVoEipqCzRZF6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
60:30:87:24:c3:f7:25:50:4d:b8:4c:18:ac:76:c1:45:8c:77:
6a:c4:09:12:f3:d6:4e:28:6f:46:df:4d:ac:b9:1c:b8:ee:aa:
28:3c:db:24:0c:b7:d3:80:88:9e:b0:ea:d3:cd:86:01:7c:4e:
69:9c:d6:fd:ec:c4:79:35:80:10:40:85:af:d6:da:01:6e:44:
ff:01:0d:0c:85:b6:5f:50:da:64:01:3a:52:da:79:89:fb:e8:
80:d2:ea:dc:82:fd:60:ae:b1:1f:22:c4:70:4a:5c:89:0e:75:
49:bf:3e:05:9d:14:81:83:50:f3:e7:0d:7e:fa:05:bc:f5:89:
f9:b1:d7:11:71:fa:82:d9:04:97:e7:dd:84:96:81:21:b3:15:
5e:77:a9:08:fe:c1:2e:ae:67:40:3f:79:8d:a5:9e:ab:8a:2f:
20:25:c9:d2:32:ae:04:51:e0:f0:8c:17:98:70:4d:a6:71:5c:
ef:e3:66:dc:05:3d:59:d3:96:68:eb:8c:44:ad:2e:03:d9:77:
9e:fd:47:62:ce:ba:31:2f:f7:27:d3:07:10:20:22:b2:5b:94:
99:8c:e0:74:71:91:75:3c:f4:5b:e7:6d:7a:c8:e0:76:7e:c2:
5a:12:37:0b:55:d2:73:b0:5b:ab:92:aa:7b:2d:cf:36:ef:69:
f7:5a:ad:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3viAI/bSWsXlmI95PtqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzY2ZmRmY2FhMjBlODBlOGJmYzMzMGE0ZDhiMWJlN2Rl
NmExZDAwHhcNMjQwMTAyMDYzMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2RmYTMwYWUwODcyNDU5YjFkMmM1NjgxMjJhNmEwYjM0NTkxN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3zyOD00JZL2ZlHQvF8eaNifODaE
kW7GDXrONx4PagCyXk+iFh5dukXERgF9YzjVcOth3jYnK4+9hbPiF5sVfF9/BTiQ
rbXmVdw7r9CTNW4UK3c+KfLle5BJzAWdcdOOWCZ+jyRZBrNiKVQBSymq7Z6UMHaB
KViR0Ry8kI8rl9SD3fL3nFd6lW/6OaONCzdecgjz2Xox8RGxEvSnaNDmAVZFt5yE
GfD2/OyIyUl3x0LhjVh0KQBTtwzFuIKzICzayKmO1mTrH7ouEvn8CALqSG0POQfh
1IaaP0GoZNknZpb26hRy/YHtsVvb+HZCqYB9OdxW9pAFzWyRFLU6dgwL8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJffowrghyRZsdLFaBIqags0WRegMB8GA1UdIwQY
MBaAFGo2b9/Kog6A6L/DMKTYsb595qHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84YzRlYzQtZDYzNy00ZDNmLTlkZTgt
MDU1NTljMWY1OTE1LzEvbDktakN1Q0hKRm14MHNWb0VpcHFDelJaRjZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84YzRlYzQtZDYzNy00ZDNmLTlkZTgtMDU1NTljMWY1OTE1
LzEvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjz8MA0G
CSqGSIb3DQEBCwUAA4IBAQBgMIckw/clUE24TBisdsFFjHdqxAkS89ZOKG9G302s
uRy47qooPNskDLfTgIiesOrTzYYBfE5pnNb97MR5NYAQQIWv1toBbkT/AQ0MhbZf
UNpkATpS2nmJ++iA0urcgv1grrEfIsRwSlyJDnVJvz4FnRSBg1Dz5w1++gW89Yn5
sdcRcfqC2QSX592EloEhsxVed6kI/sEurmdAP3mNpZ6rii8gJcnSMq4EUeDwjBeY
cE2mcVzv42bcBT1Z05Zo64xErS4D2Xee/UdizroxL/cn0wcQICKyW5SZjOB0cZF1
PPRb5216yOB2fsJaEjcLVdJzsFurkqp7Lc8272n3Wq2A
-----END CERTIFICATE-----
Generated at Thu May 2 03:00:11 2024 by rpki-client on console-fra.rpki-client.org