Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/lihzuQoSb7FSiRKzRwb1us4H1SM.roa
File: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (raw, json)
Hash identifier: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=
Subject key identifier: 96:28:73:B9:0A:12:6F:B1:52:89:12:B3:47:06:F5:BA:CE:07:D5:23
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019422201659B86B072AB2F9F7C054E029C1
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/lihzuQoSb7FSiRKzRwb1us4H1SM.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34994
IP address blocks: 82.193.94.0/24 maxlen: 32
82.193.95.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:16:59:b8:6b:07:2a:b2:f9:f7:c0:54:e0:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962873b90a126fb1528912b34706f5bace07d523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:76:9e:e7:d3:b3:a2:9c:3d:ab:67:95:d7:
48:10:ae:83:70:29:bb:12:6e:af:0f:d7:3b:ad:00:
b3:e8:99:e3:8e:dd:54:4e:c1:dd:0c:a8:6f:53:1e:
10:e3:ad:d6:e6:c7:ee:92:9e:23:3d:50:d9:8c:51:
67:b6:a2:14:d2:8c:a3:78:d0:32:a0:d0:4a:4b:af:
21:3b:76:9b:4d:fd:48:57:63:c9:7b:f6:92:0b:f2:
c2:55:0d:3b:da:ce:3e:9f:5c:21:ea:02:98:96:92:
80:f7:c9:2e:4f:a6:03:d3:7c:2f:2e:2b:ec:10:46:
be:1f:34:31:23:b2:33:36:bc:e8:f5:7a:34:37:e2:
96:1b:44:23:81:14:9b:8b:0b:dc:b6:c9:20:a6:42:
75:65:73:bc:51:95:55:3d:f0:28:a6:9b:a9:28:a2:
47:dc:62:33:ee:b2:74:e6:96:c3:27:7d:cd:03:1c:
1d:10:6d:f3:cf:a9:66:a6:d0:a1:75:0d:9b:f7:f5:
29:bb:03:b8:0e:3c:60:f9:c7:15:71:b5:8d:a9:df:
e4:6c:73:e3:c4:cb:be:4b:f0:e6:fc:c8:6e:76:3a:
e2:23:d9:3a:cc:e7:95:8d:b5:22:43:a9:d4:66:41:
18:d8:f4:fb:82:14:bc:9c:91:0f:2b:85:56:c6:f7:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:73:B9:0A:12:6F:B1:52:89:12:B3:47:06:F5:BA:CE:07:D5:23
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/lihzuQoSb7FSiRKzRwb1us4H1SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.94.0/23
Signature Algorithm: sha256WithRSAEncryption
37:2e:39:9a:5c:a4:55:dc:dd:99:3a:7e:ce:e2:c7:3b:22:c6:
31:49:f0:1c:81:cd:20:a1:6f:49:f0:fd:26:22:ea:27:fa:ce:
d3:fd:84:d5:8b:26:3f:59:0c:d9:62:af:20:de:1e:b9:c6:86:
79:d3:1f:bf:51:82:00:39:27:b7:84:d8:9a:2c:e7:3e:93:18:
9d:8e:ff:88:37:a8:5b:50:53:4d:4f:91:eb:f2:21:b7:3b:9a:
89:70:1a:6e:14:a6:f8:c7:2e:7d:22:3f:af:9b:c8:98:68:84:
11:64:e3:63:57:66:2d:4a:82:0a:dc:fa:26:d5:a3:4d:cd:55:
22:4f:3e:08:37:af:fb:a8:93:f2:ba:49:a9:fd:85:99:60:84:
30:ed:2e:95:aa:30:bb:0e:c9:59:75:01:36:e8:04:c2:e8:b5:
96:9b:d1:5f:50:37:8e:4b:00:bb:17:81:83:7b:21:e0:c2:f7:
91:84:1e:33:de:23:d3:15:d9:12:04:db:6f:1a:d8:37:6c:ae:
47:5c:ed:aa:0a:3b:f6:e9:84:b4:4e:cc:46:71:43:f8:46:3a:
02:23:15:6e:ce:c2:81:1e:25:18:b3:c0:9e:d4:80:93:43:2f:
01:70:78:64:25:9a:05:d5:c5:de:e8:9f:3d:fb:f0:a1:31:e0:
42:31:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:29 2025 by rpki-client