Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ltmkR62UHp9Wf_efPpxh7HmSnT4.roa
File: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (raw, json)
Hash identifier: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=
Subject key identifier: 96:D9:A4:47:AD:94:1E:9F:56:7F:F7:9F:3E:9C:61:EC:79:92:9D:3E
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 01942144116958B102D74DF1583E60595DD9
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ltmkR62UHp9Wf_efPpxh7HmSnT4.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26937
IP address blocks: 193.103.193.0/24 maxlen: 24
193.103.194.0/24 maxlen: 24
193.103.198.0/24 maxlen: 24
193.103.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:69:58:b1:02:d7:4d:f1:58:3e:60:59:5d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96d9a447ad941e9f567ff79f3e9c61ec79929d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:b1:21:e2:12:50:02:5f:33:3f:f3:b6:48:
9d:c7:be:93:7a:0f:fe:da:a9:23:b5:af:96:8a:cf:
b8:e3:a6:e8:f0:b4:51:86:30:15:8e:65:bd:0e:c8:
90:22:08:66:e1:8a:d8:82:b1:11:ad:78:e2:49:6f:
a9:dd:c1:39:a1:70:20:8e:7d:ec:48:8b:f3:c5:49:
e6:ca:ca:2a:b1:ab:75:3e:e2:37:08:9c:ba:0a:22:
9e:70:81:61:6e:4e:d8:71:3c:a0:8a:dc:16:33:98:
fb:60:49:28:8a:aa:f2:8b:ee:ec:68:69:a3:f0:cc:
37:07:7f:ef:38:2b:ab:28:58:54:7b:46:34:0e:74:
8c:e6:b5:69:a7:14:fc:b6:2e:11:3a:45:b7:4e:9b:
c9:ae:2e:58:67:d7:05:b5:a1:5e:59:00:d6:9e:55:
80:a0:1c:15:08:d1:9e:01:da:2e:6a:45:d4:cc:f0:
fa:96:6b:95:80:88:ca:7e:43:ad:24:55:39:bf:d1:
de:d3:0f:3a:13:11:1b:7d:0a:44:11:79:39:b9:32:
cc:8f:c0:b2:42:ba:db:02:d4:7f:a3:47:8f:40:bb:
9d:84:a8:66:b6:33:a1:e2:4a:84:58:2b:57:89:2d:
65:12:46:13:d9:b2:b9:75:df:3e:3d:16:48:57:eb:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:A4:47:AD:94:1E:9F:56:7F:F7:9F:3E:9C:61:EC:79:92:9D:3E
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ltmkR62UHp9Wf_efPpxh7HmSnT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.193.0-193.103.194.255
193.103.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:8b:96:3b:ce:61:bd:17:8e:90:5a:c0:d7:2b:b9:2c:b7:44:
9b:99:3d:4e:61:56:c3:c2:4d:6b:dc:68:47:8a:2b:e4:82:eb:
2e:28:8b:02:2d:42:a4:18:dd:ae:5c:f8:ec:8f:e6:d8:6f:59:
8c:5b:72:17:3d:ef:03:83:9f:6d:49:38:34:d3:56:86:58:9c:
b8:32:78:c0:a5:11:8a:b3:dc:a9:43:7b:3f:21:0d:19:24:6e:
76:db:54:93:f0:8d:d0:47:f6:20:d6:d8:02:1f:6e:bb:43:12:
f1:a3:38:24:9a:ab:f2:76:57:a6:22:54:35:57:c2:92:a5:0e:
db:59:1f:29:03:30:70:d4:01:05:49:fa:0d:7a:75:0a:e3:f5:
f3:0a:58:4c:b1:52:f4:73:cf:26:22:30:93:49:ee:b2:d0:b1:
45:77:69:3f:a1:08:e0:2e:d9:88:a4:1e:05:1b:dc:d9:40:ac:
eb:b8:d9:e4:5a:73:99:ec:dd:9e:d8:b1:99:49:63:a8:94:d6:
1e:40:4e:5d:4c:07:23:c0:87:57:9a:90:b8:4b:28:f2:a3:14:
e5:b2:36:1b:e2:dd:10:24:ac:1d:19:29:83:8a:8a:e3:a3:3f:
b2:69:41:13:4f:f2:16:5d:7c:bc:5d:17:7f:7f:2b:6f:63:07:
47:19:19:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:58:58 2025 by rpki-client