Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa
File: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (raw, json)
Hash identifier: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=
Subject key identifier: 2E:85:2D:95:A2:79:9B:2A:5A:05:06:7B:56:5D:95:C6:37:C8:F3:3F
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01942067E8A6AB39AD350C7B9B5A4243CF1D
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31727
IP address blocks: 185.113.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e8:a6:ab:39:ad:35:0c:7b:9b:5a:42:43:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e852d95a2799b2a5a05067b565d95c637c8f33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:aa:bd:7e:93:af:02:e6:5d:09:97:ed:2a:
44:b4:eb:06:9c:f6:e5:5c:cc:05:01:94:c7:6d:f8:
fa:a8:6b:5c:ba:05:63:97:d6:e7:59:bf:78:15:60:
d9:ed:50:ff:6e:a7:34:3b:94:81:49:01:51:44:36:
42:05:05:1b:1f:e3:77:ed:1c:a4:8d:fe:41:b9:8b:
fa:41:27:a3:36:8a:8a:d0:19:64:27:cb:c4:3b:b5:
8a:25:16:eb:a9:6c:92:c0:35:57:5f:ad:c6:17:d0:
e1:8a:d1:af:a7:bf:51:a1:9e:93:6f:a7:e7:9f:54:
55:9a:10:50:d8:f4:4b:f4:45:2f:89:01:04:63:0b:
e0:93:07:3c:30:24:d4:ce:44:92:38:d5:6f:eb:0c:
bf:1a:d1:40:cb:6f:ff:96:d6:bd:53:84:1f:be:57:
0e:5f:f0:87:cc:ea:16:a7:c5:75:d9:4e:5c:d0:14:
7e:56:22:a1:0a:7f:bc:72:db:55:1d:ec:98:ed:bc:
48:ee:f1:da:b2:7b:db:6e:4b:fc:cc:65:13:65:61:
01:6e:21:5a:b7:81:23:f0:e8:41:68:60:91:de:ac:
3f:c9:86:b7:9a:4a:ae:12:9b:28:6d:d9:9c:4c:df:
80:2a:bb:78:92:3e:98:18:fb:d6:08:c8:07:c7:b2:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:85:2D:95:A2:79:9B:2A:5A:05:06:7B:56:5D:95:C6:37:C8:F3:3F
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.188.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ad:49:7a:0e:43:05:39:c6:97:97:6f:b0:27:05:c4:28:6f:
f5:f3:c3:fc:5a:52:5b:08:fc:2c:53:4e:2a:8e:50:ac:74:ac:
4d:fd:c2:7a:65:c6:9d:e1:a0:e1:60:d6:bb:ae:a9:27:f8:2e:
4d:db:8d:9b:52:63:0e:0c:ce:be:7b:d7:60:d9:1e:2b:b3:59:
13:43:21:3d:36:01:ca:11:f9:f9:a1:55:4b:46:1b:0c:29:26:
33:86:77:bb:2d:38:51:7a:91:93:21:5e:3e:1c:5d:f5:55:f3:
21:71:06:f2:86:2b:40:90:6a:b9:93:84:ca:fb:d2:79:7a:32:
c7:52:39:2b:dd:f8:17:c5:36:22:17:99:15:15:d7:9c:f1:d9:
71:9c:61:68:ec:a0:7e:13:b0:92:cc:00:27:29:d3:11:8e:3b:
e7:eb:03:8c:0a:bc:58:31:c0:d2:d9:53:fa:bd:85:f3:c8:24:
09:e9:f9:8b:8d:95:cd:c3:ae:29:1c:bb:b3:e8:5d:46:be:81:
2d:1b:cc:f2:c1:fb:cd:ce:85:d4:36:fe:23:db:19:a8:bb:21:
00:32:b5:df:39:15:14:b2:31:7b:68:d3:1e:2b:3d:f8:8f:46:
c5:40:93:55:4a:a8:ae:a8:69:d0:e9:d8:d6:70:9c:a1:6a:44:
d8:41:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:40 2025 by rpki-client