Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/LOkJgQnrVhTjIGglVDZP2nXIS3k.roa
File: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (raw, json)
Hash identifier: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=
Subject key identifier: 2C:E9:09:81:09:EB:56:14:E3:20:68:25:54:36:4F:DA:75:C8:4B:79
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 019422FAF96D4834BC723740807AA2309E42
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/LOkJgQnrVhTjIGglVDZP2nXIS3k.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208071
IP address blocks: 45.159.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f9:6d:48:34:bc:72:37:40:80:7a:a2:30:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ce9098109eb5614e320682554364fda75c84b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:a6:63:31:6d:ad:0d:0f:5f:d7:0e:e6:ae:
a6:69:8d:c7:3f:f2:07:a1:f2:91:83:48:d8:3a:c9:
2d:bc:e5:5b:24:d2:b3:ca:5c:15:b2:30:1e:85:ac:
02:12:45:36:53:6a:e7:c8:8b:43:8d:88:fe:e8:93:
69:39:f5:ed:bb:02:e1:e0:01:b1:80:4d:2a:25:7a:
b8:36:41:05:2d:16:1e:ee:bb:41:8d:51:8e:78:bb:
ad:8a:25:90:62:bb:57:44:81:f3:ea:6d:2e:a3:46:
f4:d7:88:d5:f7:60:d3:96:07:eb:0a:b0:ee:79:bc:
58:64:b0:c6:02:41:37:e0:98:32:dc:c5:32:bf:ef:
2e:90:06:e0:ae:f9:ea:a8:bd:4c:fd:a8:47:57:c3:
c7:b1:87:4d:08:4c:e5:41:70:04:5e:64:b5:05:48:
5a:22:ec:e2:3c:75:85:a0:2a:b9:4c:da:90:5b:e9:
15:1c:6c:c8:de:b1:28:3c:39:fd:0f:71:2b:c5:0c:
f4:2a:18:aa:84:91:29:03:42:a4:c2:fc:df:7d:95:
70:28:f6:35:fd:05:c5:6e:41:c9:53:4f:15:51:eb:
ab:91:f0:9e:6b:c9:fb:5c:ce:6e:be:95:da:09:2a:
a3:d1:1e:f9:fd:3e:7f:03:82:1b:55:6b:e8:39:95:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E9:09:81:09:EB:56:14:E3:20:68:25:54:36:4F:DA:75:C8:4B:79
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/LOkJgQnrVhTjIGglVDZP2nXIS3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:af:1a:e7:6b:83:9f:d8:df:d6:5f:b6:12:2a:81:f2:5a:0a:
9a:97:fa:ae:f6:9b:3a:15:fc:b8:fc:5a:f6:ba:ca:5a:59:81:
df:0f:ec:a3:27:97:58:22:57:7f:2a:ee:00:f4:1a:21:82:93:
b2:77:7f:24:32:7c:79:b7:96:9f:48:c7:2f:13:74:42:d6:f7:
46:c6:ea:c6:a6:87:0d:be:36:80:bb:26:51:9a:01:40:7e:1c:
f9:9e:e9:cd:3f:a2:e0:c1:23:de:d4:96:3d:61:82:2a:22:a0:
c3:5b:e4:79:24:e2:c6:3e:7f:56:7c:19:50:26:13:61:2c:77:
8a:80:8d:29:b0:b8:ca:60:04:bf:5a:f5:71:83:29:b6:18:e3:
8c:c0:8d:39:bb:08:33:95:ff:1f:f5:4c:ab:51:c6:8a:ba:57:
30:42:d1:5d:fd:21:93:59:af:83:31:60:fb:f7:d5:db:34:cb:
75:38:20:7e:cd:f6:c2:f2:89:b7:d2:e9:ae:35:73:dd:be:e9:
8f:25:87:ed:4a:40:2f:be:a9:4a:e3:ec:20:96:d3:61:ac:f7:
a9:0c:41:1e:cf:04:a1:b2:55:6f:63:91:57:60:26:b2:02:cd:
41:06:ee:73:24:69:9b:dc:2e:64:c4:51:53:83:a2:68:42:b0:
18:0b:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:38 2025 by rpki-client