Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LmQkPTctK2jSGiSfsndjKmsIN1s.roa
File: LmQkPTctK2jSGiSfsndjKmsIN1s.roa (raw, json)
Hash identifier: nFCXSPzYZ400StRreKtw2z+wi7uGbR4CjXlF+FAF7u4=
Subject key identifier: 2E:64:24:3D:37:2D:2B:68:D2:1A:24:9F:B2:77:63:2A:6B:08:37:5B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01945FB551456B844E26E03227D5221D4554
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LmQkPTctK2jSGiSfsndjKmsIN1s.roa
Signing time: Mon 13 Jan 2025 12:48:25 +0000
ROA not before: Mon 13 Jan 2025 12:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 194.163.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b5:51:45:6b:84:4e:26:e0:32:27:d5:22:1d:45:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 13 12:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e64243d372d2b68d21a249fb277632a6b08375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:31:5f:11:2d:c0:6b:39:f4:b1:c2:cb:68:
a7:cb:94:98:51:f3:7b:5d:7f:60:bb:b6:17:9c:7a:
ae:2d:95:f6:87:c2:76:8a:f5:7d:4b:bd:e2:d3:39:
4a:ed:b8:e8:56:60:bb:96:ef:e4:cb:9f:06:c1:3b:
19:57:4a:c4:7d:3e:b3:a5:1f:7f:a8:7d:5d:e6:d5:
4d:39:b7:a2:c1:ad:bd:18:2a:75:67:df:27:14:b7:
16:f8:87:ce:52:61:bc:49:28:43:8f:af:05:af:2c:
ce:ed:4d:74:f7:87:8f:23:a4:e5:ac:84:06:4b:e5:
4f:bf:e4:59:25:2c:ad:7c:a5:ce:9e:a3:0c:4d:99:
bc:09:c5:99:68:08:7b:e3:dd:cc:c5:4e:de:73:53:
ee:fe:90:a7:93:44:5b:a2:fb:ab:18:50:97:5e:04:
a7:4b:22:c2:60:28:c0:a9:57:f7:6a:16:86:ed:28:
f7:81:e4:85:c5:76:13:3d:00:f5:e0:06:f8:c3:b1:
e6:75:17:5e:0f:82:36:75:b7:fb:6b:d3:e5:2e:87:
88:07:bf:03:45:30:89:e8:28:3d:94:50:f1:e0:61:
33:e5:51:a7:93:70:69:b5:45:cc:8e:28:28:6c:a8:
9f:0f:30:b4:a1:88:03:5e:f7:c4:d5:4c:f1:94:ff:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:24:3D:37:2D:2B:68:D2:1A:24:9F:B2:77:63:2A:6B:08:37:5B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LmQkPTctK2jSGiSfsndjKmsIN1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.80.0/22
Signature Algorithm: sha256WithRSAEncryption
13:a5:45:51:0b:03:bd:d1:a6:7e:db:82:98:ab:dd:b6:54:07:
64:b8:e3:d3:8b:30:19:29:a3:aa:9b:27:9b:bf:f6:de:ea:66:
06:91:e3:3d:6c:67:d8:a2:d2:ea:dd:cf:14:c7:52:96:41:50:
71:3b:b2:09:6f:11:45:4c:89:6e:ac:27:dc:dd:ea:bf:6a:7e:
a8:9f:66:21:20:c2:4b:75:8f:36:9e:21:20:72:6f:44:cd:05:
bd:18:df:4c:7b:36:76:bb:ee:e4:20:57:52:22:f8:06:03:8a:
86:1c:9f:b3:d7:1f:39:7a:10:e9:ee:ef:06:d6:c4:dc:9d:b6:
58:ad:47:4a:ac:c6:b8:25:08:71:24:50:ed:e8:d7:b7:0e:13:
af:63:12:fa:8d:5f:40:d6:f5:af:e1:54:b5:f9:61:19:65:8f:
33:35:59:f4:8c:30:6c:06:f5:02:68:9d:f4:ab:95:67:55:25:
b1:fa:b6:04:26:bb:73:36:71:2e:af:dd:b0:bc:ef:cf:d7:75:
66:e1:35:a3:d4:a8:3d:60:1e:b8:9e:41:34:e1:11:8e:a8:9d:
a4:0f:f4:a3:c9:4d:57:d5:64:0e:4a:89:da:b6:fa:cd:d1:df:
4b:de:41:24:52:85:77:cd:18:05:a8:62:9a:3e:2d:9d:60:f0:
76:dc:28:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:04 2025 by rpki-client