Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1LPXXVcn8YcrOhINi57GGnN80Vc.roa
File: 1LPXXVcn8YcrOhINi57GGnN80Vc.roa (raw, json)
Hash identifier: EuzggDd0CDcAYZ0FKfuRQi6JcLt5k3MGrLBckBR8HEg=
Subject key identifier: D4:B3:D7:5D:57:27:F1:87:2B:3A:12:0D:8B:9E:C6:1A:73:7C:D1:57
Certificate issuer: /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial: 019428267A82FA0AABA28E854C487930E692
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1LPXXVcn8YcrOhINi57GGnN80Vc.roa
Signing time: Thu 02 Jan 2025 17:53:17 +0000
ROA not before: Thu 02 Jan 2025 17:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 185.118.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:7a:82:fa:0a:ab:a2:8e:85:4c:48:79:30:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
Validity
Not Before: Jan 2 17:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b3d75d5727f1872b3a120d8b9ec61a737cd157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:93:c0:3d:cd:c8:b7:6f:d3:e4:37:90:fb:
cd:d6:30:f7:37:6a:da:8b:b9:61:3f:56:c4:44:47:
cd:eb:5c:f7:72:28:0c:3f:43:36:67:76:5d:54:17:
f6:8f:50:85:37:96:54:d7:a3:19:3c:12:5b:b3:0a:
5a:31:98:b9:bf:d0:61:81:d2:2d:be:e7:a9:88:8f:
77:a7:3a:a6:e2:e0:ab:9f:97:a0:2a:1e:f3:d3:f4:
5f:e5:c7:3f:61:e6:c2:cf:da:57:65:8f:6c:3e:4e:
b6:59:87:11:fd:69:5d:00:9e:7c:ef:3c:4b:ae:25:
79:9a:0f:cc:9b:0c:3a:48:c7:f8:fa:0a:91:54:56:
7b:01:4d:42:b1:b0:64:10:cd:51:2a:14:13:3f:5e:
44:57:e5:cb:33:80:8d:9e:da:24:de:04:4c:81:7e:
9a:ba:bd:b6:b6:28:9f:c6:d1:b6:cd:1c:7c:2d:52:
1a:90:bb:4b:ab:96:18:65:63:90:6d:94:3b:75:c2:
f1:f8:ad:8e:d0:a6:b6:ac:27:15:8e:58:b9:32:dd:
2a:27:3b:6c:89:7d:42:68:2f:fd:a9:78:1d:9c:65:
7c:83:37:c9:8a:02:54:ca:38:da:5a:36:9e:9b:98:
bf:05:7d:29:89:d0:4c:29:7c:82:1d:5f:82:a0:91:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:D7:5D:57:27:F1:87:2B:3A:12:0D:8B:9E:C6:1A:73:7C:D1:57
X509v3 Authority Key Identifier:
keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1LPXXVcn8YcrOhINi57GGnN80Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:44:ad:70:31:c9:a2:38:06:24:b1:2d:22:48:12:68:5b:b8:
02:9f:04:60:a3:3d:c2:9a:e1:7e:29:e3:63:90:c5:72:1d:5f:
9a:94:9d:0e:f8:52:76:f0:6e:5e:02:55:b0:ee:58:a6:99:26:
2b:56:95:b5:7a:e9:61:c1:4c:63:25:40:be:5c:ed:11:cd:e9:
7c:2d:d3:86:7a:45:99:26:e1:f5:7f:15:ac:46:56:ea:06:e8:
cd:bb:1c:4a:a0:4e:0f:51:34:5f:43:76:94:a2:0b:8e:bd:eb:
29:b6:9f:8e:5d:53:28:25:bf:2f:ae:44:4a:f0:b8:04:bf:48:
64:c3:0e:4d:2b:2e:f1:a7:10:9e:f5:84:c0:08:b4:68:b6:c5:
d2:a4:57:e3:b6:65:d5:8b:91:a7:f0:69:80:2d:cb:13:0c:52:
51:a3:87:22:c2:02:c1:22:81:38:e0:d2:a1:0d:89:87:8e:ee:
72:48:a2:51:b6:07:2b:f1:d9:fd:49:93:cf:c0:15:58:28:5a:
81:59:41:f5:e8:6f:76:a3:d8:69:82:4c:9b:72:2c:70:d7:50:
cb:05:5c:75:e9:9a:28:2e:72:a4:04:a5:45:a3:3c:11:7f:e1:
ec:16:5d:43:ca:52:da:09:93:e5:79:24:d8:a3:61:af:66:9c:
43:ad:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:09:52 2025 by rpki-client