Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/lb8SvljV7v-gn9cpNcy7VFlIW4U.roa
File: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (raw, json)
Hash identifier: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=
Subject key identifier: 95:BF:12:BE:58:D5:EE:FF:A0:9F:D7:29:35:CC:BB:54:59:48:5B:85
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019423D80450F0CE6A9A5275E4EF75582DF4
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/lb8SvljV7v-gn9cpNcy7VFlIW4U.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43160
IP address blocks: 185.240.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:04:50:f0:ce:6a:9a:52:75:e4:ef:75:58:2d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95bf12be58d5eeffa09fd72935ccbb5459485b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:97:cc:76:88:49:2a:14:b2:67:4c:70:87:
7d:a8:d9:57:e4:8f:05:2b:f0:c7:27:d8:1f:31:f9:
ff:da:65:b1:30:7c:2b:e3:63:50:36:b7:28:b2:fb:
19:e5:31:12:ce:64:40:fc:35:91:a0:65:17:74:ae:
ce:40:b7:c1:5e:69:ba:6e:66:b2:df:6e:5a:67:9f:
2a:6b:e9:c8:6f:a4:a4:05:c0:50:76:50:43:4f:98:
eb:d9:a9:89:ab:d5:a7:b5:6f:f6:0d:b6:cd:2b:1c:
d3:9e:ed:c7:a8:a2:24:a7:b4:89:56:12:14:c0:b0:
cf:0a:70:be:43:58:e6:ec:0a:3e:55:e7:1b:40:c8:
2f:17:ec:93:65:55:c1:3b:e3:05:68:fa:f4:b9:a3:
fd:11:c4:88:ce:9c:4e:39:52:03:0d:12:0c:37:f4:
2c:58:bd:16:6e:ce:20:87:32:38:fe:88:b2:97:75:
1c:8f:d2:d1:fe:93:c8:7f:0c:58:28:04:5f:e2:4f:
d0:0b:6f:93:49:12:a9:70:41:fb:ae:0e:54:55:32:
19:65:a4:a6:41:b6:63:5e:a0:06:d5:2b:90:3a:d4:
08:68:65:f6:6d:a2:de:81:b5:47:c3:31:17:22:67:
97:ed:be:05:21:9c:6e:d4:90:34:9f:13:ec:8f:85:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BF:12:BE:58:D5:EE:FF:A0:9F:D7:29:35:CC:BB:54:59:48:5B:85
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/lb8SvljV7v-gn9cpNcy7VFlIW4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e1:39:22:f9:ca:42:56:67:fe:26:ba:96:ac:dc:79:8f:ec:
6d:d4:f7:a9:07:de:e1:51:d1:27:81:a1:d5:9f:1f:ec:3f:18:
ee:56:81:74:4a:84:23:55:17:37:28:bf:c7:0e:af:73:05:ed:
4a:2b:5e:97:57:eb:e2:bf:6e:de:9c:0a:0d:e4:c0:4e:b7:9e:
8a:e7:5d:c7:1f:bc:c4:e2:fc:16:3f:9b:6e:4f:01:af:21:43:
96:f8:1e:1a:52:49:c4:fa:9f:a3:17:3b:c8:bb:a7:10:68:b9:
dc:bd:41:9d:15:ec:e0:a8:fe:f5:ca:50:17:43:22:20:d1:ae:
c2:ce:e0:f8:42:01:af:ef:09:b5:ce:82:31:51:ad:4d:96:83:
ce:6f:c2:0e:64:db:56:df:a9:94:06:ae:6c:ce:07:3a:2d:86:
c8:67:26:0b:47:29:0f:ed:bd:38:b0:e7:ec:09:cb:c2:4c:45:
ab:27:6f:09:17:b3:15:c2:d1:8b:d4:4e:2f:1e:5a:cf:a2:d4:
b0:1c:a8:f3:12:50:68:29:76:bd:6e:e2:3e:94:04:bc:eb:92:
34:8f:c8:e4:47:2d:81:33:7b:ce:44:3e:90:ab:59:37:f8:37:
d1:33:74:f9:4c:b5:95:c5:d0:7f:eb:66:8a:09:dc:ae:42:57:
73:6d:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:18 2025 by rpki-client