Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/cLEFI3xQS9CocTbeHuHrBA7ho04.roa
File: cLEFI3xQS9CocTbeHuHrBA7ho04.roa (raw, json)
Hash identifier: Oc8zbYVVumhuzpzB+yVW8PsOP/g+K8DFdyeD3cFkIFs=
Subject key identifier: 70:B1:05:23:7C:50:4B:D0:A8:71:36:DE:1E:E1:EB:04:0E:E1:A3:4E
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 019421442B03E44B0E280E6583A527D405AA
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/cLEFI3xQS9CocTbeHuHrBA7ho04.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211304
IP address blocks: 193.84.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2b:03:e4:4b:0e:28:0e:65:83:a5:27:d4:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70b105237c504bd0a87136de1ee1eb040ee1a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:97:f9:76:9e:3b:d5:d2:c0:a4:78:bf:6e:
5b:d0:4d:af:e2:cf:23:0f:55:28:4a:6b:27:8a:d8:
7d:0e:ca:7b:f0:4b:43:0d:58:50:22:3d:58:cc:cf:
5b:02:86:45:47:74:b9:4d:cc:c4:c2:96:8b:fa:cb:
57:18:81:a6:4e:f8:69:49:37:61:c7:b4:27:34:41:
f9:76:90:5f:25:0f:98:a4:a7:d2:89:e3:0e:1b:63:
ec:09:c3:07:4c:70:f6:b1:cb:ec:e1:8a:7f:cc:43:
b9:18:81:b4:e8:ab:78:fe:cb:d4:08:48:4e:7f:e9:
c5:44:5d:31:2a:f0:78:2b:af:f7:68:97:da:77:89:
4d:9e:7c:5e:40:67:6e:3e:ed:d0:81:fe:75:1d:11:
b7:97:d5:1e:94:ba:88:8a:cb:90:73:d0:4b:e7:15:
03:61:85:8a:11:78:07:3b:1e:47:ee:cf:8a:1b:4e:
c5:b9:03:e4:e2:15:c0:c6:ba:b0:d3:dd:d4:1c:c5:
78:2e:2b:2d:f1:8c:c4:59:51:ca:e7:01:d0:7a:10:
d4:d7:fb:7e:d0:3e:c2:49:5c:2e:94:d8:5f:39:83:
e9:40:59:71:74:1a:a1:ae:99:d7:fb:5b:5d:d6:ea:
51:a3:a8:86:5f:58:71:72:1a:85:00:15:54:0d:97:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:05:23:7C:50:4B:D0:A8:71:36:DE:1E:E1:EB:04:0E:E1:A3:4E
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/cLEFI3xQS9CocTbeHuHrBA7ho04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.110.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0b:8a:ed:33:2d:b1:e9:25:25:19:f7:bd:ec:b8:c4:96:03:
a0:f3:eb:6c:8d:33:01:55:c9:36:40:3d:18:3c:05:a2:9f:db:
7c:43:15:41:4a:d7:8b:78:ab:fb:7f:00:db:4a:7b:09:ca:9f:
91:ac:73:9b:c6:53:50:d8:83:21:af:02:65:83:d6:24:29:0b:
8c:cd:e2:c4:0a:9a:43:10:75:3c:a9:94:78:64:31:0c:2b:e7:
05:e8:40:3a:b9:c0:e5:a6:ae:f2:27:2b:c9:37:9c:70:1a:79:
d4:94:a6:d0:b9:8b:2e:e8:f9:70:a5:e1:a6:a3:38:49:bb:6b:
2d:1f:1e:58:cd:bf:81:70:b4:f7:b6:4a:bf:93:b9:0d:46:64:
4e:b9:77:57:35:fb:14:32:83:74:50:09:44:74:d3:37:53:a9:
d0:8b:7e:0e:3e:8f:3c:ab:f6:e4:d2:6f:7d:78:6d:7d:b0:9e:
25:cb:49:15:d6:75:ed:f5:ea:cf:f4:3a:e1:33:94:3d:b4:db:
3a:21:e4:e4:53:60:b3:8d:4a:ae:7b:83:86:5d:01:7c:62:40:
45:e8:61:d3:27:6c:fd:67:a0:5b:f7:7d:2f:1e:bb:a9:b8:54:
52:0a:0b:15:36:9f:30:31:7a:84:78:1d:e0:ef:4a:83:8d:c0:
37:44:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:05:42 2025 by rpki-client