Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/LMrTy1U78s34V_By7mkdllSngYk.roa
File: LMrTy1U78s34V_By7mkdllSngYk.roa (raw, json)
Hash identifier: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=
Subject key identifier: 2C:CA:D3:CB:55:3B:F2:CD:F8:57:F0:72:EE:69:1D:96:54:A7:81:89
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0194252217CF94F69D6C216E7471D463A32A
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/LMrTy1U78s34V_By7mkdllSngYk.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 91.192.4.0/24 maxlen: 24
91.192.5.0/24 maxlen: 24
91.192.6.0/24 maxlen: 24
91.192.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:17:cf:94:f6:9d:6c:21:6e:74:71:d4:63:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ccad3cb553bf2cdf857f072ee691d9654a78189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:7a:6c:b1:a5:91:dd:c1:6f:ff:2a:fd:5e:
ad:84:a0:d0:d6:35:1a:eb:4e:3a:dc:ea:84:7f:31:
9a:b8:84:44:31:4a:d3:b8:3c:ed:b8:50:09:0a:0a:
34:b7:b8:5d:a7:e4:fe:f1:4d:19:d3:b2:b0:09:28:
59:11:e1:54:b0:fa:00:d6:a7:01:b5:42:f1:82:7a:
74:6c:94:83:0f:1a:00:5e:c5:cf:3e:82:94:38:5e:
10:20:37:b8:06:20:e7:c4:8f:eb:62:d6:49:fb:cf:
8a:b1:c5:20:e4:0d:14:01:19:d8:e9:87:37:c1:e9:
0a:68:69:11:81:6f:b0:3d:fe:cd:2a:ac:48:71:d0:
27:6e:70:82:7a:c6:c0:a6:1e:b8:87:c0:94:00:74:
9a:27:bd:5c:f4:af:41:a6:54:6f:9d:5d:f1:58:27:
49:e0:ae:0e:16:f5:7f:7b:e5:86:6e:ec:76:1f:34:
d0:70:65:e5:8f:0b:5a:b8:06:89:9b:ca:de:32:b6:
3a:84:c6:27:74:57:d4:3d:6c:cd:68:4a:ec:b0:b1:
32:b9:0d:31:b9:2c:71:74:db:dd:2a:60:a8:8c:b9:
97:5c:0d:48:94:23:0e:e8:5b:e6:48:f5:6c:ab:9a:
80:c4:f8:f7:9d:b5:b4:90:37:c7:eb:c7:5e:7e:08:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CA:D3:CB:55:3B:F2:CD:F8:57:F0:72:EE:69:1D:96:54:A7:81:89
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/LMrTy1U78s34V_By7mkdllSngYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:1a:44:04:63:18:f9:3b:46:31:5e:35:98:ff:80:5c:78:c7:
89:24:72:4a:ab:00:ff:11:ff:81:d4:d1:e4:8d:56:28:aa:a1:
31:00:80:5a:f3:60:e0:da:c7:d2:16:74:eb:72:b4:b6:d5:8c:
d0:d3:21:e9:30:03:30:f7:a6:1a:64:af:a3:60:d2:7c:44:ae:
6f:2b:39:ce:15:fa:32:27:4d:61:96:55:b6:18:5a:1b:7a:72:
03:67:8c:ce:cf:aa:78:74:84:41:1c:72:13:97:d8:7b:0f:1d:
1c:f8:a5:e5:be:98:6e:3c:7d:57:84:e7:ab:9a:59:8c:70:eb:
f9:c3:55:17:f2:39:04:b9:02:bc:da:89:9e:bf:1c:a5:fa:12:
44:a8:a4:79:46:e5:e7:4e:b2:e6:bf:eb:7e:29:60:f4:c3:1f:
8a:7e:e4:dc:35:e8:ab:ee:8f:64:98:e1:10:e1:43:22:89:07:
41:23:aa:2b:c4:7f:41:a4:78:8b:c5:37:33:06:ba:ee:5f:a1:
ff:80:8f:24:dd:a7:d5:79:26:94:af:b9:d7:01:eb:cc:ad:9c:
60:78:b9:96:65:79:a7:f1:48:b7:b6:67:05:f9:83:49:6c:13:
ee:cb:23:b4:90:62:cd:33:bb:f0:0b:56:e2:56:61:7d:f0:57:
c5:11:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:36:31 2025 by rpki-client