Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LF-gLxN7KPSDYcp6cp6YLbCVjgo.roa
File: LF-gLxN7KPSDYcp6cp6YLbCVjgo.roa (raw, json)
Hash identifier: VyXRo2yhiOstW9IcRxwXYFdKBYLNTLRlGGw0874K+Xg=
Subject key identifier: 2C:5F:A0:2F:13:7B:28:F4:83:61:CA:7A:72:9E:98:2D:B0:95:8E:0A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942220028A186E58094564175DA642B758
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LF-gLxN7KPSDYcp6cp6YLbCVjgo.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53850
IP address blocks: 5.83.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:02:8a:18:6e:58:09:45:64:17:5d:a6:42:b7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c5fa02f137b28f48361ca7a729e982db0958e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:68:66:b6:56:64:d5:cd:a0:75:df:0f:8d:
b5:63:fa:1b:80:88:70:d4:80:d3:86:f3:b1:af:26:
dd:45:f7:57:9c:91:f8:72:53:75:3d:76:45:0a:46:
88:9d:ec:4a:c6:57:b5:15:9d:05:24:53:9d:68:d0:
f4:8e:3f:ec:87:f6:7a:bc:ec:7f:fb:b3:4d:b4:8e:
da:1e:b0:cd:b7:2a:f1:d3:93:c0:c6:77:2c:9f:fe:
c2:b1:a6:ec:3d:a7:18:3a:37:93:5f:14:1d:90:95:
7f:2f:24:c1:e2:70:87:90:6c:55:3e:9d:7d:97:44:
b5:f9:b6:2d:45:3e:50:83:3e:9c:07:66:68:b9:40:
14:f7:4d:39:60:c0:3c:57:0c:38:db:29:56:d8:e9:
0f:5f:c6:17:f3:e6:17:d3:9b:63:91:32:1c:33:5f:
2a:0b:3b:ed:7a:eb:d7:1a:68:a1:3b:6e:0e:a8:93:
fa:68:f2:71:77:23:2e:f1:03:4f:d9:2c:97:5e:d5:
35:71:ba:36:f1:22:16:ca:d4:af:ae:b8:99:54:61:
bd:f9:c1:a1:47:14:31:12:86:62:94:3d:4c:e7:dc:
d9:f2:fb:41:a9:76:e9:7e:33:d4:fe:06:3b:46:8f:
28:35:a2:99:88:fc:da:e6:58:b2:08:0f:6f:a7:44:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:A0:2F:13:7B:28:F4:83:61:CA:7A:72:9E:98:2D:B0:95:8E:0A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LF-gLxN7KPSDYcp6cp6YLbCVjgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ae:6f:20:3f:9c:4d:b0:f1:e8:77:f8:25:a7:c3:ad:17:46:
28:fc:9f:a4:57:15:a6:70:ca:8c:b4:58:8a:e5:50:b4:1f:76:
88:a1:b6:e3:55:a1:bd:1f:db:aa:cb:06:ed:21:10:72:0a:bb:
04:36:be:e6:da:24:0a:78:ce:db:13:db:0c:a6:3a:10:92:02:
bd:95:6c:4c:9c:89:2e:9f:60:06:b8:7a:f9:18:4d:c6:15:d9:
4a:fe:4b:27:18:4c:d7:41:b7:59:fc:8d:19:db:f1:9a:35:18:
c0:33:d3:3d:47:a2:73:25:29:0c:3f:44:91:0c:c7:42:46:7b:
63:4f:32:cf:7d:b1:36:fb:bb:db:0e:d4:1e:5d:77:52:30:58:
eb:1c:92:a5:58:5a:4d:5b:59:6f:c6:ce:77:76:1c:82:64:2d:
23:91:f5:1b:07:95:1a:ee:93:ca:49:24:1c:c6:77:5f:12:b1:
51:07:4c:b4:7d:90:70:d5:e1:f2:64:2d:43:41:48:6f:39:70:
a2:7f:2d:02:8a:71:fa:03:4d:d5:4c:6b:b2:0a:19:18:7c:68:
01:2a:95:5b:ed:f3:73:7d:8e:f2:0d:3a:93:91:4e:90:75:aa:
b1:67:99:3f:3b:4f:95:1a:1f:9c:60:e1:16:e4:89:e6:65:23:
30:ce:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:57 2025 by rpki-client