Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LS5yR9EzCQtwzMf2kcv9ymgkhWI.roa
File: LS5yR9EzCQtwzMf2kcv9ymgkhWI.roa (raw, json)
Hash identifier: kMeG+febtl2q9yE/efL1kcHCXZEx26zw76fQo70nJ3I=
Subject key identifier: 2D:2E:72:47:D1:33:09:0B:70:CC:C7:F6:91:CB:FD:CA:68:24:85:62
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB0ED71F0B0A9C92B4428131E2282
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LS5yR9EzCQtwzMf2kcv9ymgkhWI.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49038
IP address blocks: 31.148.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b0:ed:71:f0:b0:a9:c9:2b:44:28:13:1e:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d2e7247d133090b70ccc7f691cbfdca68248562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:7a:56:9a:83:dc:bb:1e:e9:78:97:7e:c3:
1e:cf:e7:4c:23:15:9a:18:34:79:49:5c:eb:cb:7d:
b9:b5:67:84:53:5c:cf:e5:a1:8c:11:62:59:72:f1:
53:98:ed:17:0d:e0:67:58:40:7c:45:86:02:4e:57:
b7:76:81:03:8a:d6:d7:2c:e4:90:49:e2:5e:be:fd:
f1:28:b9:2c:d9:7a:76:b6:39:cf:38:ab:bc:49:40:
12:b6:a5:4b:22:14:93:0f:ff:ad:ae:fb:dc:5f:8c:
ff:6d:41:36:35:a2:79:10:95:72:20:23:ea:2b:fa:
bf:bb:ab:fa:dd:57:f4:29:14:f0:cb:dd:8b:b3:8b:
87:61:dd:9d:b8:a5:69:31:9d:07:70:86:00:9d:98:
10:b2:b1:d4:75:21:e2:9b:3b:36:d2:d8:d8:2c:84:
4c:73:7e:92:f7:b9:8f:e1:89:77:5e:7e:08:22:3d:
23:fd:d6:c7:d9:bd:92:ac:d0:b4:04:f6:21:0d:db:
b6:51:32:3f:77:fb:d9:de:f7:42:2a:62:85:b3:8c:
c1:1c:a7:93:9f:ae:d1:bf:4f:61:83:b8:f1:7c:46:
1d:54:12:f1:2d:41:df:95:a3:b2:f8:5e:a3:4b:09:
0c:f9:ee:a5:2d:34:31:2b:a1:24:9c:a4:22:9c:39:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:72:47:D1:33:09:0B:70:CC:C7:F6:91:CB:FD:CA:68:24:85:62
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LS5yR9EzCQtwzMf2kcv9ymgkhWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.23.0/24
Signature Algorithm: sha256WithRSAEncryption
43:31:e5:df:ea:a9:fb:00:19:ba:a4:69:5c:e7:25:96:fe:e5:
6d:bf:ab:4b:40:a2:0c:c6:93:e9:93:ed:6a:30:09:e8:7e:bd:
7d:b1:4c:4a:b5:68:97:3c:ef:45:05:5a:06:fa:c5:ff:50:e3:
10:d2:bd:47:73:9e:11:39:22:de:b7:97:35:59:d5:35:87:47:
d6:fd:30:6b:07:88:cd:0b:41:91:da:7c:d4:dc:cc:7f:72:6b:
e3:be:22:29:83:73:7f:bb:a8:40:bb:62:11:ab:67:6d:df:cf:
4f:a6:79:77:66:38:90:3d:55:a1:f2:a2:5e:31:39:e7:d5:79:
23:0d:18:97:d3:37:5d:8a:6a:11:08:d9:8f:9e:0b:e9:54:87:
10:1c:ed:3b:99:d9:2b:1d:b9:98:1e:19:27:b3:7f:57:b5:a2:
8b:20:c4:4f:4b:58:5b:94:c6:af:c7:f3:41:a1:37:8b:5c:2b:
3a:ec:c6:49:8c:49:68:24:75:57:ca:0c:0e:1d:9c:ff:86:fb:
84:20:7f:a5:36:37:8a:e4:ae:64:25:c5:27:01:e0:e8:32:33:
5f:03:24:e3:d8:c3:03:58:67:e5:22:17:00:3b:04:85:db:a3:
31:43:0c:5f:5d:ad:98:17:fe:53:c3:03:24:93:25:78:ee:2a:
bf:1a:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:08 2025 by rpki-client