Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/lSVuH4_qT7VO0FFfSg8D4f45UxY.roa
File: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (raw, json)
Hash identifier: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=
Subject key identifier: 95:25:6E:1F:8F:EA:4F:B5:4E:D0:51:5F:4A:0F:03:E1:FE:39:53:16
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 019425219B528884F6F4FD49EFAD2777DED0
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/lSVuH4_qT7VO0FFfSg8D4f45UxY.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50156
IP address blocks: 195.200.224.0/23 maxlen: 23
195.200.225.0/24 maxlen: 24
2001:67c:344::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9b:52:88:84:f6:f4:fd:49:ef:ad:27:77:de:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95256e1f8fea4fb54ed0515f4a0f03e1fe395316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:ec:88:f2:fb:41:d9:fc:31:ed:ba:61:fb:
aa:2d:3d:5e:25:9c:2f:45:0a:0c:27:95:c2:72:0b:
24:87:22:86:42:1b:4f:71:89:41:46:8b:f8:79:87:
8b:7c:48:0d:5b:3d:71:65:ac:c9:75:87:21:e0:d8:
5d:25:f0:56:d0:90:a6:1e:2f:de:57:dd:b6:06:31:
c0:7b:83:c8:99:bc:19:7e:2e:be:0d:fc:22:9c:3f:
6a:30:f1:b1:dd:57:88:46:25:b3:85:07:66:82:5b:
f6:bf:12:18:31:c2:dc:bf:cc:b1:cb:92:56:2b:8b:
e3:2e:9c:bb:c4:83:5a:cf:f1:6d:22:ee:a3:51:3b:
06:79:a9:56:47:7c:f2:ae:63:75:51:9b:7c:bc:5d:
d5:e9:8d:da:8e:c3:f2:6b:86:39:f9:26:6e:19:2c:
e6:8a:9f:65:8a:ba:91:40:d0:c4:5f:31:88:5d:2b:
e6:5e:42:83:49:82:d4:54:1e:db:d6:f9:19:6d:40:
6b:97:8b:09:37:20:ba:d2:54:57:56:09:41:ce:9f:
35:44:e4:04:f4:27:44:ba:ce:16:d3:10:be:4e:a1:
76:a4:a5:2f:0a:54:f4:92:d3:3c:48:6c:b1:2b:d0:
13:95:8d:89:39:4a:65:d0:34:02:df:2a:c7:ff:4b:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:6E:1F:8F:EA:4F:B5:4E:D0:51:5F:4A:0F:03:E1:FE:39:53:16
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/lSVuH4_qT7VO0FFfSg8D4f45UxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.224.0/23
IPv6:
2001:67c:344::/48
Signature Algorithm: sha256WithRSAEncryption
27:a2:20:10:99:12:ea:6b:28:34:b7:f6:01:d3:c6:4b:c2:fc:
b8:df:56:27:de:c9:c4:17:ee:4a:8e:35:a8:b4:59:29:f6:0c:
e5:d3:3e:38:57:44:ea:23:14:90:cd:75:9f:cf:48:75:01:08:
c8:2d:09:11:10:ef:24:06:7b:05:ac:32:6f:e9:32:d2:5b:7d:
eb:92:4c:07:ad:7f:32:11:bf:06:39:c2:47:6e:a1:b9:04:7e:
b1:26:ca:fc:95:40:b2:41:eb:03:b6:1e:c8:d9:1f:26:14:12:
3b:8a:3e:f1:f1:68:4e:c4:56:cd:15:f8:d2:1c:9a:5d:1b:d7:
98:45:8a:b9:dd:1b:cf:18:76:a8:69:74:59:8b:6c:0a:75:2e:
db:66:6c:2e:eb:75:ec:65:b5:88:3b:2b:3a:07:a3:2c:d3:1d:
90:97:7e:4e:ba:eb:a1:0c:f1:4d:84:9b:a5:ef:28:ab:fd:4b:
d2:ab:c8:d9:40:5c:b1:ab:a4:26:63:db:3c:4b:69:e0:1f:23:
10:ab:aa:84:e1:9b:6a:6a:0c:22:4a:13:ff:9d:1e:b3:4c:ca:
f6:47:0e:04:64:85:71:98:73:69:52:2c:58:80:87:bb:14:1d:
08:10:37:05:c9:1c:36:a4:b9:ce:e4:06:a2:3e:1d:9f:1a:a1:
ff:a5:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:38 2025 by rpki-client