Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/LCLdln04vZQC1VrtG1fTPHEb70Q.roa
File: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (raw, json)
Hash identifier: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=
Subject key identifier: 2C:22:DD:96:7D:38:BD:94:02:D5:5A:ED:1B:57:D3:3C:71:1B:EF:44
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 01942747C4884888D898CC114730F4D01746
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/LCLdln04vZQC1VrtG1fTPHEb70Q.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 193.110.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c4:88:48:88:d8:98:cc:11:47:30:f4:d0:17:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c22dd967d38bd9402d55aed1b57d33c711bef44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:04:84:d0:3b:37:e1:cf:b5:5f:58:7f:db:
8c:92:78:7a:e5:11:cf:35:21:e6:ca:7d:e7:b7:4e:
d5:97:b8:0a:d6:ad:9d:1e:6f:87:92:bc:86:e3:49:
ab:6f:0c:ab:05:21:25:36:b2:e8:f4:d8:98:0a:63:
84:c1:92:41:42:77:34:8b:ef:80:59:ee:4d:02:5a:
89:8c:d0:10:1b:21:ed:7c:07:47:5a:2a:73:ee:82:
4d:f3:ae:66:ab:b6:5b:d1:13:df:ff:e3:41:71:be:
e4:3e:58:2b:d1:89:fd:63:d8:9d:30:af:6d:43:c7:
6f:a2:9b:2e:f9:7d:29:2f:dd:0a:30:72:da:92:a9:
6b:fb:ca:32:16:28:19:de:0d:f0:7f:04:3b:b4:a5:
ff:89:72:50:01:d9:64:6e:8a:7f:63:6e:63:7b:54:
ab:f7:77:6d:d1:59:65:5f:9b:b2:62:14:00:0e:0b:
7a:05:79:10:77:81:16:4d:f1:10:05:b9:5f:ef:86:
c5:bf:97:1f:2b:a2:5c:eb:02:83:15:35:bb:2d:05:
b2:c5:e8:1f:2b:e6:0d:56:08:53:b0:68:16:fe:19:
bb:df:04:e1:84:60:f1:7d:2d:f3:47:a6:be:6a:e4:
78:47:c0:13:e7:1d:18:20:52:88:6a:23:d2:1e:1a:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:DD:96:7D:38:BD:94:02:D5:5A:ED:1B:57:D3:3C:71:1B:EF:44
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/LCLdln04vZQC1VrtG1fTPHEb70Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.152.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e2:e2:31:3a:73:b5:a0:99:d5:67:03:af:af:ac:ec:f7:a6:
bb:12:b9:08:de:bc:89:8a:1f:08:df:10:55:e3:94:f3:bd:6d:
a5:e6:e1:e9:de:81:94:89:29:09:f6:98:46:ad:db:47:33:9c:
ab:e1:fe:e0:43:85:18:ad:42:ff:ef:b5:c6:9a:c9:f9:90:65:
f0:d8:2b:5d:05:6f:b6:9d:86:b3:72:e4:57:7a:b1:0c:61:b4:
76:ec:34:9e:8b:dd:ae:e1:f4:19:08:00:07:f1:ba:6b:eb:9a:
51:bd:b2:58:b5:d8:1a:5a:17:5d:20:cf:51:e1:e6:d8:dc:8c:
76:d8:98:8f:95:c1:8b:26:4b:df:a2:29:c1:a8:4e:89:44:2a:
27:43:c9:f3:6b:34:e6:af:dc:15:a3:72:51:49:53:22:89:0e:
0f:3d:f9:29:34:ef:cb:a8:5a:34:01:3f:63:41:88:35:8c:87:
4a:3d:56:79:a9:90:c8:d3:e7:09:10:a9:6c:31:49:1d:b7:fd:
77:eb:5d:3e:25:2e:32:b5:54:1e:ca:d6:3d:f4:81:3b:ba:39:
47:93:05:86:54:25:a8:97:b5:31:84:8a:ef:d8:59:a7:09:f5:
b1:a9:a8:13:19:dd:03:e8:9e:66:bc:df:77:78:c1:85:e6:90:
07:45:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:28 2025 by rpki-client