Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/LgqWUP0536hPg5BCpisRq1CfwzE.roa
File: LgqWUP0536hPg5BCpisRq1CfwzE.roa (raw, json)
Hash identifier: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=
Subject key identifier: 2E:0A:96:50:FD:39:DF:A8:4F:83:90:42:A6:2B:11:AB:50:9F:C3:31
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 019424B3CE6CBB8BC2490C67F27B0BA74A74
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/LgqWUP0536hPg5BCpisRq1CfwzE.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 185.221.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ce:6c:bb:8b:c2:49:0c:67:f2:7b:0b:a7:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e0a9650fd39dfa84f839042a62b11ab509fc331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:b5:5a:4e:3e:f4:fe:c9:3c:8b:32:0a:8f:
d7:87:ce:13:e7:fc:11:6a:bd:7c:f4:cb:be:19:71:
44:a6:4a:ca:5e:98:dc:43:bf:ec:79:a0:9b:c2:9b:
2d:ab:3c:d0:5c:91:07:d9:9f:da:b9:0c:cb:b1:93:
78:ce:96:bb:04:17:1a:a2:3b:4b:4d:6e:79:db:7c:
a3:ae:4b:3d:bc:8c:bd:45:a1:42:24:f2:e0:fc:94:
5f:9d:40:85:ac:0a:ce:1e:70:98:3e:b9:4c:be:61:
cf:8d:e8:36:0f:e6:66:15:be:e2:1f:3c:1c:a2:d7:
45:0f:84:70:7e:36:0f:7a:13:7d:87:4c:0e:ad:70:
e4:c9:b0:7d:48:a9:06:7b:de:e6:59:be:80:32:27:
5d:67:41:36:8d:63:3b:d2:91:08:15:6f:ff:7b:4c:
fb:45:4b:e2:10:17:0a:1e:21:7a:f7:4d:b2:40:c5:
8a:17:48:a5:62:66:3c:b8:1e:4d:01:10:02:e8:cd:
a7:2b:fd:ef:65:82:6a:1d:85:6c:91:4a:da:b4:11:
c9:c8:a4:ab:85:ee:29:7b:4c:80:fc:0c:30:8b:64:
10:bc:a2:23:c9:cc:89:d6:27:ae:56:2d:15:a4:63:
c9:71:e5:98:b8:9e:5b:3c:66:e8:97:55:70:0c:c2:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:96:50:FD:39:DF:A8:4F:83:90:42:A6:2B:11:AB:50:9F:C3:31
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/LgqWUP0536hPg5BCpisRq1CfwzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.110.0/24
Signature Algorithm: sha256WithRSAEncryption
31:62:f7:70:18:9b:44:c0:8f:f0:97:50:74:ce:30:24:9e:69:
60:71:95:16:26:fd:77:1c:7b:a9:e3:a9:e6:d1:f8:91:f8:67:
07:aa:d7:2a:06:d4:28:32:eb:a3:49:25:14:f0:0a:b7:f4:56:
e1:72:88:71:74:6c:ee:07:88:22:28:a9:b1:71:0a:4a:ce:cc:
58:0d:4e:6d:32:c8:14:ca:0e:e0:63:6a:62:5c:df:b0:0a:a1:
8a:03:88:b0:ea:4e:95:65:bb:3f:82:19:7b:d0:30:d7:a8:ae:
11:b0:2e:11:ec:58:1e:1b:0d:3f:5b:1a:84:a4:4f:ab:bb:0e:
a7:28:04:50:09:97:71:22:53:21:f9:60:f0:35:5b:b2:25:41:
0b:5e:c4:c7:56:64:da:5a:72:ca:29:cd:96:78:37:dd:2a:62:
8e:df:aa:3c:2c:70:a1:05:f3:b7:ad:a2:58:24:d8:20:71:cc:
a6:ec:d5:27:2e:46:74:38:60:24:2b:05:92:1b:ca:1b:fa:53:
c0:f7:a7:c8:9c:52:84:82:b5:72:6e:ec:8d:04:c2:64:d3:8f:
44:cb:8f:b4:ea:2a:2e:20:eb:98:84:31:09:fa:f4:47:9f:5c:
95:76:94:72:6d:ee:77:fe:78:3a:44:45:b5:f1:28:9e:1f:28:
a4:bd:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:55:51 2025 by rpki-client