Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Lb8djNXoSZhwFIwr5d8pY_pziKs.roa
File: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (raw, json)
Hash identifier: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=
Subject key identifier: 2D:BF:1D:8C:D5:E8:49:98:70:14:8C:2B:E5:DF:29:63:FA:73:88:AB
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BB21FE51DB9E08EE8AFA1B54C27E9
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Lb8djNXoSZhwFIwr5d8pY_pziKs.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400175
IP address blocks: 45.141.15.0/24 maxlen: 24
93.177.108.0/24 maxlen: 24
93.177.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b2:1f:e5:1d:b9:e0:8e:e8:af:a1:b5:4c:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dbf1d8cd5e8499870148c2be5df2963fa7388ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:96:1e:f2:36:e4:de:01:77:59:f3:b5:01:
44:fd:e8:bc:6d:d0:96:85:f2:c5:94:5b:1b:bc:ee:
a0:91:6d:31:df:7f:96:a1:61:e7:a9:46:af:72:66:
c6:2b:04:ea:88:a7:d2:cc:25:48:8d:dc:80:40:fe:
77:5c:e8:85:e3:70:99:2a:d9:9d:4f:68:8e:58:e0:
83:ab:06:f0:84:2d:4e:48:4d:c3:82:18:02:be:1d:
eb:b7:fb:d2:59:77:77:0b:c7:a1:19:7e:1e:47:a4:
ad:eb:33:a5:ab:04:a0:8e:9d:59:b3:1c:83:34:bf:
82:3b:b5:b4:7e:b5:3f:1f:7f:94:c1:b4:6e:f4:7d:
05:0c:11:dc:70:1d:c0:6c:bc:5f:95:bc:96:14:01:
d4:42:cc:dc:8f:5b:9f:6c:95:d7:85:d0:84:f8:00:
4f:fc:e5:6c:87:69:28:98:f1:3f:f1:07:a7:56:b6:
bd:bf:64:89:c3:0e:32:5b:a7:51:2b:db:02:d4:5b:
c3:5d:91:fe:5b:df:08:10:e7:13:6d:e6:3e:ee:ed:
2e:d7:c3:fb:eb:4b:47:b1:78:d0:cb:d6:6c:14:6e:
05:95:e3:0a:02:eb:2b:7c:51:6c:f1:7f:27:d8:ca:
85:b2:8c:8d:6b:34:1c:21:4d:18:11:75:60:45:b6:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:1D:8C:D5:E8:49:98:70:14:8C:2B:E5:DF:29:63:FA:73:88:AB
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Lb8djNXoSZhwFIwr5d8pY_pziKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.15.0/24
93.177.108.0/23
Signature Algorithm: sha256WithRSAEncryption
45:c6:80:b8:a1:ec:aa:a4:0c:ec:5e:b7:c2:7c:c9:bd:18:b0:
6f:4e:1f:60:88:c6:c3:fe:c6:da:c2:83:b5:c6:ba:f6:5f:3b:
ec:ec:39:ee:70:4c:d5:6c:2b:af:ca:61:16:1e:e6:6f:ec:52:
3b:43:b2:3e:74:a9:cd:64:b0:f3:39:fe:8b:a4:56:5b:cf:b5:
2c:bb:f8:a8:6f:f4:23:e8:3e:95:1c:28:d8:fb:32:69:7a:65:
ea:fd:d8:1d:39:58:e3:2b:28:7c:99:45:0f:6a:13:7f:0c:3f:
3e:26:dd:cc:25:b8:e6:7f:d4:9a:31:22:30:dc:07:d6:a2:2d:
fb:10:a3:ff:2e:6a:eb:2d:73:cd:e4:87:e0:98:36:fc:e7:68:
7a:5f:33:a6:07:b2:fe:26:54:97:f9:78:e7:f3:5f:18:3a:31:
96:dc:1c:35:da:c6:41:fb:ca:aa:51:b2:c6:18:e4:34:3c:cc:
9e:73:46:20:3f:1b:6d:72:2b:83:f8:fd:ce:ea:7f:93:ec:3d:
a1:fc:a7:d1:6c:f4:8a:b5:67:7f:8b:9b:56:fd:e0:d0:85:cb:
3e:2b:e9:d3:96:8d:0a:3f:80:58:cf:ae:c2:55:91:1a:df:3a:
cb:9d:c0:79:81:e5:fb:b2:e9:80:0d:00:58:b7:d9:bb:6f:d2:
74:ac:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:33 2025 by rpki-client