Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/LhiSCtln5FtX__OORvWyogq6e1Q.roa
File: LhiSCtln5FtX__OORvWyogq6e1Q.roa (raw, json)
Hash identifier: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=
Subject key identifier: 2E:18:92:0A:D9:67:E4:5B:57:FF:F3:8E:46:F5:B2:A2:0A:BA:7B:54
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019420D62A5BF6E476885B65137A209FEC49
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/LhiSCtln5FtX__OORvWyogq6e1Q.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 185.132.186.0/24 maxlen: 24
185.132.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2a:5b:f6:e4:76:88:5b:65:13:7a:20:9f:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e18920ad967e45b57fff38e46f5b2a20aba7b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:b6:ec:67:1e:9d:50:87:79:56:b9:75:39:
8b:cc:31:11:c3:eb:43:92:ba:c9:10:b4:29:de:c7:
e5:55:55:6c:d0:08:ed:bc:09:62:5a:4a:fe:8f:72:
b4:ea:22:3e:0b:c0:b8:e6:e2:c3:36:de:c7:60:b8:
f9:76:ab:03:55:cb:c3:48:54:d2:09:aa:9c:5e:64:
02:b9:bb:ff:cb:58:fe:00:5d:a1:dd:60:e3:b6:43:
9f:0c:c8:3e:26:88:3e:77:8e:3f:6d:01:81:d5:b5:
25:7c:0e:9b:f0:d8:81:39:3d:12:40:00:8d:29:ce:
35:68:2e:b5:ca:2c:d2:aa:44:b0:c5:31:15:b1:ab:
72:64:5b:83:42:27:71:09:3d:39:5e:59:3f:92:03:
2b:bc:c9:b5:85:01:2a:3a:9c:8b:23:33:ea:1c:6b:
72:64:04:a9:62:3d:d8:87:b0:44:10:f9:e2:d6:f7:
75:dc:30:77:a3:19:4f:a4:e6:1c:34:4d:17:84:93:
57:a3:aa:4d:27:6c:64:9f:50:70:ad:f4:11:55:26:
3d:e1:d0:8f:7a:92:6e:64:56:75:80:66:bf:7d:b0:
5f:51:61:3f:9d:67:96:81:14:88:7d:3e:d1:26:8f:
8b:eb:94:78:45:db:4d:18:5e:d0:9c:33:98:ce:16:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:18:92:0A:D9:67:E4:5B:57:FF:F3:8E:46:F5:B2:A2:0A:BA:7B:54
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/LhiSCtln5FtX__OORvWyogq6e1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.186.0/23
Signature Algorithm: sha256WithRSAEncryption
46:62:7e:72:b9:d2:e6:23:f5:5c:45:72:ad:6c:5a:6f:e7:9d:
6a:74:a2:68:6c:16:f8:a9:c0:6c:d8:6c:96:ed:b3:c5:71:34:
e9:14:5c:b1:a5:8f:8c:bb:a1:50:4d:2b:cf:cc:fb:8b:02:13:
cd:9e:b6:8f:e6:f4:cf:a7:aa:58:c2:98:fd:83:b4:23:77:81:
35:70:e9:6f:53:41:7f:a0:8e:e5:79:f2:2d:f2:56:03:23:b4:
b1:ea:9d:06:9b:80:33:5c:0f:65:a8:25:95:ea:a0:e1:7e:36:
48:11:c6:84:da:f0:23:5a:c3:9c:16:59:0d:0d:98:4e:fe:4e:
c1:74:98:0c:ce:89:d2:b1:ea:bb:2d:c3:07:bb:8d:79:c1:b0:
75:f6:81:5c:f2:e0:da:07:5f:35:9e:42:f4:2a:2b:49:e0:b3:
da:ac:1e:3d:a1:7a:7e:41:79:1f:b2:21:8f:0c:5d:0b:09:d8:
2c:60:20:66:8f:62:1b:5d:31:d8:f4:45:8e:fc:25:c5:41:77:
1b:22:0b:4d:91:25:3e:49:29:6b:d4:d3:48:71:0f:98:68:50:
7f:58:a0:c0:eb:d0:0c:4b:67:46:43:cb:da:f0:da:55:68:88:
58:ec:ea:0e:11:7e:7c:b0:70:a2:1c:f4:fb:86:ec:80:30:bc:
91:d0:d2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:55:49 2025 by rpki-client