Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/lsGbzxHmmLCraaV9m6GpjO-iIBA.roa
File: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (raw, json)
Hash identifier: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=
Subject key identifier: 96:C1:9B:CF:11:E6:98:B0:AB:69:A5:7D:9B:A1:A9:8C:EF:A2:20:10
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 01942369BCE220E3A3087F806B3B3459130C
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/lsGbzxHmmLCraaV9m6GpjO-iIBA.roa
Signing time: Wed 01 Jan 2025 19:48:39 +0000
ROA not before: Wed 01 Jan 2025 19:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16019
IP address blocks: 46.183.64.0/21 maxlen: 21
2a0b:c180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:bc:e2:20:e3:a3:08:7f:80:6b:3b:34:59:13:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Jan 1 19:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96c19bcf11e698b0ab69a57d9ba1a98cefa22010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:c8:06:a2:d0:ac:e3:72:8e:76:f2:fe:1c:
a6:03:56:94:07:fe:dc:b5:57:ae:f8:57:a6:d1:60:
e0:ef:b2:a4:97:0b:65:3a:dc:76:32:56:53:f3:fa:
84:40:f6:05:a7:b1:13:e6:11:73:1e:d4:c7:51:f1:
ef:fc:ed:0b:55:c3:1f:10:fc:4f:bc:ca:bd:63:6f:
f6:91:40:f1:1a:58:bd:52:04:c2:50:18:13:cc:d8:
19:31:87:81:46:45:c0:1e:8c:94:7e:a3:a6:54:d3:
71:b4:be:ca:94:09:3c:46:a0:67:8c:d9:a2:c4:df:
a6:ea:4e:65:75:16:21:8d:1f:7f:7a:10:5e:f3:97:
5e:52:9a:ac:d2:11:78:f8:ec:16:b7:65:f9:e6:7c:
91:a0:aa:c6:47:66:1e:ee:fe:b0:6d:f1:8d:00:59:
3d:f1:fd:f3:8d:b2:8a:3f:19:53:d3:f5:cb:b3:cf:
e8:97:92:98:e2:5a:3c:ac:d6:92:b7:99:c5:be:1e:
6b:b8:ec:fc:12:cc:07:1d:cf:c7:e3:53:1d:3a:d9:
cf:7c:c7:8d:04:4e:67:81:c3:05:20:b7:7b:17:87:
5b:05:04:1d:dd:43:5f:5e:df:a7:5f:58:7e:d5:fe:
b3:15:ab:0c:82:ff:da:95:51:c3:e1:3c:4b:76:87:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:9B:CF:11:E6:98:B0:AB:69:A5:7D:9B:A1:A9:8C:EF:A2:20:10
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/lsGbzxHmmLCraaV9m6GpjO-iIBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.64.0/21
IPv6:
2a0b:c180::/32
Signature Algorithm: sha256WithRSAEncryption
76:7f:4a:ef:50:49:8f:bf:45:9f:53:66:ce:b0:d0:1a:b4:d1:
07:d3:8d:65:e9:0f:d3:bc:18:11:ca:cd:5e:06:fd:7b:69:7d:
09:a4:cd:d9:00:f8:0b:8b:08:89:18:2b:2a:c7:67:52:37:f2:
09:94:a7:d4:39:18:7c:74:ea:09:39:62:45:d4:ef:a5:8c:90:
1c:79:52:94:98:89:e3:b6:58:9e:7a:aa:d7:13:92:3e:e9:1f:
28:0a:e0:dc:10:5b:79:31:1b:b1:55:56:a0:bb:7c:09:cd:26:
3d:f4:b7:6b:27:ec:e1:32:c6:74:23:13:d5:49:2a:da:4e:b0:
d6:e8:82:0f:aa:62:de:cb:91:0a:97:6a:74:7b:91:84:a9:46:
af:f8:1d:18:02:79:30:3e:8e:ca:d5:43:75:de:f2:79:78:45:
8a:98:d7:be:25:c3:0c:ec:9c:2d:90:6a:4c:f5:5e:9e:79:2c:
7c:03:83:b5:ac:fd:40:a5:32:d9:be:43:c0:f4:b4:1a:ab:83:
42:74:ef:2d:20:f7:bb:77:6e:49:e0:14:be:68:32:63:ba:ab:
16:40:51:4a:80:c1:60:1d:f1:6b:ad:b5:8a:59:6f:13:3a:f7:
39:86:82:c6:8a:4f:f8:e0:81:12:bc:73:fc:07:6b:f2:82:e1:
4c:99:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:25 2025 by rpki-client