Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/LVCOq86MWXkEBLGlXajn0ZENzKo.roa
File: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (raw, json)
Hash identifier: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=
Subject key identifier: 2D:50:8E:AB:CE:8C:59:79:04:04:B1:A5:5D:A8:E7:D1:91:0D:CC:AA
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D3C423B0625252A7D8E07FB786D0
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/LVCOq86MWXkEBLGlXajn0ZENzKo.roa
Signing time: Thu 02 Jan 2025 17:52:35 +0000
ROA not before: Thu 02 Jan 2025 17:52:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399471
IP address blocks: 85.202.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d3:c4:23:b0:62:52:52:a7:d8:e0:7f:b7:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d508eabce8c59790404b1a55da8e7d1910dccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:7a:09:46:e5:c0:75:61:76:99:6e:1a:88:
98:6a:bb:71:46:dd:05:51:8b:84:3c:23:a1:82:85:
51:81:c5:fa:36:f3:fa:48:01:99:b1:33:7e:df:10:
5e:6f:af:cf:13:eb:9c:20:6e:2d:c3:4e:da:13:af:
a9:79:1f:d0:66:ab:04:f1:4e:90:eb:2c:57:84:45:
65:f4:12:42:28:bc:58:93:43:bb:f4:03:4a:5e:77:
e0:5c:88:21:89:a0:04:fb:9f:83:35:74:0f:ed:1f:
8b:c8:2a:f0:4f:da:bd:92:02:4c:5d:2f:10:b6:23:
0e:13:ae:56:55:c2:c8:3c:d3:65:29:3b:a1:c5:6b:
d1:a3:15:ad:a4:d3:76:ab:52:36:d6:1c:28:2e:1d:
3a:55:4a:b7:76:5c:80:2d:1a:63:f4:cd:44:a4:0d:
a0:12:63:8c:2f:64:c1:25:b2:db:5d:8c:c4:6a:c4:
a0:bf:33:7c:d2:f1:7d:bc:a6:51:84:73:3e:05:aa:
b1:f9:4a:ea:3d:77:be:cb:63:21:57:76:9c:f7:92:
1c:d9:5d:62:72:cf:49:02:b2:9e:07:1b:a0:bd:57:
ea:ce:76:61:67:7b:8a:83:a5:1e:46:c2:71:30:18:
09:1e:01:84:48:3f:ea:23:0f:ef:2d:10:53:9b:84:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:8E:AB:CE:8C:59:79:04:04:B1:A5:5D:A8:E7:D1:91:0D:CC:AA
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/LVCOq86MWXkEBLGlXajn0ZENzKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.168.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:6e:d0:65:61:9e:99:7b:49:55:f8:40:20:b6:75:a3:81:e7:
4b:96:e6:a1:4c:1d:74:9a:1c:84:28:4e:65:2e:fe:8f:08:cd:
b3:85:9b:d9:6a:e6:26:78:40:70:bd:89:eb:3c:f0:3e:4c:f0:
46:ca:f7:39:ab:af:7f:6a:49:47:96:28:d5:be:65:c7:af:95:
fe:96:cf:ef:43:92:45:20:4f:46:08:c2:6d:59:16:3a:74:1b:
18:b4:73:4f:75:84:c2:e0:60:b8:4e:ac:2e:42:7b:f5:0b:1e:
a3:8b:ab:4b:44:f2:14:f0:87:52:8e:66:88:09:9e:08:10:87:
aa:50:43:d2:0f:c3:cd:2b:ec:ae:e3:a9:11:d1:17:2f:59:97:
2a:32:97:e4:d5:d3:f9:f0:4e:44:fb:1d:77:7b:47:02:20:26:
23:9f:83:10:51:1d:29:0d:90:d6:a9:2c:26:e4:f2:d7:ee:a7:
f1:79:2c:6f:f8:35:c0:01:02:98:0f:82:0d:03:a8:53:6a:e4:
c8:54:89:16:a8:22:8b:13:e5:f0:ba:ef:2d:48:51:37:4a:05:
93:68:f2:a8:a6:72:0a:74:d8:c0:9e:88:cb:13:a6:6a:36:67:
cd:7b:76:fd:6a:de:d6:64:05:1d:28:f4:0c:36:52:8c:fc:ef:
a8:78:9f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:14 2025 by rpki-client