Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa
File: 1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa (raw, json)
Hash identifier: LmWlQzcgikgQeSr2EvN/FytTaYSjoQdRmrdKGtmELxE=
Subject key identifier: F8:BB:7D:34:B0:AC:3B:ED:0E:E4:38:FE:BF:65:12:F6:39:B1:5C:84
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 01956ADCF4C40826F88EB75F37C653CEE236
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa
Signing time: Thu 06 Mar 2025 09:50:20 +0000
ROA not before: Thu 06 Mar 2025 09:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202709
IP address blocks: 185.142.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:dc:f4:c4:08:26:f8:8e:b7:5f:37:c6:53:ce:e2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Mar 6 09:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8bb7d34b0ac3bed0ee438febf6512f639b15c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:f9:56:c0:56:0f:60:93:0f:93:f1:64:5c:
9f:a5:c9:ae:1a:df:8b:5a:76:90:78:49:a9:8f:eb:
23:66:31:fa:0d:5f:c5:f8:2b:19:f2:66:84:57:70:
87:b2:50:b0:75:0c:57:19:ce:92:1f:29:24:c9:88:
42:53:4f:9c:c3:d6:03:0d:81:50:7f:03:8e:3d:39:
74:78:63:9d:86:cd:9e:1e:e7:af:e3:11:36:ed:4a:
55:fe:5b:46:58:d1:40:2e:7f:99:79:06:5a:b8:12:
4b:1a:32:02:4f:06:44:a4:4a:48:e2:8b:61:11:e7:
3a:d2:7f:2f:a2:d1:cb:b0:54:b0:4e:14:6b:eb:d3:
7d:69:27:be:39:a5:62:90:2d:81:de:31:de:09:8b:
82:39:2d:61:56:ca:9e:8a:8e:07:c2:2b:09:68:92:
65:ab:2e:33:d5:30:4c:13:bd:3d:94:a0:0c:e8:29:
7b:d6:15:ed:45:ae:16:42:65:b2:78:f1:94:d9:64:
8a:1d:32:0a:58:51:ab:67:e4:34:6c:1d:2c:31:ec:
71:33:7a:ba:86:82:3b:b6:08:46:f6:e2:61:e0:9e:
68:ba:b4:d8:dd:38:ca:ea:ce:48:13:ef:c7:39:41:
5b:9e:a8:39:fb:9a:fa:7c:80:76:12:b6:a0:7c:84:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:7D:34:B0:AC:3B:ED:0E:E4:38:FE:BF:65:12:F6:39:B1:5C:84
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.20.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8f:49:ce:d5:90:31:f3:13:d1:11:6a:54:1a:5a:08:91:2c:
c5:07:0b:4e:72:0f:bd:2b:81:7a:e4:34:31:84:f2:7d:b4:fd:
c7:48:95:b1:11:52:f9:f4:a6:f3:dc:a3:c2:94:7b:09:f6:8b:
04:a1:5b:9a:0f:dd:2e:ef:f2:f1:27:a2:13:6f:bd:ff:c8:82:
00:66:aa:62:fc:e5:2e:3c:c3:42:87:8f:56:0b:05:03:9d:bf:
f3:c1:87:e7:a6:fc:11:52:7c:76:05:7a:75:e2:62:da:2b:6b:
48:66:a6:d0:ce:71:56:49:d4:8e:f6:28:ba:1d:93:a4:1f:00:
79:74:d5:df:fa:38:10:47:49:a5:a3:63:1c:38:24:52:cc:1d:
9f:41:2e:d3:35:12:e1:63:99:75:ef:f1:a3:5b:b2:fe:0b:a6:
0f:be:72:31:fb:84:73:e1:b7:64:e2:5f:7b:55:33:d8:c9:bf:
e7:6b:af:7f:c0:bd:9e:c2:1e:76:b0:87:04:a2:b8:fb:79:1b:
5b:b4:8f:f1:09:3f:d4:f4:b3:bd:2f:9c:5b:88:eb:86:33:b8:
26:fe:29:3d:17:6b:1e:7a:a7:ba:8f:4a:78:96:52:58:66:9a:
88:ef:10:5e:de:32:a6:69:45:9a:db:33:4a:78:e3:e9:ab:ef:
ba:ad:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:01:03 2025 by rpki-client