Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa
File: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (raw, json)
Hash identifier: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=
Subject key identifier: 2E:F0:A0:E8:E0:CE:BF:3E:DF:39:CB:27:EB:05:37:9E:04:27:35:72
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B29CF957614EF660AAD03DA31C8E83
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa
Signing time: Thu 02 Jan 2025 01:47:52 +0000
ROA not before: Thu 02 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397235
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9c:f9:57:61:4e:f6:60:aa:d0:3d:a3:1c:8e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ef0a0e8e0cebf3edf39cb27eb05379e04273572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:b3:24:ba:89:a2:43:f8:b1:5f:6f:e6:ff:
31:54:23:3d:47:5a:ad:78:b5:96:61:fa:24:83:21:
f4:9e:12:da:5f:ad:9d:39:49:08:f7:0a:09:e6:d5:
38:c4:f4:7d:d8:77:27:01:13:fe:e7:b0:29:72:44:
77:19:bf:34:9d:18:a8:68:9b:7d:44:dd:00:64:f3:
35:2c:cb:68:26:04:85:f3:5e:ab:34:f2:78:96:d0:
48:ad:93:bf:bb:b7:e2:72:38:f6:b4:a6:d8:62:9f:
e9:22:7c:68:db:a4:bb:6b:d1:2f:5b:cb:2a:32:6f:
93:28:a9:1e:37:4c:be:32:bd:8c:e4:ba:85:1e:30:
eb:5d:00:26:3d:f1:0d:85:7c:e4:ce:28:46:f9:29:
d9:a4:4a:d6:d0:1d:74:a6:97:a3:ba:1a:6e:82:f7:
80:06:6e:14:e9:45:1e:fd:1d:b8:3a:74:8c:86:78:
91:98:0d:d2:9d:ba:66:92:62:f5:6d:45:cf:08:7e:
e6:72:71:15:3a:17:52:e7:77:a9:4e:a9:c4:1d:de:
b0:f8:0f:07:90:59:9e:7d:84:b6:67:f3:d6:eb:f9:
75:8e:79:9e:84:d0:86:b4:6e:70:12:14:4d:ce:33:
4f:7a:bd:01:94:8d:f0:0c:d1:9f:c6:82:17:d2:0a:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:A0:E8:E0:CE:BF:3E:DF:39:CB:27:EB:05:37:9E:04:27:35:72
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
77:06:ce:43:40:2c:c0:69:7f:69:30:4d:61:9f:49:76:26:61:
03:ae:32:e6:ec:ce:9e:af:35:60:ca:ef:68:25:bd:5e:5a:ff:
10:58:d1:4e:b1:a4:04:fb:a7:cc:66:ad:64:20:05:a0:53:56:
24:27:ba:cf:e2:95:71:8d:f9:38:9e:61:97:f7:7a:b2:43:c4:
aa:a1:8e:d9:99:3c:ef:45:33:46:ee:c0:be:8a:38:9d:cf:18:
91:02:16:2f:77:e3:82:9b:ce:5f:9d:97:aa:0f:f0:0c:4f:d1:
51:67:8a:b4:f6:1c:4b:ad:80:c9:a5:68:fb:e1:d2:d1:0c:3d:
0a:fc:77:df:72:b6:c1:6a:8e:f5:9f:22:77:b2:67:c2:ec:18:
f1:2b:94:6c:5e:ec:5d:dc:89:3a:a4:1f:2b:50:53:e1:13:f7:
e3:84:82:85:09:4c:c4:df:35:af:c5:1a:ad:34:fe:80:c5:d0:
b9:6f:4a:52:df:a4:62:58:af:80:a6:23:d7:ed:56:c6:f8:fb:
69:97:ad:aa:e0:95:71:d3:c4:1e:b5:2a:06:6d:67:f3:ea:b2:
4d:f6:a6:af:a7:ac:9d:dc:05:a1:44:d0:fe:f0:ce:a9:42:bd:
fd:ea:f1:48:bf:f9:0d:88:ef:71:fd:32:86:88:08:47:6c:03:
65:99:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:15:07 2025 by rpki-client