Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/LB0RhZaeHc4lFeLZglNMj0M0iuc.roa
File: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (raw, json)
Hash identifier: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=
Subject key identifier: 2C:1D:11:85:96:9E:1D:CE:25:15:E2:D9:82:53:4C:8F:43:34:8A:E7
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019425217AC6EAC601EB905F7D7B7CF7E6EA
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/LB0RhZaeHc4lFeLZglNMj0M0iuc.roa
Signing time: Thu 02 Jan 2025 03:48:58 +0000
ROA not before: Thu 02 Jan 2025 03:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39577
IP address blocks: 92.118.74.0/24 maxlen: 24
92.118.75.0/24 maxlen: 24
185.230.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7a:c6:ea:c6:01:eb:90:5f:7d:7b:7c:f7:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c1d1185969e1dce2515e2d982534c8f43348ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:b7:8f:cc:a3:4e:e3:7e:3f:15:75:51:31:
d6:23:db:d0:ac:f0:ac:f3:8f:97:d2:2a:1c:15:57:
21:5c:7f:12:90:af:e0:f9:78:90:aa:ee:c1:3e:56:
ba:dc:fc:2f:23:41:67:ab:b8:b8:77:ee:26:59:17:
17:d3:71:79:21:f3:d6:85:b7:f8:95:c2:83:29:4b:
e4:42:89:8e:37:fd:ad:d8:a6:1d:01:92:39:fd:9a:
98:5f:cf:a3:6e:a4:23:5c:d5:c3:45:6f:19:28:af:
6a:f1:10:17:dd:19:e5:4f:69:7d:38:0f:c1:33:bd:
d4:43:cb:18:c7:e6:d1:21:7d:62:5b:86:66:d7:da:
13:e2:78:37:90:10:a8:a0:6a:3c:43:49:3b:be:22:
05:dd:4f:a8:b1:7a:e2:96:25:a8:0a:b5:7f:c6:3a:
46:f2:f0:6e:1d:43:65:d7:5b:f8:0b:ef:8f:e5:87:
e0:d9:f8:95:06:d1:bd:61:64:33:e7:a4:b5:6e:28:
45:ff:f0:85:fd:f1:51:11:e7:93:4a:bd:97:5f:60:
d4:3d:21:7b:63:c8:17:a7:f1:08:1f:0b:7e:d9:14:
68:de:2e:53:d1:4d:cd:a1:49:e8:10:f6:aa:08:4c:
2c:fc:74:52:a1:88:7d:46:01:73:e3:ed:69:d6:64:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:11:85:96:9E:1D:CE:25:15:E2:D9:82:53:4C:8F:43:34:8A:E7
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/LB0RhZaeHc4lFeLZglNMj0M0iuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.74.0/23
185.230.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c0:59:09:ff:b7:21:8b:87:ff:ce:f3:71:bd:c8:a4:12:71:
fe:9b:5e:78:72:62:bb:c2:41:e5:0e:32:31:47:9d:32:44:04:
c7:47:b0:87:16:68:ce:fe:a5:64:f5:0d:ec:04:9d:41:33:be:
e9:73:b6:cd:08:ab:96:d1:46:03:60:66:12:6c:99:a2:c5:37:
af:bb:04:53:36:4a:9d:d7:b3:60:fb:85:c2:c4:ee:46:6a:b5:
ce:70:77:11:0b:58:cd:5d:27:1c:82:74:7d:00:35:79:0d:a5:
8b:ac:35:3e:72:68:d3:af:6d:2b:a9:80:93:79:2e:46:b7:d7:
3b:de:19:42:d1:62:d9:cb:d5:f7:cb:ec:9f:61:6c:0b:99:84:
02:f8:ab:d2:60:9f:f2:b3:d5:9f:8e:3d:8c:11:c4:6c:51:7d:
90:01:47:57:f4:2f:d7:9d:a6:87:a9:05:b7:25:42:d2:81:81:
9c:99:c6:da:fc:97:bb:80:b7:0e:d7:4d:11:57:89:eb:aa:d0:
d5:9a:42:d7:05:4b:b8:5d:92:39:51:06:7d:18:e7:51:30:4e:
f9:5f:f0:b1:ff:54:82:a0:43:75:80:ef:5d:7b:0f:34:b9:36:
ad:15:20:68:7c:6c:b1:14:5a:d6:1f:f9:ed:b7:fd:ef:5f:ac:
02:44:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:55 2025 by rpki-client