Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LozgjGA37xFvEWDTYPM2lAwAduA.roa
File: LozgjGA37xFvEWDTYPM2lAwAduA.roa (raw, json)
Hash identifier: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=
Subject key identifier: 2E:8C:E0:8C:60:37:EF:11:6F:11:60:D3:60:F3:36:94:0C:00:76:E0
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0194DB8753596AFC6311CE793E8C5DB00B6D
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LozgjGA37xFvEWDTYPM2lAwAduA.roa
Signing time: Thu 06 Feb 2025 13:51:06 +0000
ROA not before: Thu 06 Feb 2025 13:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38927
IP address blocks: 185.121.135.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:87:53:59:6a:fc:63:11:ce:79:3e:8c:5d:b0:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Feb 6 13:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e8ce08c6037ef116f1160d360f336940c0076e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:5e:26:c6:ef:8b:fb:74:af:96:21:a6:9b:
b7:62:37:3a:07:de:36:42:64:f8:30:74:0b:b7:bc:
cf:90:33:92:f2:d7:7c:a7:8b:87:96:28:c7:8c:13:
47:e8:30:55:9b:3d:6a:8f:d9:57:45:97:23:f0:3c:
ad:f2:29:33:4f:44:67:6c:e0:d2:93:c4:0c:95:3e:
c3:0c:7d:70:86:8c:2b:a2:ae:0b:67:75:68:39:8e:
45:6c:74:67:db:0a:a7:ce:87:4e:53:4c:4d:25:50:
d6:07:27:25:ea:e1:d9:6e:32:f1:a3:92:11:25:7e:
59:ee:c1:b3:1d:07:51:c8:c3:76:60:e3:a8:a1:f0:
41:cd:98:61:e3:a7:ec:03:15:75:8f:65:72:39:04:
c6:2f:0a:d6:84:92:c8:74:f4:9c:b1:2e:32:38:b1:
d4:13:43:6d:0d:04:c8:9e:cf:bd:65:6d:96:1d:ab:
a7:9b:2d:c5:78:06:11:df:d8:87:57:af:be:44:7b:
f5:d5:0d:b5:5a:7e:83:31:4f:df:6c:24:c8:d8:9a:
c5:56:04:1d:f5:46:3f:b9:12:90:38:3f:f2:89:54:
bd:54:f2:75:da:35:b1:8a:4e:bc:5a:88:d8:28:7f:
50:f9:fb:2f:28:f0:80:a0:46:42:81:20:f4:75:6b:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:E0:8C:60:37:EF:11:6F:11:60:D3:60:F3:36:94:0C:00:76:E0
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LozgjGA37xFvEWDTYPM2lAwAduA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.135.0/24
212.232.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:74:1c:88:c3:d5:0b:3c:16:af:f6:09:79:6a:c3:c8:3b:f0:
99:e9:02:d7:30:79:98:ac:1e:bc:22:5b:03:de:33:2e:d6:28:
61:a1:fc:54:9d:30:ca:0f:22:c5:50:2e:3b:3b:57:33:4f:8c:
4f:a7:cb:7a:55:44:6d:74:4e:16:cb:fb:19:2e:a8:38:41:a5:
31:c8:7f:86:80:99:7a:47:1b:ea:01:66:90:a9:ff:27:b2:cd:
96:be:82:ee:71:f1:90:ca:23:be:9a:19:ef:71:d6:e8:c9:65:
13:7a:98:26:40:b9:a3:94:f0:61:fa:44:92:08:16:2e:41:23:
28:0d:cd:e0:47:8b:82:7a:c5:b5:5f:74:dc:63:2d:6b:2c:d4:
9e:e8:19:27:86:a3:6c:46:7c:7a:c0:14:17:fc:d7:8d:09:99:
44:07:73:ea:88:8d:0b:78:06:87:ae:2a:13:51:46:f4:0c:ba:
f5:24:6b:20:64:51:fa:a2:34:3c:05:9d:dd:c9:0f:91:fa:24:
c1:b9:c3:1e:f7:f4:36:e8:f3:52:d9:7c:c2:6a:c4:9f:2a:3e:
3f:72:bd:ef:d6:c1:41:7d:3d:8a:df:c2:9a:28:67:81:4d:b4:
c9:70:34:db:12:c4:7d:a2:d5:8f:c5:c3:0c:e0:3d:93:8f:b6:
a4:b0:92:f0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTbh1NZavxjEc55PoxdsAttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwMjA2MTM1MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZThjZTA4YzYwMzdlZjExNmYxMTYwZDM2MGYzMzY5NDBjMDA3NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr01eJsbvi/t0r5Yhppu3Yjc6B942
QmT4MHQLt7zPkDOS8td8p4uHlijHjBNH6DBVmz1qj9lXRZcj8Dyt8ikzT0RnbODS
k8QMlT7DDH1whowroq4LZ3VoOY5FbHRn2wqnzodOU0xNJVDWBycl6uHZbjLxo5IR
JX5Z7sGzHQdRyMN2YOOoofBBzZhh46fsAxV1j2VyOQTGLwrWhJLIdPScsS4yOLHU
E0NtDQTIns+9ZW2WHaunmy3FeAYR39iHV6++RHv11Q21Wn6DMU/fbCTI2JrFVgQd
9UY/uRKQOD/yiVS9VPJ12jWxik68WojYKH9Q+fsvKPCAoEZCgSD0dWsqZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC6M4IxgN+8RbxFg02DzNpQMAHbgMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvTG96Z2pHQTM3eEZ2RVdEVFlQTTJsQXdBZHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXmHAwQA
1OgTMA0GCSqGSIb3DQEBCwUAA4IBAQAPdByIw9ULPBav9gl5asPIO/CZ6QLXMHmY
rB68IlsD3jMu1ihhofxUnTDKDyLFUC47O1czT4xPp8t6VURtdE4Wy/sZLqg4QaUx
yH+GgJl6RxvqAWaQqf8nss2WvoLucfGQyiO+mhnvcdboyWUTepgmQLmjlPBh+kSS
CBYuQSMoDc3gR4uCesW1X3TcYy1rLNSe6BknhqNsRnx6wBQX/NeNCZlEB3PqiI0L
eAaHrioTUUb0DLr1JGsgZFH6ojQ8BZ3dyQ+R+iTBucMe9/Q26PNS2XzCasSfKj4/
cr3v1sFBfT2K38KaKGeBTbTJcDTbEsR9otWPxcMM4D2Tj7aksJLw
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:31 2025 by rpki-client