Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/LbhZMBeDnr1qMQnMxvTged4AkBg.roa
File: LbhZMBeDnr1qMQnMxvTged4AkBg.roa (raw, json)
Hash identifier: emzGjVkdxSZb/ajPZYnZYJApon4Jb9kZGLpvd1zwrzU=
Subject key identifier: 2D:B8:59:30:17:83:9E:BD:6A:31:09:CC:C6:F4:E0:79:DE:00:90:18
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0194FD872EFF9CF2EFB2F62D23F2FADD524C
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/LbhZMBeDnr1qMQnMxvTged4AkBg.roa
Signing time: Thu 13 Feb 2025 04:18:02 +0000
ROA not before: Thu 13 Feb 2025 04:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44493
IP address blocks: 31.192.232.0/24 maxlen: 24
31.192.234.0/24 maxlen: 24
31.192.235.0/24 maxlen: 24
31.192.236.0/24 maxlen: 24
31.192.237.0/24 maxlen: 24
31.192.238.0/24 maxlen: 24
31.192.239.0/24 maxlen: 24
80.85.152.0/23 maxlen: 23
80.85.154.0/24 maxlen: 24
80.85.156.0/22 maxlen: 22
185.118.164.0/22 maxlen: 22
185.144.28.0/24 maxlen: 24
185.144.30.0/23 maxlen: 23
2a03:a0e0::/32 maxlen: 32
2a0a:eec0::/48 maxlen: 48
2a0a:eec0:2::/48 maxlen: 48
2a0a:eec0:3::/48 maxlen: 48
2a0a:eec0:4::/48 maxlen: 48
2a0a:eec0:5::/48 maxlen: 48
2a0a:eec0:6::/48 maxlen: 48
2a0a:eec0:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fd:87:2e:ff:9c:f2:ef:b2:f6:2d:23:f2:fa:dd:52:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Feb 13 04:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2db8593017839ebd6a3109ccc6f4e079de009018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:fe:0f:79:df:5e:68:c3:ce:6c:18:e1:78:
3f:bb:b5:f7:91:b5:be:92:af:f7:e0:41:0e:22:58:
59:62:cc:b1:8e:63:21:9b:c7:8a:b0:4d:1b:68:a4:
92:ec:7f:c0:25:2c:5d:e2:61:7d:90:4a:05:ac:fd:
1d:5b:78:94:40:5c:1d:78:d4:d0:a0:a7:bc:b4:76:
23:8b:32:06:ac:5a:3e:fe:b2:44:5b:c8:ce:f9:32:
bf:83:3f:ee:ee:8f:06:5b:cb:03:53:ca:79:c1:6a:
a7:cc:fc:81:7b:12:15:3d:51:61:7d:3f:a0:9a:58:
af:dc:af:23:7d:a3:b0:8a:14:ee:4c:1e:ef:41:53:
a3:59:22:77:ef:2b:72:40:e7:d9:48:b6:24:bb:cc:
df:6e:01:5f:0a:fa:20:77:3d:f2:3b:f9:a4:8b:5e:
33:c3:c4:fa:1b:44:da:27:0e:d0:d4:8f:9b:df:b1:
30:14:14:31:fd:3a:02:64:93:d1:4b:f3:83:77:97:
b3:00:e9:7d:34:c2:cf:af:cc:3c:00:81:72:63:8a:
2c:d8:b3:92:c3:06:1e:15:31:ad:78:db:1d:25:ae:
5c:ac:44:19:3a:1a:1a:70:50:e8:dc:d5:aa:c0:6b:
4f:1e:67:df:f4:d3:a5:ad:7a:a3:d5:fc:d6:5d:3b:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:59:30:17:83:9E:BD:6A:31:09:CC:C6:F4:E0:79:DE:00:90:18
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/LbhZMBeDnr1qMQnMxvTged4AkBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.232.0/24
31.192.234.0-31.192.239.255
80.85.152.0-80.85.154.255
80.85.156.0/22
185.118.164.0/22
185.144.28.0/24
185.144.30.0/23
IPv6:
2a03:a0e0::/32
2a0a:eec0::/48
2a0a:eec0:2::-2a0a:eec0:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ae:da:46:71:0c:67:b7:bf:a9:61:5b:1b:de:e6:e9:8e:8f:74:
b1:54:db:84:f8:5d:8d:a0:13:85:82:62:fe:73:d8:da:95:25:
e1:46:5b:b7:05:06:db:21:fb:5c:be:99:12:17:2b:e3:ab:e5:
ef:9d:b8:88:18:87:e1:89:dd:b6:f8:15:00:e5:e8:cb:f6:6d:
75:a4:71:ac:5c:93:d3:ae:fa:a0:3b:9e:8e:bb:40:8f:e6:eb:
43:5e:07:80:1d:0a:17:1d:47:4d:44:07:11:af:b6:aa:b5:8d:
8c:f2:1f:e5:da:31:d1:70:79:03:13:10:c5:83:74:68:40:3b:
c5:2e:bc:37:d9:8a:62:11:49:5d:f9:76:70:e3:d4:67:32:74:
a5:b8:42:04:7d:dd:02:c6:86:85:9e:0b:b6:17:de:5e:f4:eb:
70:e8:71:91:4f:f2:0e:84:ae:ec:5e:2b:82:c0:fc:51:84:05:
aa:b7:d5:a2:18:ca:b6:45:75:3b:d6:2f:b7:c4:e3:46:14:18:
2d:29:22:ec:74:e1:50:9b:39:65:a1:91:6d:c1:6b:40:a9:46:
82:fc:0e:16:1d:6e:cf:22:e6:d9:e4:cc:f6:b8:8a:60:62:0e:
8e:d6:df:3c:f6:22:7f:0c:39:73:a9:94:5e:ac:ff:2f:e9:59:
82:51:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:36:22 2025 by rpki-client