Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/lHldbm0YksaCuz9XIehAf5kRzB0.roa
File: lHldbm0YksaCuz9XIehAf5kRzB0.roa (raw, json)
Hash identifier: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=
Subject key identifier: 94:79:5D:6E:6D:18:92:C6:82:BB:3F:57:21:E8:40:7F:99:11:CC:1D
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 01941F8C1DAD684DA11E018C19CFD50AD868
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/lHldbm0YksaCuz9XIehAf5kRzB0.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50350
IP address blocks: 193.104.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:ad:68:4d:a1:1e:01:8c:19:cf:d5:0a:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94795d6e6d1892c682bb3f5721e8407f9911cc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:4c:6c:f8:70:20:97:a1:0a:6b:f8:fb:91:
2c:d2:71:ce:4e:24:05:7d:9f:fa:65:c8:b2:62:f9:
79:26:4d:b8:d7:d4:ae:5f:1c:49:a8:d6:f9:a8:30:
72:3f:cb:b1:93:86:68:40:9b:e9:47:f1:5b:76:3a:
4b:0d:09:1e:25:ef:ed:fc:b6:44:5b:78:71:04:e8:
00:fd:df:70:52:12:e5:29:b1:9e:04:08:21:b8:cd:
3f:86:15:39:df:60:bb:37:15:75:11:f7:06:0a:03:
54:c0:f8:50:16:4d:f9:1e:dc:15:e3:ee:d4:40:f9:
73:d6:78:93:93:13:74:d8:14:df:cb:2c:43:bb:18:
ad:64:59:3d:3e:26:18:36:f1:8f:3d:fc:08:9c:b6:
3b:07:8b:c8:8c:d8:89:40:a7:57:75:e0:f9:e4:f3:
cb:62:fc:6d:4d:78:d9:ab:08:f3:33:31:b5:0b:bf:
d6:f0:19:d1:58:7e:bb:90:64:19:39:6e:96:c4:70:
b5:7c:c1:74:b1:26:f0:ee:32:01:26:65:12:c2:59:
ee:d5:ff:67:34:3d:04:c0:ea:88:00:39:72:47:20:
ca:55:1e:16:65:09:dc:33:67:40:15:59:c9:d8:9f:
32:be:c9:c4:34:80:19:5e:6c:50:ee:bf:cb:7e:f9:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:5D:6E:6D:18:92:C6:82:BB:3F:57:21:E8:40:7F:99:11:CC:1D
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/lHldbm0YksaCuz9XIehAf5kRzB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.238.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:7a:bf:20:7a:24:75:78:a8:22:ea:1c:aa:b1:98:49:b4:1c:
c7:e8:04:2c:4d:07:6c:da:c5:a0:2b:a6:eb:9e:ce:2c:3b:3a:
ae:38:49:72:a7:22:0b:37:88:f0:88:f2:7b:5a:2e:b3:16:93:
2e:47:f1:12:f0:4c:6f:76:a5:86:7b:b1:54:0e:0e:d3:5d:75:
05:25:55:13:73:1b:f2:04:90:47:4f:cf:a4:b4:51:f4:fd:40:
f3:d5:c8:47:fa:cf:e9:62:59:03:65:e5:8b:42:3a:53:1c:15:
cc:4f:9d:33:3d:95:2b:ec:52:9d:97:f1:2a:ca:4d:e8:b9:12:
e6:10:e5:9b:40:c2:6c:0b:b5:e6:fd:e5:77:5e:e8:15:08:93:
c1:81:cc:ea:8a:75:6c:60:c5:97:d4:5b:11:c1:d1:8a:69:e9:
07:05:60:f6:6e:a7:51:1a:bd:3a:aa:20:37:bd:48:3a:09:5d:
d0:eb:9a:f4:3e:95:dc:e0:e8:09:db:6c:8f:4b:87:60:b9:aa:
5a:2a:ca:29:cf:c5:58:f6:76:c2:cc:6a:11:2b:38:98:77:09:
5b:8c:73:2b:2d:db:d6:ff:3b:2e:9e:28:f9:e8:28:67:c4:5b:
b4:36:e6:03:c7:7f:37:41:85:f9:0d:73:4d:b7:2c:04:10:a1:
83:f0:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:30 2025 by rpki-client