Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/lvckIph_fXtXurl5ym_WZRsaXmo.roa
File: lvckIph_fXtXurl5ym_WZRsaXmo.roa (raw, json)
Hash identifier: 5C1YRHd0ILljxfVn9Q8Mwd3r0vdxXZvngPftxEnCVwI=
Subject key identifier: 96:F7:24:22:98:7F:7D:7B:57:BA:B9:79:CA:6F:D6:65:1B:1A:5E:6A
Certificate issuer: /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial: 01941F8C2CC4C2B903AFD2F5F3F97F91B79D
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/lvckIph_fXtXurl5ym_WZRsaXmo.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 91.228.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2c:c4:c2:b9:03:af:d2:f5:f3:f9:7f:91:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f72422987f7d7b57bab979ca6fd6651b1a5e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:be:67:01:a7:de:5c:b9:b9:bf:55:00:23:
52:a4:95:57:36:3e:4f:f7:4f:b2:de:68:bb:28:34:
dc:53:c6:26:14:39:f6:9f:dd:01:f8:63:e4:07:b3:
96:df:bb:9c:f2:72:12:a9:09:10:33:e1:d8:28:bf:
9d:25:b4:ce:4e:75:80:17:ec:d0:a9:34:c9:ac:63:
37:c2:1a:cf:f2:31:cf:40:b5:df:ff:49:50:de:5d:
1f:eb:b0:8f:6d:14:3c:fe:ee:9e:c8:07:0b:96:2d:
4f:28:c2:d3:41:e2:c8:e0:38:27:cd:e2:04:6c:bc:
58:1f:c4:57:70:4f:ea:f6:4d:d4:16:97:74:88:5a:
cc:60:3c:9f:c2:40:79:20:54:7f:42:d5:5c:3b:f0:
6a:02:51:42:f4:78:0c:18:f0:70:5e:11:51:91:01:
25:8e:e8:1f:f9:ed:98:7f:65:09:0a:ea:f6:c6:c7:
f2:aa:5e:30:89:f9:4c:1c:cb:f3:53:70:98:a0:ab:
a9:c0:b8:d4:e5:a2:9a:63:db:93:b7:a2:ec:0c:17:
73:f5:d5:83:03:de:3a:f0:d2:94:8f:3f:ae:f5:dd:
85:a3:8f:2e:1f:a3:3f:f3:3d:5c:7c:ec:02:3d:c0:
8b:23:27:72:88:b1:fb:9f:f1:87:90:29:4a:a9:27:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:24:22:98:7F:7D:7B:57:BA:B9:79:CA:6F:D6:65:1B:1A:5E:6A
X509v3 Authority Key Identifier:
keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/lvckIph_fXtXurl5ym_WZRsaXmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.214.0/24
Signature Algorithm: sha256WithRSAEncryption
29:87:0d:ca:c3:ef:a5:ab:8a:8b:17:7c:4d:7b:cf:d5:23:b5:
0b:06:50:b8:9d:6c:e7:d1:34:bb:47:0a:b6:81:cc:ce:92:51:
b8:8e:c8:eb:da:25:d2:0c:ba:1a:d5:1d:4f:29:af:a3:9d:7c:
a4:3d:cc:a8:c0:fa:1b:31:65:49:24:d6:49:59:2d:73:bd:3c:
bb:90:2a:0c:bd:ee:5a:8f:17:db:58:66:68:e3:e0:d1:08:08:
52:10:60:9a:16:26:ef:8b:a1:42:16:be:9c:5d:98:6e:7a:41:
0c:e5:1f:90:09:f7:ef:9e:50:04:50:c8:db:1e:e8:cd:79:89:
01:29:99:1e:1c:ba:15:b9:f2:7c:7d:99:cd:16:82:5d:d0:b7:
2d:6e:e1:1c:e4:a2:2b:97:4e:8c:b0:23:da:19:26:77:ff:05:
51:07:eb:8c:d5:ae:fe:2b:d5:53:13:f7:b6:9f:c0:f0:a6:a7:
1b:ce:1f:1f:79:6a:53:6a:ba:87:fa:21:bf:73:10:9a:01:b5:
73:d1:97:95:6e:a7:4b:1d:6e:a5:ac:31:fb:c7:40:8a:ea:f5:
1b:0d:cc:2f:36:84:d8:15:bd:08:5b:7e:cc:78:23:42:11:0c:
c0:23:24:39:26:e8:f8:99:44:f8:10:04:28:13:62:a2:37:68:
56:36:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:27 2025 by rpki-client