Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/lMUiy0iCZc25BIvrjbAT5rY_gaE.roa
File: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (raw, json)
Hash identifier: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=
Subject key identifier: 94:C5:22:CB:48:82:65:CD:B9:04:8B:EB:8D:B0:13:E6:B6:3F:81:A1
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 019424B3C334EEAB85E67483739AC41471CC
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/lMUiy0iCZc25BIvrjbAT5rY_gaE.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25082
IP address blocks: 91.203.140.0/22 maxlen: 22
91.203.140.0/24 maxlen: 24
91.203.141.0/24 maxlen: 24
91.203.142.0/24 maxlen: 24
91.203.143.0/24 maxlen: 24
91.215.68.0/22 maxlen: 22
91.215.68.0/23 maxlen: 23
91.215.68.0/24 maxlen: 24
91.215.70.0/23 maxlen: 23
91.215.70.0/24 maxlen: 24
91.215.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c3:34:ee:ab:85:e6:74:83:73:9a:c4:14:71:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94c522cb488265cdb9048beb8db013e6b63f81a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:fa:b0:2e:fd:be:9f:39:6c:da:06:92:39:
42:8b:91:a2:50:3a:b7:29:7d:0b:41:3b:e0:b8:7b:
4f:37:4e:bf:65:63:53:b7:01:ac:a7:93:35:01:44:
26:de:eb:ca:3e:fb:be:fb:00:7b:ce:5f:e9:65:bc:
ab:3c:26:21:71:98:ae:f0:69:52:41:45:68:30:a5:
84:14:ee:1c:6e:41:06:70:89:f1:8c:dd:32:fc:c3:
a5:99:a3:56:9c:b4:0d:e8:a6:11:07:70:e2:94:28:
d5:91:7a:03:6f:a9:37:78:15:74:a1:f9:8c:14:dd:
f3:3b:2c:54:4b:8c:73:5c:fa:88:94:6c:62:67:c1:
5d:7b:9e:dd:d1:1a:88:43:27:9e:0d:0a:d7:3e:b3:
bb:f9:ee:05:36:b4:18:5b:c4:4e:89:4f:a9:80:cb:
03:87:eb:67:a2:a3:6a:fd:39:43:1a:f6:b6:45:b0:
27:f8:10:b4:a1:a9:20:41:ef:d9:46:36:6c:4a:7a:
d7:df:51:f3:e7:e6:5b:f9:01:f9:86:7b:37:aa:31:
f6:62:ae:ad:c0:67:1b:1a:14:01:ad:bf:8e:73:05:
cf:3b:fa:f3:99:9d:a3:44:ca:f2:40:47:22:3a:ba:
77:22:73:c0:40:2f:1a:dc:f8:d4:0f:ab:e6:5d:76:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:22:CB:48:82:65:CD:B9:04:8B:EB:8D:B0:13:E6:B6:3F:81:A1
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/lMUiy0iCZc25BIvrjbAT5rY_gaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.140.0/22
91.215.68.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ee:05:2a:0f:f7:e3:cd:8e:4a:6b:fa:ac:3e:35:2f:00:6b:
2b:16:52:7a:0d:21:75:0d:f8:29:84:2c:02:60:39:b6:de:18:
a1:f0:27:86:2d:ee:33:14:c6:03:f5:62:66:f7:44:87:da:8a:
4a:e6:27:51:60:b5:0c:6d:dc:ab:60:54:77:62:62:ab:f8:73:
6c:50:38:62:41:d7:28:2e:92:6d:7a:a4:15:36:c4:6e:1b:75:
51:13:91:dd:4e:d8:1a:e5:38:81:ba:c6:29:19:e1:58:8e:b9:
61:72:95:5b:5e:bc:88:9d:16:df:9e:3e:40:69:ff:48:82:19:
29:f6:15:0e:4b:3f:44:91:c1:06:e9:4a:d2:70:77:16:35:64:
52:6e:c4:5e:29:47:c3:c2:d3:95:e0:6f:43:79:67:f5:28:8a:
35:2d:e5:19:11:79:a0:0a:ad:15:c4:f4:6b:82:c9:b1:e5:16:
06:e3:0e:a6:22:b7:2e:74:80:54:7c:c2:f6:50:b5:c5:be:2e:
63:05:a9:18:6d:e7:38:d2:5c:d1:f4:47:71:b2:4b:f8:d0:a4:
73:9e:54:ed:73:a8:76:1d:f3:87:e5:0f:38:26:a1:e5:53:08:
a2:ca:55:bd:9d:52:93:8b:78:2b:68:c9:0e:3c:72:80:1a:51:
f8:ee:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:11:28 2025 by rpki-client