Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/LWzTa12ceS3uKfqTTkpFAx1rmBY.roa
File: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (raw, json)
Hash identifier: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=
Subject key identifier: 2D:6C:D3:6B:5D:9C:79:2D:EE:29:FA:93:4E:4A:45:03:1D:6B:98:16
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D656A94D734171F737720CE449FF60
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/LWzTa12ceS3uKfqTTkpFAx1rmBY.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210992
IP address blocks: 89.25.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:a9:4d:73:41:71:f7:37:72:0c:e4:49:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6cd36b5d9c792dee29fa934e4a45031d6b9816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:17:b4:b5:27:34:de:3e:74:7c:55:92:9a:
c6:9f:0f:39:9c:7d:3e:1b:d1:44:52:d8:f7:6d:43:
83:c5:54:e8:6c:51:c3:9e:17:e6:1d:86:31:10:6e:
ea:07:86:2c:9c:a4:f9:84:16:fe:d8:59:e7:88:15:
59:96:82:f5:9f:6d:0c:5c:06:43:94:c4:fa:57:85:
ed:75:06:3b:90:97:ef:a3:05:1f:15:49:42:f0:e4:
11:1f:a2:4c:04:fd:2a:7f:59:d3:e8:c3:a8:08:a6:
08:de:58:45:b3:4b:59:33:64:b9:b2:cb:9a:30:09:
aa:63:8b:43:68:e5:4d:3c:5b:9f:7a:e2:e2:4d:13:
6e:db:4a:37:d7:43:01:da:77:b7:e5:d3:70:f7:02:
77:79:4f:a9:b8:f9:57:b5:c9:59:f6:25:cc:b7:cb:
d8:6c:0d:71:4e:43:cb:90:8b:87:c4:6a:b7:0b:86:
a3:29:c9:5c:83:58:ab:d3:9d:a1:94:53:bb:8d:bb:
65:b2:02:07:32:34:df:89:0e:30:bd:51:58:06:d2:
0f:44:ed:66:9f:fc:33:96:df:2e:4a:d7:10:b4:2f:
45:31:76:06:ad:fa:51:93:b3:e5:11:04:38:c3:aa:
f3:b9:0b:ae:7c:bc:69:9a:30:69:39:53:8a:ef:6b:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6C:D3:6B:5D:9C:79:2D:EE:29:FA:93:4E:4A:45:03:1D:6B:98:16
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/LWzTa12ceS3uKfqTTkpFAx1rmBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1c:8f:2a:10:93:60:08:e7:57:92:b7:ee:15:80:a4:06:fc:
9f:b7:13:dd:43:eb:0a:3e:00:84:97:22:79:95:0b:b1:9f:5d:
97:16:42:f9:0b:16:85:77:c9:ca:80:d2:1d:1f:be:4d:4b:b1:
17:c2:6a:a2:19:a4:a4:c6:4a:c3:d6:5b:01:a2:97:30:e8:86:
7c:c4:2c:bc:54:29:0a:2d:ca:6a:9c:15:14:e2:66:f5:45:28:
24:e5:82:38:44:87:75:d6:7e:c9:a8:b4:9b:9f:2c:94:a3:3e:
bd:6a:00:b9:61:34:37:7b:48:b2:0f:3d:82:42:a0:de:5f:72:
ea:bd:6c:20:f7:38:59:33:d5:eb:de:4c:2f:4e:bb:89:03:42:
e5:39:34:4f:18:4c:80:1d:9b:2e:2b:a0:64:ca:c9:ca:0a:27:
cb:b5:38:69:11:c4:ed:06:a7:45:71:42:3e:32:60:c9:4c:80:
a2:90:a8:a2:bd:9b:82:ed:6d:55:89:9e:91:7d:4a:5d:36:15:
92:15:aa:db:2f:b8:fc:34:8f:b7:bd:97:ac:7f:a0:6c:9b:22:
ae:e3:88:0b:d3:8f:57:ff:47:fd:03:9b:65:c2:bc:6b:9a:fa:
c6:dd:9a:ea:1d:a3:b5:91:30:71:d5:06:77:6d:b3:4d:05:54:
08:99:3f:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lapTXNBcfc3cgzkSf9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjUwMTAxMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDZjZDM2YjVkOWM3OTJkZWUyOWZhOTM0ZTRhNDUwMzFkNmI5ODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQIXtLUnNN4+dHxVkprGnw85nH0+
G9FEUtj3bUODxVTobFHDnhfmHYYxEG7qB4YsnKT5hBb+2FnniBVZloL1n20MXAZD
lMT6V4XtdQY7kJfvowUfFUlC8OQRH6JMBP0qf1nT6MOoCKYI3lhFs0tZM2S5ssua
MAmqY4tDaOVNPFufeuLiTRNu20o310MB2ne35dNw9wJ3eU+puPlXtclZ9iXMt8vY
bA1xTkPLkIuHxGq3C4ajKclcg1ir052hlFO7jbtlsgIHMjTfiQ4wvVFYBtIPRO1m
n/wzlt8uStcQtC9FMXYGrfpRk7PlEQQ4w6rzuQuufLxpmjBpOVOK72s69wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC1s02tdnHkt7in6k05KRQMda5gWMB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvTFd6VGExMmNlUzN1S2ZxVFRrcEZBeDFybUJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRkOMA0G
CSqGSIb3DQEBCwUAA4IBAQCgHI8qEJNgCOdXkrfuFYCkBvyftxPdQ+sKPgCElyJ5
lQuxn12XFkL5CxaFd8nKgNIdH75NS7EXwmqiGaSkxkrD1lsBopcw6IZ8xCy8VCkK
LcpqnBUU4mb1RSgk5YI4RId11n7JqLSbnyyUoz69agC5YTQ3e0iyDz2CQqDeX3Lq
vWwg9zhZM9Xr3kwvTruJA0LlOTRPGEyAHZsuK6BkysnKCifLtThpEcTtBqdFcUI+
MmDJTICikKiivZuC7W1ViZ6RfUpdNhWSFarbL7j8NI+3vZesf6BsmyKu44gL049X
/0f9A5tlwrxrmvrG3ZrqHaO1kTBx1QZ3bbNNBVQImT9Z
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:47 2025 by rpki-client