Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/LHFc9aLVlSCzb4Ljxh_Feoo1cTs.roa
File: LHFc9aLVlSCzb4Ljxh_Feoo1cTs.roa (raw, json)
Hash identifier: BvDezmkc/DjCeeq5MwTLyFGwqS1thdnCUhhPEQYa+nY=
Subject key identifier: 2C:71:5C:F5:A2:D5:95:20:B3:6F:82:E3:C6:1F:C5:7A:8A:35:71:3B
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 0194266C383A865F7CB3E3C3E4CD736E14CE
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/LHFc9aLVlSCzb4Ljxh_Feoo1cTs.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204114
IP address blocks: 185.25.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:38:3a:86:5f:7c:b3:e3:c3:e4:cd:73:6e:14:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c715cf5a2d59520b36f82e3c61fc57a8a35713b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:a8:d3:cb:a3:cc:91:e8:3e:75:91:63:d1:
2e:1b:12:d0:aa:56:e3:44:ce:d6:89:ea:b4:b6:83:
8b:15:1a:41:a4:22:e2:97:a9:90:ba:7a:e3:49:e8:
dd:e4:22:ad:c0:f2:03:a4:9f:43:3f:e8:a7:1f:c4:
2f:01:94:00:b2:be:8e:16:04:6a:91:70:59:9d:c4:
23:42:7e:71:32:df:fe:9b:71:bc:06:e8:58:d0:92:
17:14:03:89:2c:f8:91:b1:b8:3f:99:5c:60:c7:44:
0d:40:dc:60:a8:e9:45:53:2d:ff:2b:0b:da:69:e0:
2f:e7:48:fe:a2:98:42:9c:fc:f1:bb:5f:a2:5c:cb:
58:bc:8d:e4:3a:68:2c:ec:3d:ad:4d:a2:be:ac:80:
b6:16:43:31:19:0f:2e:6d:e5:7e:61:e0:bd:7d:c5:
1d:b8:09:07:b7:5e:79:7a:89:77:d5:1d:91:d7:38:
7d:82:a8:2c:db:63:34:79:f7:14:8b:b9:e4:a7:80:
55:bb:da:d4:c5:3e:2c:3c:0a:0d:f4:f8:ce:dd:7c:
9a:cc:92:34:a7:dd:5c:87:8d:86:8a:22:22:f1:32:
3a:53:bd:10:e5:87:a9:b0:70:df:9f:26:05:db:f7:
11:0f:44:4a:4f:b9:c5:d9:45:e0:1c:b6:50:02:e1:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:5C:F5:A2:D5:95:20:B3:6F:82:E3:C6:1F:C5:7A:8A:35:71:3B
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/LHFc9aLVlSCzb4Ljxh_Feoo1cTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.113.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0d:d4:be:7c:7e:67:b3:a2:e2:d9:c8:ae:82:8b:a3:bf:e8:
17:5b:d6:b7:a3:ab:09:5e:e4:9a:a2:85:fb:6c:8e:c6:ba:57:
c2:ae:be:89:77:ac:49:b8:49:10:89:2f:d2:e6:9e:ca:b7:4c:
78:18:64:6a:7d:3e:c3:35:dd:9c:c1:e8:03:4f:11:ac:f1:32:
75:a0:81:3f:56:68:2b:51:a3:b5:07:a5:d4:ba:44:e0:3d:c0:
ad:e8:8b:ab:a3:cf:b3:bf:91:05:d3:43:ab:af:a1:5b:a1:55:
d5:35:57:66:de:c1:18:aa:cd:e3:5e:49:44:2a:68:7b:06:dc:
68:f2:5e:3c:dc:9e:12:73:88:62:26:0d:f5:bb:c9:88:bf:b0:
b4:c2:58:e0:60:36:e7:9b:d7:16:10:7c:12:7b:72:5a:2c:4b:
27:62:1b:0a:e7:dc:46:23:8a:db:02:c8:25:cb:e7:22:82:d1:
b6:a8:1f:68:97:91:f8:c8:e5:23:8d:c5:22:8e:fd:47:7e:a0:
64:43:46:90:89:f6:d8:aa:0d:12:cd:12:d2:6b:b2:f3:1a:d2:
e1:60:e6:e8:b3:cf:a4:bd:41:69:3e:af:3e:6a:49:99:76:ca:
af:69:60:69:fa:49:62:41:68:46:49:a2:c8:20:7b:6b:78:fe:
ee:9c:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:01:24 2025 by rpki-client