Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa
File: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (raw, json)
Hash identifier: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=
Subject key identifier: 2D:E5:62:D8:39:76:EE:90:4C:45:4C:FC:A6:65:D9:DD:29:EE:5F:60
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 01941FFA5E12152D4F11786EF80727A96B7D
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205684
IP address blocks: 195.34.78.0/24 maxlen: 24
2001:678:d04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5e:12:15:2d:4f:11:78:6e:f8:07:27:a9:6b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2de562d83976ee904c454cfca665d9dd29ee5f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:17:ba:86:f7:f7:cb:9d:14:c0:f5:dd:35:
6e:04:7e:4d:83:e1:95:84:95:34:5f:0c:22:e0:dc:
88:ca:5b:ee:89:8b:c3:0d:3c:aa:8b:e2:54:fa:f6:
d2:15:09:b2:fb:59:9c:43:da:18:14:67:f2:9d:79:
59:b1:82:5c:7b:69:8e:ce:d3:47:92:f2:2f:d9:fb:
53:b9:6f:3c:0a:c0:f8:eb:80:75:c5:9b:b0:02:47:
de:6f:ee:41:77:99:0c:19:f1:b2:37:39:03:63:26:
67:9a:f1:30:39:cf:01:21:80:b8:98:08:fb:1d:a8:
13:3c:1c:7b:a4:27:cf:6f:e5:93:b8:0f:30:35:ae:
e0:fb:42:96:cc:1f:36:35:7a:72:72:54:20:91:ac:
64:5d:ff:cb:7d:7b:5e:ad:d0:33:11:04:27:2a:7c:
e3:8c:86:cc:8c:1b:55:10:30:21:9e:ed:73:92:16:
40:51:5d:34:d6:ef:de:cf:8f:44:60:2e:0e:fa:dd:
73:a2:9e:35:29:1f:88:54:c7:a6:8f:91:2b:71:39:
a4:31:b1:bf:b6:e2:7c:f6:4e:1e:49:25:f8:8f:34:
ae:d1:cf:81:28:a9:43:e6:e8:9e:8e:5a:97:44:82:
f6:38:89:fd:00:41:44:5a:8b:a6:76:c7:14:a3:12:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:62:D8:39:76:EE:90:4C:45:4C:FC:A6:65:D9:DD:29:EE:5F:60
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.78.0/24
IPv6:
2001:678:d04::/48
Signature Algorithm: sha256WithRSAEncryption
1b:e2:c7:2a:e7:55:aa:bc:48:36:b4:0d:cd:3f:bd:69:0e:6f:
78:1f:25:cf:f2:34:ae:f9:21:c4:b5:ed:8b:6d:73:21:39:a5:
1b:5a:d4:ef:bb:a4:0e:aa:1d:20:54:73:8d:d8:f8:a4:1c:94:
17:6a:d4:6d:66:da:18:f4:b0:1b:84:73:2e:82:12:66:e5:93:
2f:b1:85:f4:e2:b4:a2:4b:f2:02:c3:de:85:3d:67:50:90:59:
3a:10:96:18:91:99:a0:43:31:83:4e:5e:c7:0a:8b:68:1f:8a:
fa:e9:35:a8:2b:24:a2:c6:ca:90:cf:0d:99:3d:ea:73:ca:47:
0e:b5:96:bb:1c:32:e1:b2:5d:1b:cc:8d:64:ec:93:b2:ec:b6:
eb:91:a8:a3:e6:ea:ea:5f:32:ec:75:76:56:58:7c:be:64:23:
72:b6:09:8c:58:b9:61:2e:d8:a1:21:c4:f4:4c:1b:8f:0e:c5:
ed:d5:17:1f:25:ce:90:ec:87:e1:74:5c:4b:7b:a5:c0:67:42:
fa:b9:b0:05:2e:72:7a:05:cf:da:7f:79:08:fe:11:b9:77:10:
b5:5f:83:f8:70:9b:6e:ec:68:6f:b3:e7:06:e3:e7:dd:a7:1e:
72:f1:77:41:5d:03:6f:17:fc:c0:23:41:44:1f:ad:79:9c:4d:
3f:f4:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:03 2025 by rpki-client