Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LMs_b6ZuitKtkGsOpWNjQFbwiE4.roa
File: LMs_b6ZuitKtkGsOpWNjQFbwiE4.roa (raw, json)
Hash identifier: zBJ6FTz7qKGFdlEETXC7i9KmZREu2raQ61x2fvbnwQ0=
Subject key identifier: 2C:CB:3F:6F:A6:6E:8A:D2:AD:90:6B:0E:A5:63:63:40:56:F0:88:4E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826ABD1AC8DAC7799E38DE6864DCDB9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LMs_b6ZuitKtkGsOpWNjQFbwiE4.roa
Signing time: Thu 02 Jan 2025 17:53:30 +0000
ROA not before: Thu 02 Jan 2025 17:53:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 88.216.57.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:ab:d1:ac:8d:ac:77:99:e3:8d:e6:86:4d:cd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ccb3f6fa66e8ad2ad906b0ea563634056f0884e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:2f:f2:80:e2:c4:15:0e:4c:0f:21:dc:14:
8d:77:39:43:b7:f3:e6:d6:03:f3:de:66:0c:04:92:
01:72:2d:df:70:f6:9d:c1:9f:9f:d8:a2:1d:dc:c2:
8a:33:b2:ae:bd:11:a9:ed:8e:b3:8f:1d:fa:0a:16:
a5:d8:b6:af:6d:43:d4:a7:3a:f2:0f:60:48:3d:bf:
c3:90:9a:4b:e3:9f:55:19:71:2d:c3:84:5a:3a:f6:
39:71:74:9f:0e:8c:05:63:56:7a:74:60:68:57:f6:
ab:2d:a0:f0:ab:0a:4e:5a:e8:17:80:ea:5a:56:b0:
dd:cf:b7:82:d6:53:5c:12:96:0a:ca:2a:13:8f:dc:
3b:13:d8:6a:1b:1d:b6:8c:a3:e2:67:3e:c5:08:17:
a3:ab:40:1f:a7:05:f2:97:b4:b8:39:18:52:c4:53:
96:86:3e:36:7a:36:2d:17:53:5e:4e:69:2d:96:95:
52:f4:57:e6:1a:97:7c:eb:77:be:63:34:4c:ff:63:
7f:9d:bc:1a:79:66:fd:d8:af:2c:64:73:81:f1:41:
27:8c:13:0e:2e:0c:5a:96:a6:d9:e5:4f:0c:6c:91:
9f:0c:60:cb:d1:ce:7b:87:28:32:64:82:87:2e:88:
17:b8:91:44:5a:bd:9e:a6:23:bc:39:66:8c:bc:dd:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:3F:6F:A6:6E:8A:D2:AD:90:6B:0E:A5:63:63:40:56:F0:88:4E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LMs_b6ZuitKtkGsOpWNjQFbwiE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.57.0/24
88.216.181.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
85:4a:56:56:c7:9e:75:02:9d:b5:be:9f:87:67:78:47:03:d8:
2f:32:bf:6f:d4:11:c4:25:9c:57:ac:0b:ee:a2:e7:71:2f:74:
a9:b3:f5:a5:ce:56:29:89:a5:6d:30:c0:67:59:07:a0:be:2e:
40:d9:66:9b:28:b0:da:b0:48:e6:7f:48:2b:0a:e2:52:67:0e:
57:8a:16:62:d7:8f:5d:b0:d6:cd:59:72:0d:98:d1:f1:6f:a7:
a4:e4:29:f0:4f:44:ca:77:8c:39:a7:7a:13:99:c1:3e:33:cb:
9b:c4:4d:d9:42:3e:bc:7e:99:cf:6b:b5:c1:cc:fd:b3:58:12:
36:b9:ea:c3:7d:7c:66:ed:51:c0:b3:66:57:6e:6c:83:74:a6:
e4:1f:d3:85:87:6f:0a:fc:e0:81:da:fb:28:66:91:3f:3a:39:
96:08:b4:88:c9:8d:d5:76:55:aa:b4:ef:27:d2:4f:02:28:9b:
4c:66:93:7f:2f:33:a0:55:5a:6c:a3:59:ef:4e:c5:e9:27:11:
75:24:b6:ea:8c:b8:11:2e:7f:2d:ea:f1:13:b8:1d:0f:9d:c9:
05:69:80:45:ad:df:a4:e2:02:2c:b8:db:6a:30:74:c4:74:8c:
8e:9d:77:d2:bf:dd:90:b9:3b:51:07:df:6c:c3:f9:1e:e2:81:
cc:d7:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:07 2025 by rpki-client