Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa
File: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (raw, json)
Hash identifier: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=
Subject key identifier: 95:CB:D4:99:CD:0B:84:AA:3A:00:D6:34:BA:05:B7:9A:63:F7:FA:29
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 019424B3CFAB3EE7386E946FFDABD6EA07DB
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 194.24.242.0/24 maxlen: 24
194.24.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cf:ab:3e:e7:38:6e:94:6f:fd:ab:d6:ea:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95cbd499cd0b84aa3a00d634ba05b79a63f7fa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:a2:01:20:67:9e:ab:de:29:bd:f7:97:32:
3f:fd:25:63:83:41:0b:40:7b:b3:62:44:2f:14:23:
f2:08:1d:b8:de:e0:e5:49:9a:d9:fe:ef:4c:2d:98:
2f:34:6a:03:19:fa:46:4e:d3:76:d6:53:8b:0d:42:
8d:b0:3e:ab:75:69:83:39:0a:fe:d6:d5:d9:dc:ca:
76:43:be:88:d8:76:e4:d4:19:a1:84:48:a4:fd:11:
f5:cc:15:dc:8e:06:3c:f9:0d:e6:9f:29:ec:15:6a:
c5:c2:47:0f:35:40:7a:0c:ef:86:69:cf:a2:27:09:
dc:b2:89:47:29:41:de:77:ed:a1:92:8d:5f:d9:ae:
26:a3:9b:38:26:91:c4:27:ac:85:f3:04:b7:2d:9f:
64:d3:c6:55:a2:9b:2b:82:97:d9:d7:b9:4c:c1:cb:
9b:70:4b:ed:46:e5:c6:3b:f3:1e:86:00:ab:1d:d0:
dc:c5:cb:49:60:ae:f0:52:28:07:fd:ea:d2:73:a7:
42:cf:0c:c4:7d:43:9b:fd:9f:92:04:4e:05:87:06:
54:d4:d1:89:ef:78:d8:bd:45:04:3f:1e:5d:42:60:
30:11:6a:f4:65:c5:b9:2b:87:5c:b0:7b:fc:bf:4c:
bf:3a:00:ae:76:f5:27:22:b6:e4:0a:66:27:6b:86:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:D4:99:CD:0B:84:AA:3A:00:D6:34:BA:05:B7:9A:63:F7:FA:29
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.242.0/23
Signature Algorithm: sha256WithRSAEncryption
80:54:77:cc:39:02:a9:ec:01:1c:e2:89:89:f4:6b:36:70:d3:
41:c5:a8:48:32:38:43:23:f7:74:21:2a:16:ae:78:81:16:0b:
b6:bc:7b:cd:3b:07:2b:59:a5:0e:6b:b4:e2:17:dc:39:d5:ed:
1a:a1:be:08:de:63:bb:03:30:1a:3b:db:17:bb:3b:4f:1c:40:
3f:98:5f:0a:a2:95:0b:d9:59:71:0f:80:5d:1d:33:29:07:3d:
7b:f6:bb:d2:69:df:5f:e8:77:e5:11:32:44:02:57:a0:79:20:
6e:3b:09:e9:ad:f8:19:16:3c:50:ad:c2:87:e3:50:2f:4c:43:
19:ca:68:22:07:e6:e3:81:c7:19:b1:44:33:9d:24:b0:e2:04:
7b:f9:d8:e1:c7:41:8b:10:9e:02:e6:a4:8d:81:66:bf:73:e6:
86:09:5b:07:83:77:3e:8e:32:ef:25:04:61:f3:44:0f:a5:f4:
f4:b0:2a:45:49:86:f6:0c:f6:4d:40:b0:d7:d4:1d:b5:f8:16:
7a:23:04:5a:03:d0:2c:de:39:5c:20:25:b4:b8:ea:57:eb:4e:
27:35:71:c5:8e:19:3b:e9:a8:7c:b5:02:47:75:ae:c6:52:5e:
53:93:a7:45:e3:85:64:58:7d:2b:3d:68:43:c7:80:f5:4e:36:
03:41:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:40 2025 by rpki-client