Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/lPO-83Uan_fb1kYfhwEVUVQ8nHQ.roa
File: lPO-83Uan_fb1kYfhwEVUVQ8nHQ.roa (raw, json)
Hash identifier: Aw0Ox+yMEpAGgjOa83Q6SbpOMVwbuNCsvZyBcmtKxvs=
Subject key identifier: 94:F3:BE:F3:75:1A:9F:F7:DB:D6:46:1F:87:01:15:51:54:3C:9C:74
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 019425217AE9623ED7E3D26B0B614FF84B97
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/lPO-83Uan_fb1kYfhwEVUVQ8nHQ.roa
Signing time: Thu 02 Jan 2025 03:48:58 +0000
ROA not before: Thu 02 Jan 2025 03:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215671
IP address blocks: 88.135.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7a:e9:62:3e:d7:e3:d2:6b:0b:61:4f:f8:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Jan 2 03:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f3bef3751a9ff7dbd6461f87011551543c9c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:9b:de:69:4b:9b:ea:2e:d7:5a:a7:a5:11:
94:44:af:4a:42:47:1b:6b:b8:83:ee:4e:09:37:f3:
8e:f1:39:2a:3a:ea:e9:64:34:df:6b:a3:05:48:6e:
6c:a1:6f:d5:c0:a0:0b:62:3d:ba:00:e2:4c:9f:3e:
4e:f6:a3:e7:4e:79:53:7a:ee:11:aa:1d:13:76:a8:
d2:f1:99:e1:d2:85:33:fc:6e:c8:98:65:5e:1e:32:
0f:b3:14:1e:ec:bf:fa:2e:c2:8c:15:d3:b5:0d:85:
29:cb:85:76:3d:a8:77:1f:91:93:98:78:5d:d4:dd:
fc:ea:3e:47:7a:55:2a:d8:38:28:0b:05:5e:1f:a7:
4b:b2:0a:7e:dd:91:16:ba:41:7d:1d:3d:12:0b:f3:
86:5d:f0:94:da:bc:0d:ab:fd:f7:4b:cf:07:56:f1:
8e:87:95:3e:55:6f:37:9c:91:3f:0f:bc:fe:53:3e:
fa:b3:70:21:20:7b:a4:28:ad:c3:f8:f7:2d:3a:be:
d2:8b:2d:5b:20:e3:0b:7e:80:2c:ac:d5:dc:f6:14:
2c:4a:95:85:c6:c1:cf:ea:55:17:73:ab:f8:3d:89:
a4:bf:d9:21:6b:ff:b3:af:ef:e7:4c:df:7f:b3:a2:
44:a3:41:17:40:ee:ab:99:37:b5:22:68:7e:7b:7d:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:BE:F3:75:1A:9F:F7:DB:D6:46:1F:87:01:15:51:54:3C:9C:74
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/lPO-83Uan_fb1kYfhwEVUVQ8nHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.34.0/24
Signature Algorithm: sha256WithRSAEncryption
96:45:8b:7c:18:53:9b:bb:3e:65:52:ea:c1:d2:79:f0:de:f0:
33:ca:73:2e:bd:ed:19:94:a3:c3:34:82:28:fc:23:00:ed:74:
a7:75:04:66:df:68:59:2c:57:a8:a8:a3:91:6a:fc:32:30:f5:
6d:f1:7d:fa:65:10:33:92:87:06:ea:fc:6a:22:34:b3:6e:4c:
3d:ba:fe:e7:d3:11:6b:e2:7f:c3:b3:4e:f9:85:ff:1f:d2:8f:
3d:7c:c9:94:9c:17:ee:c1:c6:30:d1:b8:c5:ac:02:b3:05:cb:
9c:9a:b3:0b:8f:61:08:f2:62:6c:f6:23:82:eb:d7:a6:51:d9:
98:7e:80:e0:bc:ce:75:2b:d8:c4:3e:84:35:51:a1:78:78:49:
00:79:15:3a:9f:f1:cf:7e:82:c6:b2:a4:e5:cb:fd:d3:a1:69:
da:93:c8:a5:98:f9:41:aa:53:92:39:55:b5:22:95:d8:f1:10:
6e:dc:a3:c3:39:a7:a4:74:37:ea:32:74:14:9d:3f:6f:6d:77:
0f:76:a5:48:49:f0:2a:cd:ce:3b:41:e4:98:e7:61:07:bf:e2:
e2:88:ca:aa:68:4e:db:90:bf:8d:6a:da:1d:75:0e:a3:b2:c3:
ce:1a:84:63:0c:cb:2f:86:cf:8d:4d:cf:b4:d9:0b:b9:4d:8a:
b9:48:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:25 2025 by rpki-client