Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa
File: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (raw, json)
Hash identifier: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=
Subject key identifier: 2F:33:8F:15:5C:30:94:8D:F1:2C:A5:C3:E1:E5:2B:98:06:34:C9:05
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 0194266AE4D016EF9E4965A8A12A8FEB8949
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa
Signing time: Thu 02 Jan 2025 09:48:47 +0000
ROA not before: Thu 02 Jan 2025 09:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212424
IP address blocks: 192.159.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e4:d0:16:ef:9e:49:65:a8:a1:2a:8f:eb:89:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Jan 2 09:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f338f155c30948df12ca5c3e1e52b980634c905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:5d:ee:8f:2d:6a:ae:d0:05:05:e1:01:03:
4c:58:91:e0:f4:7e:13:3d:54:51:09:06:02:7b:ad:
83:8d:0d:32:cd:bb:a7:16:29:20:70:e1:85:b0:31:
06:26:aa:34:6f:01:e3:b7:31:9b:84:25:c9:ce:0e:
17:cb:bf:5a:38:c3:b5:41:36:28:48:35:c6:0b:6a:
f4:b2:71:f3:79:6a:89:24:1e:79:99:ad:91:b0:9a:
a1:94:a9:3c:96:a5:8c:3e:ea:64:a3:cb:69:cb:1e:
ca:94:ad:a1:45:1f:9b:4d:82:a7:5f:91:d7:cc:0b:
82:45:22:55:fe:1c:e6:13:a4:0f:ec:d0:61:12:b1:
57:e4:47:de:ba:37:2f:a3:47:62:f6:b8:32:d9:70:
b3:1c:dc:52:f5:fa:78:45:03:40:7c:7a:02:bd:b7:
06:06:79:62:37:3c:3c:83:ce:52:4b:4e:87:30:a7:
fd:42:04:ae:dd:2f:04:43:d3:4a:23:50:49:eb:1a:
7d:9d:c5:00:54:44:b5:aa:15:01:c7:56:c6:06:bc:
1f:4f:25:c4:cb:15:a1:0e:04:dd:7f:8c:24:ab:d2:
84:b1:a2:30:fe:cb:1d:9b:6c:d2:f3:dd:e3:75:73:
78:34:1a:e6:ae:c4:ad:31:3d:ae:0b:69:26:6b:c5:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:8F:15:5C:30:94:8D:F1:2C:A5:C3:E1:E5:2B:98:06:34:C9:05
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.159.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e4:30:66:4c:0e:38:71:f8:3c:92:36:7a:9a:b9:79:26:d9:
78:bc:ab:df:9f:8b:b3:7e:dc:1c:35:37:8a:58:c7:bd:12:82:
b9:76:e7:07:4c:59:54:da:57:e8:7c:bf:d6:21:a6:2e:32:f7:
40:17:43:02:9b:90:41:9b:e3:2a:53:1d:9c:87:5a:1f:9b:94:
6f:0e:19:dd:fc:fa:8d:06:1a:17:3f:9d:b8:c7:6c:58:5e:69:
95:90:95:96:48:c3:a1:fa:f8:06:70:4c:3f:5a:95:66:22:87:
37:6e:cc:f3:23:33:23:9f:97:c8:7b:34:14:6e:8d:76:23:56:
24:be:4e:59:13:cd:98:7e:9d:fa:0d:79:db:55:9a:ad:eb:f8:
31:0d:39:87:b2:9f:cd:d4:9d:46:6c:67:bc:04:bd:d0:5a:22:
cf:76:31:20:13:79:af:b4:6d:b9:74:04:50:42:a0:a3:2e:9a:
1f:25:be:20:67:c6:d7:53:fd:88:f3:86:25:59:62:5e:15:fa:
46:28:a0:8f:00:88:c5:6b:06:e7:9c:16:59:ef:75:10:54:5b:
8f:ed:50:b5:3c:58:de:0b:61:95:a9:7c:61:2b:85:3b:b8:17:
79:4a:ea:a8:9d:05:1b:eb:81:76:33:13:f8:48:5f:8a:2c:06:
f8:11:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:42:01 2025 by rpki-client