Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ix_LvFyp7t5Bz5LQzuUKpeAtDNg.roa
File: ix_LvFyp7t5Bz5LQzuUKpeAtDNg.roa (raw, json)
Hash identifier: W1nOAqw2ovRePOt5AMbFegGf1AtQQILMO+H6LLfkBfk=
Subject key identifier: 8B:1F:CB:BC:5C:A9:EE:DE:41:CF:92:D0:CE:E5:0A:A5:E0:2D:0C:D8
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D907A43D6612599B4E3F8839BAC4
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ix_LvFyp7t5Bz5LQzuUKpeAtDNg.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206147
IP address blocks: 194.6.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:07:a4:3d:66:12:59:9b:4e:3f:88:39:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1fcbbc5ca9eede41cf92d0cee50aa5e02d0cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:0a:3f:69:75:5b:98:a7:6f:0b:03:91:21:
54:e7:4c:9f:14:a9:7b:c3:7b:5c:c9:e1:4a:f6:1c:
82:6c:27:4b:14:c9:a1:28:e8:fb:8f:22:ed:01:12:
03:3e:e9:dc:d6:09:8d:21:5c:0b:4a:3b:c9:cc:d0:
6a:06:0f:94:68:64:f3:3f:30:51:3b:3f:a4:4e:c5:
9a:f1:8d:ac:67:ac:c4:dd:15:7d:23:02:a4:ed:6b:
c3:47:a4:99:38:36:2a:e6:f1:90:8e:44:92:b7:3d:
e7:c6:98:7d:63:5b:fc:30:92:02:34:57:f1:36:8a:
68:5b:68:91:ac:74:03:89:f7:9b:e7:72:5c:dd:9a:
3e:c6:a3:9f:4c:73:79:d7:c2:f4:49:6b:04:7f:5e:
44:ac:21:c9:68:72:d9:50:d9:a9:f4:c3:57:e2:c9:
a9:4a:c5:e2:e4:99:68:ff:cf:69:87:0f:61:f4:75:
16:66:c4:0a:86:e5:3c:db:9a:62:07:d7:bf:40:79:
9e:f2:a1:3b:e0:16:27:1a:b4:9c:3f:03:76:03:ea:
4e:dd:4f:a0:6c:52:f8:a1:62:94:df:0e:ae:e8:f2:
fd:16:40:f3:41:9f:88:c1:18:33:f2:93:ee:db:56:
58:1c:fa:3e:3a:d6:5d:f2:6a:01:8e:d1:40:e9:fe:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1F:CB:BC:5C:A9:EE:DE:41:CF:92:D0:CE:E5:0A:A5:E0:2D:0C:D8
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ix_LvFyp7t5Bz5LQzuUKpeAtDNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.163.0/24
Signature Algorithm: sha256WithRSAEncryption
66:38:6b:4c:0b:03:e4:55:75:35:5d:f0:2e:3f:99:b4:d4:50:
72:d6:4c:7f:f9:17:03:d4:47:a3:cd:09:83:69:83:95:5c:ce:
be:ac:2e:3f:1d:03:84:8b:fd:23:41:24:2c:38:e8:57:78:ca:
34:e5:12:94:a9:c4:2c:d2:10:5d:bf:7b:85:4a:ff:5a:1d:08:
55:ac:53:58:19:ff:04:f1:4e:58:d1:ab:60:c7:02:17:81:9d:
b6:a8:92:a5:a6:6c:ad:7d:69:4e:b0:08:74:1f:93:ae:20:df:
a1:5a:60:c9:49:2f:22:ed:91:92:46:36:85:7b:8c:9b:9f:34:
49:da:d0:95:94:c9:3e:97:a6:61:34:a5:a0:02:21:39:17:e5:
a7:fa:6b:58:b0:3e:88:45:5c:fe:ea:21:02:af:a8:a0:2e:61:
1e:4d:27:10:a8:f9:56:a3:eb:89:bd:4e:e6:19:84:1b:5e:0b:
29:e5:b8:2c:cf:1d:50:9f:e2:ad:e8:81:26:39:0e:3c:23:94:
66:85:b2:90:de:e6:15:e7:be:38:5f:59:4e:a7:cd:1b:70:ee:
23:44:d6:47:81:9f:be:c8:b5:0b:12:98:90:f7:4d:e1:50:55:
79:9f:b1:3b:f3:15:0e:6c:6e:00:f5:5c:60:81:74:36:68:35:
99:ef:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:36 2025 by rpki-client