Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LPW_HZRkIqxmdq426vgAgssQN_I.roa
File: LPW_HZRkIqxmdq426vgAgssQN_I.roa (raw, json)
Hash identifier: ejpoj5xN65YfwiqCC0XPY8PjuywhubkZPMFs+eBgNmQ=
Subject key identifier: 2C:F5:BF:1D:94:64:22:AC:66:76:AE:36:EA:F8:00:82:CB:10:37:F2
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420684A133BC52B27CEC12223E8617A6E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LPW_HZRkIqxmdq426vgAgssQN_I.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61121
IP address blocks: 193.233.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4a:13:3b:c5:2b:27:ce:c1:22:23:e8:61:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cf5bf1d946422ac6676ae36eaf80082cb1037f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:9f:a6:3e:b9:3a:ce:27:aa:d4:60:fe:50:
14:98:35:95:5d:5d:9f:e5:86:97:fb:58:f7:3e:22:
da:91:a9:fd:80:25:ad:81:63:ec:fd:71:e4:14:3d:
46:a8:0a:0e:a8:d9:01:9c:94:c4:6b:77:31:92:1b:
69:2a:4f:47:7f:87:03:0a:75:a3:6b:a3:49:36:9d:
00:05:20:ee:51:a9:44:5b:6b:40:ba:77:47:b1:92:
7a:96:b4:6c:69:25:11:f9:da:31:65:b3:2e:08:34:
75:4f:ae:b3:d3:e4:40:b2:9c:80:1f:e7:16:d8:22:
fe:60:2f:36:de:66:f3:9e:7c:77:d7:56:54:e1:95:
38:53:88:2d:8d:6e:20:10:cb:13:68:05:7c:0d:df:
60:1b:5c:b4:33:a9:44:6d:0e:b4:45:5a:5e:59:fd:
f8:38:8d:d5:a1:a8:58:60:b6:61:87:55:c5:0e:f2:
d9:f8:d9:93:a5:90:65:c9:3d:fb:38:28:1f:42:65:
cf:f5:f9:21:c7:84:cb:33:92:e7:40:e9:3f:42:0d:
a7:57:d8:6e:09:d7:0a:21:01:17:4c:32:d3:be:7f:
1a:f0:b9:60:8c:ce:9b:68:23:ba:01:7e:17:2a:d4:
25:11:33:55:fa:1d:a8:19:79:49:1d:4c:71:dc:f0:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F5:BF:1D:94:64:22:AC:66:76:AE:36:EA:F8:00:82:CB:10:37:F2
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LPW_HZRkIqxmdq426vgAgssQN_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.238.0/23
Signature Algorithm: sha256WithRSAEncryption
21:60:2a:da:73:8b:90:5a:d5:c6:49:5a:5d:8c:58:5d:79:33:
bd:29:32:e3:77:a4:9f:a9:a4:b0:a3:72:44:8b:45:bb:50:1d:
91:9b:70:da:81:5e:a2:55:f8:c2:21:5b:11:dc:f9:35:3d:da:
fd:b1:64:71:ba:d6:e4:4d:0d:da:98:97:93:b5:61:6b:3c:85:
ee:67:d7:e8:24:71:0c:d3:9c:86:6d:0e:7d:89:f3:5c:2e:8f:
ea:2e:d2:30:c7:c9:82:30:37:55:f0:11:3d:64:bb:59:06:9b:
a0:e7:6f:88:cf:1e:12:c8:2d:1e:5a:f5:ca:30:4f:ea:3c:eb:
f8:cb:8d:d7:f7:18:82:70:6a:05:a6:e6:a3:90:aa:b3:79:d2:
d7:fa:35:d5:a7:5f:e4:8c:12:8c:11:32:33:77:57:6c:46:cd:
6a:3d:97:a9:be:b8:d6:6c:94:91:09:78:3e:96:e3:ad:03:91:
59:8b:49:12:5b:3f:d9:7e:32:16:ea:ad:60:e4:44:ac:6c:0c:
25:7d:03:bc:77:50:7e:3e:a8:72:99:dd:12:45:3f:c6:aa:72:
e0:db:bf:18:2c:3e:97:23:be:c1:cf:8f:d7:23:08:df:21:e4:
45:cd:f1:6b:be:ec:4b:fb:b2:06:d8:b9:23:22:07:d4:09:da:
b5:e2:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:47 2025 by rpki-client