Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa
File: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (raw, json)
Hash identifier: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=
Subject key identifier: 2C:65:69:02:F5:D5:C2:BF:D7:52:E5:B5:13:07:F5:D0:88:41:C5:F7
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019427B5A49625DDA7B6E038145EED33AE3E
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 45.11.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a4:96:25:dd:a7:b6:e0:38:14:5e:ed:33:ae:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c656902f5d5c2bfd752e5b51307f5d08841c5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:24:47:8d:af:b8:dc:26:0c:3e:2e:19:a9:
8b:1d:c6:0d:02:58:e4:36:6f:88:00:d8:a0:e6:d3:
cf:10:17:f6:13:ee:f4:94:ff:d4:dc:eb:7c:d1:e9:
37:31:de:a0:f2:3f:52:eb:dd:82:88:9e:46:df:61:
89:47:bd:15:9e:b2:ab:11:90:b4:5c:5f:0e:91:f2:
81:df:2b:67:b0:fd:c4:f9:48:d5:11:b7:be:46:bd:
f8:aa:e0:b2:6d:91:92:6c:89:01:d4:f4:46:98:ca:
4b:52:c7:b4:c8:c9:8c:cd:75:b6:1f:1b:76:22:9d:
c7:d7:d8:d7:2d:8e:8a:75:47:5c:b3:91:ac:fa:01:
46:f2:91:bb:fb:c3:be:44:5b:cb:16:69:51:8a:05:
6a:4f:3f:6a:89:d1:d1:ca:e4:64:2b:87:e3:95:4f:
1a:0d:19:b2:e8:0d:29:a9:da:7d:25:07:5b:6b:12:
84:84:27:6a:16:c0:9e:eb:c7:cf:06:0c:68:f6:29:
4b:ab:88:3f:75:d5:5e:fa:0d:8d:cf:38:b3:2b:4a:
fc:6c:1b:64:e9:92:b0:4c:fe:64:8a:fa:86:12:38:
5c:57:80:8f:e2:52:4e:93:48:58:c7:b5:d8:71:9e:
d9:ac:c6:98:04:0c:00:a7:58:14:b5:16:58:4e:2e:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:65:69:02:F5:D5:C2:BF:D7:52:E5:B5:13:07:F5:D0:88:41:C5:F7
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.64.0/22
Signature Algorithm: sha256WithRSAEncryption
23:6c:fe:e1:c2:bc:57:f7:09:28:6b:0e:fa:37:8f:39:07:9d:
fb:73:33:1e:ff:fb:a0:22:9c:ba:e4:c1:06:fc:ce:b0:d3:1b:
b7:18:2f:cf:03:f9:d6:0c:cd:26:1c:89:67:4f:40:39:62:79:
37:0e:82:65:6f:5d:ad:c1:23:47:0f:ac:df:fc:06:87:05:28:
7d:32:1d:96:9d:f1:fc:0f:e0:2d:86:dc:3e:cc:95:15:61:06:
0a:45:cb:25:73:6f:1f:5a:5f:5f:80:27:e4:44:ad:73:02:e0:
9b:bd:97:0c:9a:31:8b:10:4f:3d:91:62:89:f7:87:a3:cb:76:
04:90:58:20:8e:91:2f:bd:4c:ad:51:77:03:50:44:26:75:24:
82:48:e0:fb:64:04:33:17:73:cd:0e:8e:4e:59:73:9d:95:66:
9a:14:6b:58:eb:5a:e7:ad:05:ed:69:bd:19:5b:41:38:83:f0:
b1:1e:26:7b:02:64:79:9c:de:46:ad:68:83:41:07:3b:4b:aa:
c7:e6:ff:bd:5f:43:54:9c:da:7a:50:5a:83:2a:0d:10:4e:a5:
7b:8b:d5:eb:ed:f8:f6:2b:65:08:c4:60:07:f4:b2:5c:63:d8:
5b:03:71:32:5f:60:20:22:7a:52:b3:92:6f:d4:fd:80:44:ae:
a7:91:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:15 2025 by rpki-client