Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LTExoOaNYs9rqi34H3jxzEln9rE.roa
File: LTExoOaNYs9rqi34H3jxzEln9rE.roa (raw, json)
Hash identifier: Tx9hsDaDXSjTWEDTPQK3kNioaWNMmvnONfJIhySrHHU=
Subject key identifier: 2D:31:31:A0:E6:8D:62:CF:6B:AA:2D:F8:1F:78:F1:CC:49:67:F6:B1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B4359271BBB6E17B8B2E6F19BB0D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LTExoOaNYs9rqi34H3jxzEln9rE.roa
Signing time: Thu 02 Jan 2025 17:53:32 +0000
ROA not before: Thu 02 Jan 2025 17:53:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51358
IP address blocks: 84.32.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b4:35:92:71:bb:b6:e1:7b:8b:2e:6f:19:bb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d3131a0e68d62cf6baa2df81f78f1cc4967f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:17:50:f4:cc:c6:8c:ec:3f:8f:9f:07:3d:
ae:3a:cc:9d:9e:57:1d:60:a0:df:96:d6:5b:44:ff:
4c:b8:2f:81:79:0e:e5:71:5c:87:f8:c2:e6:04:1d:
5c:7c:66:fc:44:74:ec:dd:aa:ab:71:db:c5:68:8a:
f3:fa:46:f7:f0:6f:40:74:e9:ea:68:19:40:e8:96:
d1:93:25:d9:41:22:25:1d:f4:00:aa:ac:fd:2b:e8:
7c:eb:1e:5f:44:70:24:89:ab:5b:a7:40:b5:46:b2:
8c:8b:70:9d:4e:49:b9:00:c8:c2:5a:8a:8b:95:f4:
5c:ce:93:c1:c2:02:57:50:1a:ad:3d:cf:91:9b:b2:
78:1d:b4:be:0e:75:72:5c:67:71:fe:1d:be:ad:25:
e9:9d:fe:24:c6:3b:5e:11:b8:2d:ee:0b:78:1f:06:
99:73:2a:12:c5:71:00:28:c3:03:4f:7c:68:36:48:
2a:ad:e0:e1:35:bd:01:4f:4b:fc:99:57:e7:f2:cc:
19:9f:79:a8:01:59:c7:79:32:08:a5:db:fd:aa:7f:
a0:88:de:d3:5f:84:c9:53:ee:73:d2:de:31:f2:06:
19:cc:54:3b:15:00:7b:f2:a6:d4:22:b0:8a:f4:db:
8d:68:af:51:ff:5e:9d:77:35:66:af:16:d0:5d:14:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:31:31:A0:E6:8D:62:CF:6B:AA:2D:F8:1F:78:F1:CC:49:67:F6:B1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LTExoOaNYs9rqi34H3jxzEln9rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.33.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ba:76:8c:96:d8:38:e9:0a:98:52:0d:42:b9:58:43:9c:29:
70:6f:e5:e6:80:25:2c:2b:bf:84:ab:03:de:10:4f:f8:b7:02:
88:f2:c0:e1:66:62:07:58:42:e0:35:be:26:ef:95:52:e7:e4:
f0:4d:6b:65:77:be:49:81:cd:97:bc:75:43:7e:78:ab:55:b7:
28:8e:17:a6:61:bc:16:f0:3a:80:4b:7c:9d:e7:9e:06:35:a6:
90:bb:5b:8b:bd:74:d3:1d:d4:db:89:22:02:8b:6c:29:7f:e8:
ce:df:da:43:5e:5c:96:f5:3b:bf:c0:fb:97:6c:bf:7f:93:8d:
12:81:76:fb:b5:07:61:cb:5a:8b:3b:6e:51:35:47:dc:f2:9e:
4b:ed:14:39:3d:cc:49:cc:38:5e:76:48:fe:85:2d:a3:e9:d4:
66:02:56:5a:e0:02:33:47:52:a3:cc:10:2b:09:e3:5e:1a:17:
d9:63:5c:96:41:fb:cd:32:e3:92:ca:2e:02:cc:61:72:72:b9:
b1:07:f9:01:d1:d0:e9:9a:a4:53:9d:bf:89:20:4e:02:c4:3a:
8e:f6:be:39:65:9a:0e:47:d3:cb:42:93:be:02:c9:c4:b7:63:
56:f8:02:cb:aa:69:57:c7:b4:1c:bb:59:87:21:d3:07:aa:3f:
48:5d:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:54 2025 by rpki-client