Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/lIqtXZgZb6FK3xchEu_KzpPH9HY.roa
File: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (raw, json)
Hash identifier: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=
Subject key identifier: 94:8A:AD:5D:98:19:6F:A1:4A:DF:17:21:12:EF:CA:CE:93:C7:F4:76
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0194236A25FBE77E43D04CF7399EC297F6AC
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/lIqtXZgZb6FK3xchEu_KzpPH9HY.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 2.56.32.0/22 maxlen: 22
45.81.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:25:fb:e7:7e:43:d0:4c:f7:39:9e:c2:97:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948aad5d98196fa14adf172112efcace93c7f476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:b0:13:2d:a4:7c:89:c0:1d:21:f9:25:c7:
de:84:6a:02:4c:39:50:e3:65:18:f8:89:1d:ac:15:
3b:c9:c4:4c:d4:ac:5c:a6:5b:83:9d:2b:2b:27:6c:
97:ed:7d:c9:a2:fc:35:cb:6d:86:6f:4d:b0:c6:ca:
4f:44:52:ff:63:f0:70:39:c9:a9:14:52:be:75:a9:
d8:6c:3e:b5:19:ed:67:db:65:1c:24:a4:53:d5:5e:
c3:8f:3b:88:ab:57:d4:cc:06:0f:43:2b:e4:69:d7:
e5:c8:1a:99:4f:42:e3:13:80:5b:8d:86:31:0c:de:
c5:0b:72:da:1d:93:75:2f:c4:40:b1:de:36:a8:89:
58:d3:a9:02:8a:1f:c5:bf:47:00:bc:e6:31:f5:04:
7f:71:e4:94:75:d6:9f:48:c3:51:41:e0:9e:fa:5c:
7f:fa:0c:dd:e3:c1:86:54:cb:3c:0c:89:e1:37:ac:
c5:49:1b:73:2d:51:ff:d5:3b:08:ad:fc:59:17:70:
cd:1f:c3:a8:3e:cd:5d:3c:d3:a3:56:4d:df:f8:0a:
bc:e8:2a:57:98:8c:72:cf:71:fd:95:91:96:25:b6:
20:47:40:b9:9a:92:41:6f:4f:e1:72:fd:18:d4:74:
ef:8f:d1:f5:a7:4b:66:7a:30:aa:f1:15:32:d9:5b:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:AD:5D:98:19:6F:A1:4A:DF:17:21:12:EF:CA:CE:93:C7:F4:76
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/lIqtXZgZb6FK3xchEu_KzpPH9HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.32.0/22
45.81.160.0/24
Signature Algorithm: sha256WithRSAEncryption
09:53:e1:34:21:02:0c:c6:45:7a:c0:71:6e:3f:f6:2c:ab:12:
13:41:7b:b1:69:5b:d1:f6:e8:71:43:de:d3:b1:6a:9b:80:61:
35:7c:83:18:00:75:a3:43:48:04:5d:fc:70:86:5d:7b:72:4a:
4d:a8:32:4e:4b:b0:ae:80:df:9c:fd:96:3d:75:34:1d:46:79:
02:1e:cf:ac:98:95:d4:60:9d:43:94:a8:28:40:f0:89:76:7c:
f0:12:98:19:6b:fa:5f:5d:37:29:cf:93:ee:6f:ae:81:bb:98:
98:05:1b:68:ad:71:ad:c4:65:1a:99:fc:b0:73:e2:57:dd:6f:
3f:b3:88:37:25:64:dd:70:e7:00:35:80:98:af:e8:c9:15:20:
01:ac:55:e4:f8:09:d9:93:a6:e2:80:ff:cd:2c:1d:ad:9c:cf:
b3:b3:f8:5f:2f:72:c5:80:a2:0a:e6:38:a5:dc:37:8c:72:cf:
57:38:5a:cc:25:f1:b1:4f:a7:a4:ce:f8:1c:c7:a8:c8:a5:18:
74:b9:5a:c7:87:95:d2:34:a0:3f:0b:81:ac:ff:db:81:26:44:
47:4c:bd:44:57:b4:84:af:77:02:77:ca:22:7a:c7:75:78:76:
4a:c5:75:b9:bb:5b:74:20:b3:5c:74:e0:e3:f7:9c:9e:3b:50:
ec:e5:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:55:17 2025 by rpki-client