Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/lQLxDvgdpM5wdztERCLsc3tCNwY.roa
File: lQLxDvgdpM5wdztERCLsc3tCNwY.roa (raw, json)
Hash identifier: Tk0E6nuunIdfuPSYgglnezBIWaLfJtMK/AmMDpED9vM=
Subject key identifier: 95:02:F1:0E:F8:1D:A4:CE:70:77:3B:44:44:22:EC:73:7B:42:37:06
Certificate issuer: /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial: 019420D604178D0244FFFDE118B8E2D88533
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/lQLxDvgdpM5wdztERCLsc3tCNwY.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58029
IP address blocks: 91.223.125.0/24 maxlen: 24
91.241.57.0/24 maxlen: 24
192.166.154.0/24 maxlen: 24
192.166.155.0/24 maxlen: 24
192.166.156.0/24 maxlen: 24
192.166.157.0/24 maxlen: 24
2a0f:9c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:17:8d:02:44:ff:fd:e1:18:b8:e2:d8:85:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9502f10ef81da4ce70773b444422ec737b423706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:62:38:90:7d:bc:b2:b4:93:48:94:8e:37:
57:e5:17:eb:26:91:47:fe:37:db:ea:e1:cb:2d:27:
f8:73:82:90:26:44:e4:ff:c0:13:ef:2b:b3:fd:38:
fc:48:a7:e3:5c:3d:12:a6:91:68:98:b2:76:19:bc:
b8:73:f5:25:da:6f:71:b1:a5:f5:26:07:f9:a8:6f:
ef:2e:09:08:21:19:a1:84:ad:6d:e4:82:8b:86:5b:
be:b0:1a:73:ce:6d:8b:12:1b:8f:29:d3:1e:7b:72:
fd:95:2d:6a:75:82:ad:f9:5e:f4:41:fd:c5:08:8d:
f3:c3:4e:91:94:7b:b3:d6:d9:9c:a7:cf:cd:8c:43:
ce:60:2f:84:fc:53:fa:97:65:28:f9:fa:2c:68:0e:
5e:bb:63:12:dd:cb:8f:fe:13:53:38:95:b8:35:56:
17:4e:a5:f1:fa:34:96:bb:b5:8c:68:c3:33:bf:d8:
15:45:b0:e0:00:71:50:88:09:39:29:d6:55:31:31:
1d:5d:ca:9f:7d:2a:55:a1:62:d7:2b:89:de:44:02:
8d:80:54:a5:39:71:4d:13:cf:1d:0d:07:47:24:77:
97:d6:e5:8b:2d:40:7d:23:58:0f:81:ec:8a:cd:68:
58:83:c0:c1:85:07:7d:9d:11:96:fe:a7:22:3b:e4:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:F1:0E:F8:1D:A4:CE:70:77:3B:44:44:22:EC:73:7B:42:37:06
X509v3 Authority Key Identifier:
keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/lQLxDvgdpM5wdztERCLsc3tCNwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.125.0/24
91.241.57.0/24
192.166.154.0-192.166.157.255
IPv6:
2a0f:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
83:8e:da:11:6c:8e:a3:b2:3c:27:8c:56:67:ab:59:cc:6e:65:
3f:d7:17:a2:b7:a9:98:d2:16:02:7b:21:a2:c6:2c:b1:75:27:
bd:57:1e:2f:c3:7c:36:d7:a9:d9:cd:c5:ee:cc:cd:4f:24:89:
1b:a3:90:b5:9c:e5:b6:6b:b1:b3:ed:52:51:5c:3e:10:1a:0f:
97:65:e1:6e:f6:a9:87:6b:d8:2a:61:13:7e:ba:c3:50:47:6a:
a4:e9:8b:2b:da:e7:4d:52:20:f1:8f:dc:52:c2:b4:b7:1a:19:
7c:54:86:bd:04:0d:72:33:61:be:4e:0e:0e:34:60:22:4a:c6:
72:8a:20:4f:e8:87:e8:a8:88:e1:07:f7:1d:95:25:2f:90:c0:
40:f4:af:e0:40:f8:65:6d:31:fc:fd:db:64:42:0b:09:13:02:
c4:dd:70:e5:49:e1:82:8f:74:c4:4c:f2:83:f7:96:02:7c:4d:
cc:7d:b7:8a:d7:d4:ed:6d:cf:68:a0:80:de:3a:b7:79:a0:ce:
55:20:1d:f7:98:b1:4b:99:f3:f3:05:07:d6:88:bb:65:5c:72:
d3:d7:28:d8:c0:cd:1c:6b:1c:c4:38:bf:84:c0:14:69:e2:17:
2e:55:6a:08:a5:9d:c5:a4:6e:22:16:df:e6:70:8b:66:63:98:
64:cd:57:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:34 2025 by rpki-client