Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Lvh0wV0dg036F69JlPuelmJnA1Q.roa
File: Lvh0wV0dg036F69JlPuelmJnA1Q.roa (raw, json)
Hash identifier: MidLcI7gwxZcmktSW5JxMuhMg9VABOjc494Gs8alBpg=
Subject key identifier: 2E:F8:74:C1:5D:1D:83:4D:FA:17:AF:49:94:FB:9E:96:62:67:03:54
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A5DC5DA6D09925AC328CA96898AB
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Lvh0wV0dg036F69JlPuelmJnA1Q.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398779
IP address blocks: 45.133.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a5:dc:5d:a6:d0:99:25:ac:32:8c:a9:68:98:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ef874c15d1d834dfa17af4994fb9e9662670354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:08:d8:21:35:95:32:af:d0:4e:02:14:80:
e0:de:28:c8:f2:ab:14:2f:2f:41:79:52:a3:3b:5c:
1a:a7:f8:ac:47:e5:c6:75:e9:84:b5:06:74:31:66:
ec:8b:10:f1:78:40:79:6e:9c:91:3a:3d:74:55:98:
44:d2:e1:34:cc:76:d8:a0:c7:02:f3:cc:2d:cb:2d:
6b:db:8d:67:48:90:6b:a2:9f:05:91:20:ea:1e:60:
80:bf:e4:4d:10:56:0d:66:09:35:e7:7c:24:10:81:
3a:cf:3c:08:34:c8:65:0b:13:2b:54:d2:c4:53:00:
d6:c5:e3:26:04:ce:b8:65:3d:f5:83:e4:ea:e3:56:
f9:b6:86:57:65:4e:ab:52:4d:2e:b8:e0:d4:5b:94:
c0:43:d2:65:f0:ff:99:4b:0f:5b:77:f7:0d:fd:10:
fa:13:65:4c:22:05:25:31:6d:ca:e4:ec:e3:4b:e6:
fd:39:a3:82:14:ba:8e:d1:6c:f9:24:2a:5f:ca:5e:
5a:b0:d8:80:92:e6:26:59:77:dd:e4:ad:d2:e8:8b:
b3:a8:42:1e:46:35:f3:db:49:d3:81:0c:16:80:99:
71:22:99:3c:f0:5f:f1:20:d4:dc:2f:bc:d0:c3:75:
a7:20:c3:fb:a1:21:bf:95:79:27:f3:ae:9b:d3:5c:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F8:74:C1:5D:1D:83:4D:FA:17:AF:49:94:FB:9E:96:62:67:03:54
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Lvh0wV0dg036F69JlPuelmJnA1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.72.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5a:79:21:73:aa:93:84:bd:6a:8b:00:2f:63:75:6d:43:4a:
3a:2a:38:06:49:e0:f5:cd:2d:6a:f5:14:5b:fa:ca:48:9f:db:
99:f5:b4:e4:6b:58:f1:60:9c:df:90:6a:b9:32:d8:45:c7:7d:
7b:b6:51:44:b1:36:5a:7d:90:8a:bc:c2:41:b9:c1:2e:1d:b4:
6d:50:bc:ba:ad:74:86:f6:d1:7a:b7:d9:d7:bd:ec:26:86:0c:
f5:c2:bf:eb:f1:6a:62:7a:1c:66:66:88:2a:62:45:0c:33:4e:
be:9e:54:f9:7a:1a:16:8c:df:a5:26:a0:4f:c7:0a:2b:b7:6e:
19:5f:f7:e0:e8:da:95:c3:e3:aa:8e:d0:fe:3b:1b:89:b1:e3:
38:b2:91:83:c6:cf:e0:89:5e:02:fc:36:a3:31:de:f6:52:50:
e9:ba:fa:d8:24:37:ab:af:a9:67:b2:14:c3:e8:e4:0a:a1:07:
69:ac:50:8b:67:6b:9d:91:ef:86:49:3c:83:fb:19:0d:f5:24:
19:1a:0b:e5:07:a1:6e:80:b8:ca:5e:57:93:6e:e7:63:16:3e:
aa:f0:c8:50:55:bc:0c:3e:ca:ad:e3:7d:cd:1b:21:75:01:5e:
ae:40:1e:2f:03:4d:5e:d5:1b:ab:a3:c0:60:89:aa:fe:62:70:
8f:eb:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:33 2025 by rpki-client