Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa
File: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (raw, json)
Hash identifier: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=
Subject key identifier: 96:C9:D7:1B:54:19:41:C1:3C:30:EE:D2:CB:A4:64:D3:EF:95:1D:5A
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 019424B27C7C63771078116BDB97D2E103D1
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51415
IP address blocks: 185.195.204.0/23 maxlen: 23
185.195.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7c:7c:63:77:10:78:11:6b:db:97:d2:e1:03:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96c9d71b541941c13c30eed2cba464d3ef951d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:28:e6:bd:b3:7a:90:a6:f1:2b:b8:3b:16:
e8:be:4a:ae:91:8b:1a:d9:ae:11:3d:04:de:42:2a:
f3:0c:37:a0:62:41:9d:ff:32:fc:03:2b:7a:47:04:
fe:03:7d:7d:4e:0e:78:39:a3:98:9f:66:15:fa:44:
33:41:55:8e:ac:b8:7a:e7:3e:e0:c2:5c:f7:4b:8e:
16:8b:0c:6a:39:0e:1e:26:1e:8a:6c:fc:71:54:21:
3e:5e:1c:15:ec:48:0b:c1:52:e1:b7:c1:d0:87:0a:
50:14:c9:c7:28:a3:4b:bd:b5:81:93:e8:06:e0:da:
5d:bc:df:f7:9b:aa:59:86:c0:62:98:53:dc:be:23:
fb:61:99:1b:68:d7:af:b6:2a:aa:65:9a:8f:90:1b:
97:13:e0:71:39:56:ec:0c:cd:d9:27:7e:c4:85:44:
23:a8:60:fc:2c:d7:f5:92:02:bf:4b:c5:ed:da:ba:
84:06:56:1d:f8:64:19:a0:59:55:af:aa:ba:cd:38:
06:09:26:f6:b5:7f:3c:97:1f:82:4a:43:be:eb:c4:
0f:31:dc:06:fb:a2:6e:08:30:26:df:bf:93:ac:2d:
74:04:a3:58:34:0d:6e:26:5b:8c:28:b5:11:d9:a6:
21:86:b8:b8:2e:6f:3d:16:94:c1:1a:5e:86:b0:8b:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C9:D7:1B:54:19:41:C1:3C:30:EE:D2:CB:A4:64:D3:EF:95:1D:5A
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.204.0/22
Signature Algorithm: sha256WithRSAEncryption
83:f9:49:ea:14:48:ec:19:57:1f:fc:d5:c8:c3:92:98:4e:0c:
50:26:21:62:b5:6b:1d:cf:a3:01:99:c1:4e:cf:98:32:91:ce:
ce:13:e2:9e:f1:a1:b9:fb:19:12:e4:fb:5c:ed:3d:dd:50:bd:
b8:87:ce:bc:d5:20:15:12:97:ab:b8:44:c9:5d:0c:6a:b0:11:
f0:a4:11:21:83:70:f0:42:ab:4f:a1:33:d6:ac:d8:ec:99:17:
6f:3a:f5:1b:10:d0:22:e6:2e:73:01:09:3c:0d:28:15:92:60:
aa:68:4f:f0:9e:3f:25:57:e4:3b:15:2e:70:08:ac:36:76:e6:
d4:fb:8b:47:32:3d:57:71:90:3a:a7:89:e2:96:46:9b:0c:b0:
9d:43:25:61:0f:fc:b4:b4:84:5e:80:21:a1:63:dc:61:ec:6a:
0e:4e:1b:7b:b7:b5:f5:46:d3:cc:29:b5:3e:24:4e:c3:0a:f2:
e5:a3:3c:46:e9:f8:65:a1:01:6b:4a:f7:d6:85:a9:83:2f:79:
87:53:8a:dd:4e:53:d7:f6:ac:b8:65:e1:8e:65:69:5a:a0:2e:
1f:b9:60:88:47:7a:2d:79:f9:6f:5b:e0:1e:95:a1:07:ff:0d:
c8:fd:3d:59:85:cf:54:1b:76:cf:09:4c:0d:f0:3d:c7:da:e7:
6b:33:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:31 2025 by rpki-client