Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa
File: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (raw, json)
Hash identifier: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=
Subject key identifier: 2F:1B:FC:45:D6:0D:F4:FD:AF:8F:59:D9:C8:08:C5:17:D9:4D:91:4F
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260F20F252E03A3B283BF0F47DE34E
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa
Signing time: Thu 02 Jan 2025 17:52:50 +0000
ROA not before: Thu 02 Jan 2025 17:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 188.191.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0f:20:f2:52:e0:3a:3b:28:3b:f0:f4:7d:e3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f1bfc45d60df4fdaf8f59d9c808c517d94d914f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:4a:f1:aa:82:74:82:93:e3:09:d1:a3:46:
84:3e:fb:64:1d:13:1a:e5:f3:4f:72:70:f8:bd:d2:
71:19:93:3e:a7:9d:ad:7b:9e:b5:17:46:96:a6:d1:
2f:1e:e7:64:ad:55:fb:cf:45:c7:72:05:e4:4a:27:
57:9b:91:d6:52:bd:09:75:62:82:6e:fb:a2:9c:4f:
1f:11:1b:2b:7b:ae:15:6e:d9:49:0f:d5:53:15:1b:
1e:9c:7e:09:ff:75:2e:62:f4:87:3d:4c:1c:dd:a4:
e0:b4:d2:4c:74:be:73:99:c2:7d:cc:43:97:ef:70:
50:85:a7:63:7b:6b:47:27:78:bf:90:67:5a:58:ab:
1f:91:60:81:cc:c8:8e:50:4e:0c:69:f3:c9:65:b4:
27:c4:a7:77:cc:db:41:27:a3:4a:d9:a9:49:00:1b:
dc:bd:cb:49:c5:24:4a:14:88:f3:67:5c:da:c2:4f:
c9:70:bd:7f:42:9c:61:1e:3e:b1:f3:4d:fa:6d:13:
74:16:27:3a:a0:8e:04:10:e8:1c:12:00:09:41:1d:
06:d7:de:d5:63:8c:0c:f1:eb:25:11:e0:c3:90:9e:
af:f3:c7:4e:11:af:1e:0f:45:62:23:02:d6:f4:87:
5a:42:f1:bd:97:c0:83:57:d1:67:ff:38:9e:35:e5:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:FC:45:D6:0D:F4:FD:AF:8F:59:D9:C8:08:C5:17:D9:4D:91:4F
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d1:bb:17:55:1f:a0:21:24:3b:1d:fb:ac:42:28:9a:22:1a:
3e:87:0d:fe:85:87:57:17:10:df:d9:11:cf:bf:ee:4b:d3:0f:
0b:5d:80:21:73:13:c6:06:3d:ec:b9:4a:83:94:5f:ac:d6:52:
52:04:2d:6f:25:45:4d:e8:80:fa:aa:82:ba:f5:6f:47:83:4d:
8e:10:18:31:65:2f:e9:bf:89:c8:4e:ae:33:57:ea:a6:28:d2:
2f:8b:48:1c:a3:b0:b8:54:7e:71:07:69:4b:2d:b4:a4:c8:ad:
17:aa:d9:1d:f3:16:ae:80:25:50:3d:b6:fb:ce:9d:34:e8:1e:
17:a3:13:0c:c8:3b:ae:2b:c0:2d:02:07:f8:f1:57:1f:7d:70:
c5:54:10:08:d9:b2:47:ed:9c:7c:42:43:b0:dd:4c:a3:9f:a6:
10:6e:b9:ed:9f:65:00:16:aa:11:f0:a9:17:a1:1d:30:0e:27:
12:b1:16:76:aa:d9:4c:3f:84:4a:e2:46:46:64:7a:2b:e8:c0:
e5:73:78:3a:b3:2b:53:c3:6d:38:cc:87:3f:cd:26:fb:27:73:
05:8e:d5:a9:ef:ab:42:92:17:20:10:ce:88:a0:8f:52:66:34:
b7:0b:9e:5b:14:08:9c:9a:ee:d7:00:15:b3:b1:ce:06:bc:93:
e7:2f:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:09 2025 by rpki-client