Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LpCns7clMlGDOpzfnkQyAiMLj50.roa
File: LpCns7clMlGDOpzfnkQyAiMLj50.roa (raw, json)
Hash identifier: Ud4Q8Oe938FgOkAmLuUCDRsKe8/iM6ii4d9VZQitm9o=
Subject key identifier: 2E:90:A7:B3:B7:25:32:51:83:3A:9C:DF:9E:44:32:02:23:0B:8F:9D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD8331F7D7EEF91AA1BA25DC7EA33
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LpCns7clMlGDOpzfnkQyAiMLj50.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61276
IP address blocks: 93.171.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d8:33:1f:7d:7e:ef:91:aa:1b:a2:5d:c7:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e90a7b3b7253251833a9cdf9e443202230b8f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:38:cd:de:c8:07:ef:9c:b0:8a:30:ba:0e:
20:b4:05:35:88:b4:35:a9:47:dc:de:5f:12:6d:34:
4c:fb:e2:fd:1d:5f:62:09:0c:36:33:57:7f:8f:52:
d1:86:26:d9:88:23:86:61:3b:7e:07:6e:9c:9e:54:
3b:04:b3:d8:fb:e4:90:2e:28:bf:f5:ba:18:27:b4:
54:16:6f:fb:0c:92:b4:2f:b9:40:45:59:67:b8:53:
c0:2b:5c:94:ec:c7:a2:f9:e7:15:6d:52:69:1e:d1:
e5:bf:55:a2:89:af:aa:bf:6b:ae:68:27:e5:c4:b2:
6e:4a:b7:3f:c0:7c:b9:45:00:38:2f:c8:4f:3f:9e:
5c:9f:30:d2:18:21:fe:81:af:45:7a:df:fd:ee:66:
c7:aa:45:39:c0:82:30:66:aa:f0:52:e1:20:57:f5:
54:30:4d:6c:9c:f3:63:a4:e7:26:77:4b:25:03:d0:
f6:3f:e3:7d:4d:31:2f:b7:68:b8:fb:4e:81:df:91:
8a:dd:e9:55:cc:cc:8d:a7:7a:af:74:78:37:e1:91:
f1:8c:33:8b:b3:7c:38:f7:cd:c3:c5:c2:30:ae:1b:
95:0d:29:d7:d6:d6:f6:12:ff:be:a7:08:43:57:43:
13:50:0a:17:eb:c0:ea:0e:d4:ac:fa:23:10:6d:c8:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:A7:B3:B7:25:32:51:83:3A:9C:DF:9E:44:32:02:23:0B:8F:9D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LpCns7clMlGDOpzfnkQyAiMLj50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.206.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e5:64:45:81:70:b5:6a:a9:ba:6a:a2:9d:d6:cf:6f:b7:e6:
07:44:20:08:47:59:9b:bb:1c:5c:56:7f:e8:f6:0b:ee:34:dd:
45:a7:10:d4:b1:df:ba:55:ae:f8:01:aa:7a:ed:c4:d4:fa:fc:
b1:09:76:7e:b8:e2:29:99:9e:59:68:66:98:17:4a:b7:66:67:
95:7f:93:34:cd:13:5e:ee:62:a1:be:02:ee:60:df:6b:e7:7c:
d7:b5:1f:7c:cc:5f:2e:4a:8c:c1:6a:c1:3f:27:78:1b:a4:f4:
c3:85:64:b8:4d:90:38:67:22:8d:38:85:92:1a:10:28:ce:b1:
f1:ab:fd:df:5c:bd:61:12:ee:1b:29:63:b8:5d:2a:51:9f:53:
79:a1:61:e7:0f:4d:43:b3:66:7f:bf:52:bb:d2:f4:9f:40:85:
9e:51:d1:4e:25:f6:7d:4b:94:6c:68:ee:17:96:4d:bc:0c:7d:
b3:54:11:bf:0e:1e:53:8c:76:c2:00:bc:a6:d7:88:96:09:0f:
14:9e:35:3f:84:47:a9:7b:7d:0a:a0:7d:9d:6a:e9:4b:c3:6b:
83:53:e7:04:31:14:20:66:55:c3:02:01:8d:45:46:5d:da:77:
76:fe:f4:e1:ab:bb:c2:22:f2:0f:7e:d7:61:b2:c5:fd:e2:d2:
d0:ba:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:24 2025 by rpki-client