Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/jlwHUlpX8poK-lsEjw4bFjVjclo.roa
File: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (raw, json)
Hash identifier: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=
Subject key identifier: 8E:5C:07:52:5A:57:F2:9A:0A:FA:5B:04:8F:0E:1B:16:35:63:72:5A
Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial: 0194228DC5F722C2528C069166C1B4059409
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/jlwHUlpX8poK-lsEjw4bFjVjclo.roa
Signing time: Wed 01 Jan 2025 15:48:24 +0000
ROA not before: Wed 01 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197864
IP address blocks: 195.225.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c5:f7:22:c2:52:8c:06:91:66:c1:b4:05:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e5c07525a57f29a0afa5b048f0e1b163563725a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:f7:4a:f6:02:53:8d:b9:34:61:62:81:4f:
0b:c5:05:7f:49:34:f5:31:ba:27:d1:83:72:93:7d:
0e:ae:5e:12:5e:4d:8c:e6:1b:08:12:7d:19:a8:30:
ac:d6:6a:5f:c0:f1:47:1f:69:4a:82:9d:b6:79:50:
9b:5a:ae:66:89:1c:df:29:78:37:20:93:fd:0e:8a:
e2:8c:af:a3:da:06:ef:6e:a2:0a:bf:80:e7:70:6c:
80:32:b3:70:f6:f5:33:50:d1:33:15:42:f6:e9:c8:
a4:cd:3e:04:68:cf:3d:69:30:5d:67:84:9b:55:b9:
b0:be:ff:1b:e2:7c:9d:09:f4:94:27:05:57:89:68:
79:28:03:16:8a:c3:95:0a:04:a4:9f:7f:05:93:10:
36:7e:12:3a:10:a3:77:ab:a8:97:ae:f5:9d:3d:51:
46:d0:f7:e2:e2:cc:18:01:73:42:af:5a:b8:67:f4:
81:fc:02:f5:11:df:1b:60:aa:b8:b0:78:4e:09:1c:
55:56:5c:54:17:bd:26:74:92:38:58:cb:0d:8b:7c:
83:53:12:cd:d0:0d:5a:32:57:e9:7e:b2:0b:7a:40:
b1:11:d5:ee:8d:5b:02:48:f2:83:f8:fb:1d:48:33:
e2:e5:b4:4d:83:cb:54:90:9d:39:b1:75:16:98:4a:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:07:52:5A:57:F2:9A:0A:FA:5B:04:8F:0E:1B:16:35:63:72:5A
X509v3 Authority Key Identifier:
keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/jlwHUlpX8poK-lsEjw4bFjVjclo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.50.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5c:ce:3e:7d:ea:6c:ad:6a:b5:4e:a1:cd:44:0d:e7:7c:d3:
3d:42:73:e6:0b:3f:7a:a6:e7:41:25:9f:c4:dc:1a:0d:6c:c6:
b2:3a:30:50:6c:f9:45:56:c8:f3:6b:72:9b:6f:0e:41:0e:a6:
2a:51:a9:ca:b0:d5:be:53:d4:ea:c2:90:90:2d:01:fb:83:8e:
2e:59:82:8a:9a:41:7b:0c:72:fe:10:6d:66:d1:ca:8e:ed:ea:
c8:1b:7c:19:0c:cc:a8:4f:1a:ca:f0:3f:93:2c:0c:b4:d3:4b:
fc:3d:54:6d:0e:00:24:3e:5f:2c:05:eb:e8:79:5e:1e:8f:f7:
11:5e:71:e3:47:b0:6b:9b:c1:a1:1d:5b:48:40:e8:8d:51:6e:
99:35:d8:79:aa:bb:8c:40:87:17:f9:cf:5a:7a:9d:31:1d:48:
57:d2:dd:4b:73:19:81:c8:c1:76:82:75:50:6d:4f:9d:83:85:
78:3a:78:39:02:8a:f5:2d:d7:f6:2f:34:e7:37:c9:7e:41:d6:
59:9b:eb:54:87:0d:7e:c6:d5:3d:3f:c3:ff:b6:98:0f:d6:14:
87:28:1e:3c:85:09:d0:1d:ec:bf:7a:1d:18:6e:e9:75:5d:0c:
2f:ab:62:14:16:ae:ce:71:2f:38:6a:5d:20:ca:09:5b:5a:d0:
33:af:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:57 2025 by rpki-client