Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/LXrqqPRInqT0YQQrkSiScVOv68s.roa
File: LXrqqPRInqT0YQQrkSiScVOv68s.roa (raw, json)
Hash identifier: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=
Subject key identifier: 2D:7A:EA:A8:F4:48:9E:A4:F4:61:04:2B:91:28:92:71:53:AF:EB:CB
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01941FFA10BA757E200B07978CD0379763F6
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/LXrqqPRInqT0YQQrkSiScVOv68s.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210558
IP address blocks: 2.58.56.0/24 maxlen: 24
194.26.192.0/24 maxlen: 24
2a12:a800:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:10:ba:75:7e:20:0b:07:97:8c:d0:37:97:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d7aeaa8f4489ea4f461042b9128927153afebcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:c8:d2:e6:7d:f4:e0:a7:46:65:12:82:79:
8f:f0:37:34:03:c6:a2:8e:c5:ca:91:5e:d9:b3:27:
ad:5d:77:ab:6c:e4:e1:e3:77:b6:cd:bd:a4:8f:f6:
fe:1f:f8:44:a8:bb:4b:0b:4a:c5:39:c3:f7:a4:fd:
be:f2:2e:04:62:90:56:3d:8e:d4:cf:f3:ca:19:f7:
70:0d:51:25:b2:83:0c:4f:65:f0:42:a0:25:15:15:
5b:d4:0b:70:c0:0b:c9:1c:c6:6a:42:f7:9d:a4:6d:
a0:fe:93:4e:73:18:a2:3d:99:6e:cc:98:cb:eb:9e:
ed:b5:45:2f:4a:1e:84:ff:8c:46:c0:4d:40:ff:bf:
4b:3f:01:0e:3d:93:79:f6:17:8d:8f:1d:07:25:3e:
54:b6:f6:a2:f5:9d:0d:30:f7:74:d3:10:cb:b1:cc:
f8:c1:c4:2d:b4:19:a7:e3:fc:88:7a:62:a4:a5:62:
c7:b4:0a:cc:c8:5d:fd:e4:b1:f5:4f:fa:8a:5c:94:
a3:56:75:16:c3:4a:17:34:b4:ec:26:b7:36:e1:e2:
9b:9a:60:c9:21:cc:b1:72:23:63:86:fc:69:49:f3:
58:fd:7d:0a:a4:bb:d0:2e:c3:b4:95:b4:64:32:f1:
95:b8:20:a2:63:87:be:59:4c:88:3d:69:56:d3:82:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7A:EA:A8:F4:48:9E:A4:F4:61:04:2B:91:28:92:71:53:AF:EB:CB
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/LXrqqPRInqT0YQQrkSiScVOv68s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.56.0/24
194.26.192.0/24
IPv6:
2a12:a800:1::/48
Signature Algorithm: sha256WithRSAEncryption
b3:71:44:dd:d7:d7:53:ae:e9:a4:b4:d4:68:b4:a8:01:b9:57:
06:68:85:61:37:c8:9f:40:e8:d4:c4:92:cb:f7:eb:98:07:83:
b6:15:b8:52:b7:75:ac:0c:79:55:18:03:7f:ce:fc:56:fb:45:
99:26:94:46:f8:44:88:5f:c0:b1:26:ce:9a:88:2f:9b:0d:32:
26:c4:ce:03:0b:6b:0a:ff:82:b9:0b:39:5f:82:5b:e8:07:44:
4c:18:e5:c5:17:7e:97:e5:a1:7f:46:66:b2:7a:5a:07:31:67:
df:86:9b:78:16:43:32:06:f5:75:45:78:0b:cf:d4:b0:fd:f0:
a4:2b:3e:a5:68:cf:43:ea:a3:16:36:e3:0f:f4:3b:f8:f2:b0:
d6:5b:51:54:cf:cc:e2:91:55:90:23:16:30:c5:19:fa:4c:94:
b7:c3:2e:9e:fd:68:09:fa:db:21:a8:af:ad:d0:50:22:51:ec:
fb:ff:a5:5d:0f:d1:10:f3:59:2c:14:aa:42:63:5a:18:15:19:
43:40:89:c4:73:f6:95:34:1d:81:3b:00:ed:77:8d:8c:24:c6:
61:2e:a1:5b:d4:73:02:7f:fa:e1:3c:13:97:63:11:86:d6:61:
93:0c:1b:4e:0a:f3:27:df:d3:d0:3a:79:03:69:13:b0:62:f3:
ed:de:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:51 2025 by rpki-client