Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lSQaQo1pT929AIuNEO-jfbBj_uI.roa
File: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (raw, json)
Hash identifier: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=
Subject key identifier: 95:24:1A:42:8D:69:4F:DD:BD:00:8B:8D:10:EF:A3:7D:B0:63:FE:E2
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0194274745F3FA930ADE5C94239782F383F3
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lSQaQo1pT929AIuNEO-jfbBj_uI.roa
Signing time: Thu 02 Jan 2025 13:49:29 +0000
ROA not before: Thu 02 Jan 2025 13:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 62.56.208.0/21 maxlen: 24
213.170.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:45:f3:fa:93:0a:de:5c:94:23:97:82:f3:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95241a428d694fddbd008b8d10efa37db063fee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:c8:6e:5c:d2:ab:fc:a1:e4:6a:40:9f:44:
76:36:71:ae:35:15:d3:b5:5c:e9:d0:05:7a:7a:0e:
ba:7c:4a:a0:c2:36:32:8f:85:ff:48:b3:33:a6:01:
e0:3b:97:4a:92:9e:53:74:f9:35:00:38:3c:a3:4b:
31:02:11:dd:29:54:47:7b:8f:31:c0:8d:08:d8:f4:
29:ee:0d:46:e2:34:f3:64:9e:32:a8:de:b3:ba:1a:
36:e9:f8:56:b9:9a:f0:ed:92:83:46:01:64:74:ee:
5c:5e:2b:0d:82:ad:76:36:38:d5:ce:5d:7d:cb:33:
ed:83:00:32:5c:84:e4:77:8c:7b:b2:ba:ad:58:d4:
c7:be:ff:07:f1:34:cb:02:b0:a4:d3:4d:76:39:a5:
0f:fa:53:8b:d6:6c:b0:95:27:f1:df:c6:c2:0b:cb:
6f:cb:d4:db:61:ce:c7:3b:e0:55:a1:83:55:dc:e6:
ee:4a:6e:b8:09:2a:f6:87:de:97:0a:e9:59:52:09:
f3:b9:d4:7d:d1:7d:fa:80:57:32:7d:df:67:49:20:
06:9e:05:42:f2:e9:ac:e1:d6:df:33:8d:86:b5:9d:
b7:6d:94:3b:2f:78:17:b0:ff:ea:43:52:b8:a3:73:
9c:e3:62:0c:36:64:ac:d5:a6:62:bc:ee:7c:fb:f5:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:24:1A:42:8D:69:4F:DD:BD:00:8B:8D:10:EF:A3:7D:B0:63:FE:E2
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lSQaQo1pT929AIuNEO-jfbBj_uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.208.0/21
213.170.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6c:73:41:22:29:b4:36:0d:f8:86:c5:f9:1e:e0:f9:2e:36:
e8:e8:7d:2e:1b:26:62:a0:5e:9b:23:c3:3d:78:28:7c:bd:1f:
cd:b7:c2:60:ec:bb:9f:2d:83:e2:a3:08:87:5b:30:5a:7e:4e:
06:ff:7c:27:53:ae:94:4b:23:93:fd:38:98:44:8e:44:5b:60:
82:99:16:0d:35:c0:da:9f:aa:9e:4c:0f:7e:77:f8:a3:7e:0c:
66:b0:22:cf:fd:7c:ad:b6:d5:2d:b6:e7:ce:f6:dc:f3:8a:60:
49:10:65:ec:fb:3b:8f:8c:b0:9f:ab:1c:b5:42:4d:31:4b:d3:
51:05:ff:09:17:4e:1f:fa:33:41:92:95:6c:c9:9a:1e:9d:76:
37:e3:2b:8b:6e:fe:a3:c3:15:49:26:91:df:1d:38:ab:25:24:
85:45:bc:14:5e:fc:51:1f:24:de:03:b0:d8:13:2f:2b:a7:09:
84:b6:cb:11:ea:2d:d9:38:cd:8d:38:8a:e0:3c:86:80:ec:74:
80:7f:39:c9:90:dd:83:08:9d:cf:aa:5e:e3:93:8a:95:51:bf:
3d:26:e0:5f:90:ca:56:95:ec:4a:b6:6a:4d:2b:61:e9:4f:7a:
a2:d9:e7:bf:39:14:1d:93:6a:dd:92:0b:29:d3:fb:5e:3a:b4:
93:d2:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:00 2025 by rpki-client