Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/LuBsqNtq59OLv1AWHpkXInch_bk.roa
File: LuBsqNtq59OLv1AWHpkXInch_bk.roa (raw, json)
Hash identifier: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=
Subject key identifier: 2E:E0:6C:A8:DB:6A:E7:D3:8B:BF:50:16:1E:99:17:22:77:21:FD:B9
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 01941F8C27E233BE6687988F91A90A8E8B24
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/LuBsqNtq59OLv1AWHpkXInch_bk.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198701
IP address blocks: 91.238.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:27:e2:33:be:66:87:98:8f:91:a9:0a:8e:8b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ee06ca8db6ae7d38bbf50161e9917227721fdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:c6:3c:e3:08:a1:5a:81:1d:d1:12:de:8f:
48:4e:23:90:02:1e:2a:48:c1:25:eb:9c:83:89:14:
cf:16:22:ba:3f:32:be:a8:84:c8:d0:c7:e7:f3:6f:
a9:bc:ad:33:0b:87:1a:29:e1:00:50:7a:45:fb:26:
4e:d9:15:87:f7:fa:05:04:07:a6:ec:eb:fb:b2:97:
ee:4a:65:30:ec:00:35:73:0f:fa:8d:38:dd:b9:82:
6a:43:73:83:25:02:df:c3:5f:89:7d:9e:a9:bc:2c:
d4:f5:23:ef:ef:94:c9:88:94:af:fa:5c:a6:6f:4e:
76:a3:a5:d3:64:f8:42:91:a6:e3:f8:63:3e:82:c1:
d9:83:f7:73:cc:87:1f:bf:72:ae:26:ce:fd:9c:eb:
a6:89:65:fb:38:ed:d6:95:bb:19:fe:1d:36:24:74:
8d:0d:02:1c:32:62:ad:41:d6:48:25:4f:cb:c9:e3:
03:6d:c9:12:4a:3f:18:46:c5:47:91:c7:05:e2:3d:
90:70:96:c1:63:0f:02:73:de:3f:ae:c3:7d:fe:91:
5f:80:9c:28:40:97:75:54:28:53:5a:62:6e:26:79:
44:a5:87:90:a0:fd:06:85:ee:67:11:d5:a2:0c:0a:
d0:9e:bc:33:70:72:31:94:d7:0e:e4:c3:19:78:e1:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:6C:A8:DB:6A:E7:D3:8B:BF:50:16:1E:99:17:22:77:21:FD:B9
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/LuBsqNtq59OLv1AWHpkXInch_bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.22.0/24
Signature Algorithm: sha256WithRSAEncryption
35:df:09:b5:36:74:fd:bf:03:b6:78:3f:db:df:8a:30:80:62:
1a:4d:56:75:7b:3f:98:c3:52:de:60:5a:6a:5e:d3:2b:6c:ed:
3b:f4:bc:c1:29:7e:12:ff:9b:da:e0:7a:e5:dc:fe:5d:c5:31:
6c:2e:ff:9e:80:b3:30:83:08:bf:f8:3b:9c:81:fc:5c:6a:89:
d0:14:4a:02:fb:08:d6:4f:e1:32:0f:5d:f2:0a:12:66:d0:73:
26:35:13:49:0c:d0:04:64:11:fc:ac:39:18:99:2e:9e:92:fc:
5c:08:9b:98:1b:88:56:1e:87:d7:cd:04:9d:d9:d0:e6:fc:aa:
e7:0f:e8:70:f8:87:8d:f5:ab:b3:e9:41:48:85:b6:3b:d1:f6:
6f:ac:d6:6e:15:2c:46:b0:af:ce:cc:51:a0:79:54:2c:d9:57:
2b:de:a7:bd:26:43:6a:17:2c:66:59:a4:53:99:79:2f:49:d6:
ce:31:ed:ce:4c:f8:ce:ad:1c:4d:5c:ed:79:2c:6e:7d:26:60:
ff:ec:be:f1:7f:a5:f5:43:89:83:69:ad:05:7b:6d:0f:a9:70:
fc:c9:aa:84:f1:ab:ae:28:c7:03:b0:39:66:06:2b:d2:bf:8d:
f7:4f:7c:fb:16:35:79:de:09:8a:87:15:81:40:51:40:5b:0e:
7c:ca:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:04:32 2025 by rpki-client