Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/LUnk__H52Ka1UZQ74SFwt2XYOA0.roa
File: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (raw, json)
Hash identifier: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=
Subject key identifier: 2D:49:E4:FF:F1:F9:D8:A6:B5:51:94:3B:E1:21:70:B7:65:D8:38:0D
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01941F8C075CD613B70BB436DDA243B8573D
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/LUnk__H52Ka1UZQ74SFwt2XYOA0.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59940
IP address blocks: 103.112.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:07:5c:d6:13:b7:0b:b4:36:dd:a2:43:b8:57:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d49e4fff1f9d8a6b551943be12170b765d8380d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:fd:55:dd:2c:d1:83:06:78:47:c7:5b:fe:
af:7a:37:fc:be:a1:b7:92:f9:bf:fe:78:18:b7:bf:
89:76:2e:7c:fb:4b:55:af:a3:f4:a5:46:8d:55:73:
00:e6:27:42:f9:04:79:46:94:ce:a0:fa:a9:d6:3d:
44:3e:47:fa:a0:d9:cb:0f:b7:d7:1b:e2:66:f6:7a:
e9:96:df:7f:67:89:97:04:68:3a:a7:70:4a:91:45:
49:98:b3:a1:d1:52:e5:f2:6c:e5:ed:17:60:67:30:
89:64:4b:c7:cc:c9:7e:00:c0:58:48:0d:98:6f:2f:
a9:9e:ee:26:42:0a:a3:b3:d2:eb:17:63:7d:a6:50:
8b:60:94:e9:71:37:96:e5:5c:3b:30:ff:9f:04:50:
3e:e7:bc:bb:5e:20:a5:11:b9:39:10:21:24:71:b4:
ff:b3:6f:d5:5e:fb:ac:44:ca:8f:0b:64:17:42:fc:
04:64:81:3c:e5:02:af:28:4f:ca:96:88:b5:cd:4b:
23:c9:25:c8:de:02:a6:67:9a:bd:1e:c3:aa:13:3f:
a0:da:76:3d:6f:89:65:4e:51:85:f5:80:f4:8c:4e:
71:d7:39:cb:bb:ed:70:07:83:4a:57:95:39:f3:5b:
86:93:d5:80:05:25:a0:bd:bf:f9:a0:86:3d:4c:74:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:E4:FF:F1:F9:D8:A6:B5:51:94:3B:E1:21:70:B7:65:D8:38:0D
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/LUnk__H52Ka1UZQ74SFwt2XYOA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.170.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ef:63:e6:04:76:47:03:b8:f1:3d:6a:f2:67:af:34:7f:7f:
92:16:09:b4:c1:44:65:6f:78:d4:15:bd:8f:62:d1:5e:52:77:
13:56:59:ee:9f:6e:7c:0d:50:97:7d:fc:ed:1e:0f:d1:eb:d2:
5b:36:08:70:2c:67:a7:c4:bf:eb:81:e6:70:84:9d:e9:23:52:
f6:6c:4c:09:44:f5:76:25:19:f2:38:d2:0c:16:ef:40:b7:32:
7d:3a:d2:e5:a7:d0:4b:5a:94:1a:fe:75:3e:f0:87:f5:c3:98:
b9:1d:00:95:bf:e2:16:d7:08:f8:ba:0b:04:42:b7:68:18:a3:
92:47:a1:da:f6:0e:40:27:f0:42:e3:91:a5:e3:0a:c9:37:bd:
80:92:45:ed:74:1f:ae:69:f9:25:3c:3f:e1:06:e3:ed:da:d8:
01:f6:e2:73:f3:d9:c2:71:51:5c:3f:97:71:3b:fe:78:86:cf:
60:87:75:ab:eb:05:87:76:5c:c9:7b:5d:5c:9c:42:8e:ec:78:
a9:8d:b7:49:e4:c2:43:b3:9f:c1:05:36:33:c2:df:cd:59:a4:
8b:36:7d:41:63:49:d9:80:51:e1:49:34:34:eb:4c:7b:fe:4b:
22:f9:00:fd:77:f4:b9:15:62:e5:57:79:56:d0:76:e7:61:e6:
38:e4:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:21:00 2025 by rpki-client