Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Lc7Gps9hY2WMxleCLJ3Lg4FIDdw.roa
File: Lc7Gps9hY2WMxleCLJ3Lg4FIDdw.roa (raw, json)
Hash identifier: y0U86vtlVII8M0uYXIho+DFHcai1dHch26nR+pOF7ZY=
Subject key identifier: 2D:CE:C6:A6:CF:61:63:65:8C:C6:57:82:2C:9D:CB:83:81:48:0D:DC
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369AC3DDDFC2D22EE36C19F0A6689B9
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Lc7Gps9hY2WMxleCLJ3Lg4FIDdw.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60033
IP address blocks: 188.213.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ac:3d:dd:fc:2d:22:ee:36:c1:9f:0a:66:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dcec6a6cf6163658cc657822c9dcb8381480ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:91:2b:c0:1b:6f:26:da:d3:91:40:dd:3c:
45:66:a3:1e:97:ab:0d:90:f0:65:41:ed:ff:8e:20:
00:69:b5:4d:13:21:17:ae:25:14:37:81:7e:38:6e:
89:8f:c2:15:28:2b:14:4d:61:a2:04:a7:2b:ba:45:
d3:42:93:8c:cd:ed:a2:e7:a7:46:4a:5d:ac:a2:31:
fb:86:18:ea:bc:06:3b:ba:d4:4f:06:9d:a0:1e:4d:
92:eb:52:5b:5a:2c:de:f3:33:81:96:d3:fb:b0:73:
b4:f2:cb:d4:5e:4f:ad:d3:f6:80:35:bb:82:ba:b5:
33:c8:ea:45:1b:93:2b:c2:82:1d:e6:ea:25:d3:2d:
c1:83:64:bd:17:d6:fe:d6:48:e9:af:9e:21:d0:ab:
31:da:0c:bb:10:a3:22:1c:ba:c4:eb:8e:2a:6a:76:
e4:a9:b0:67:00:0d:92:65:c0:60:ed:50:8a:5d:5b:
02:d4:e9:6d:17:1d:81:dc:dc:da:53:19:a7:34:e4:
75:b1:d6:04:ed:94:55:14:80:1a:c4:8f:a7:f7:bc:
5b:5c:98:e3:b7:00:75:6b:63:c7:b9:13:5f:bd:75:
3f:e4:99:80:24:9f:a1:bb:34:55:79:8a:76:de:55:
74:f3:31:f4:fd:50:19:62:f0:53:93:70:e2:f1:0d:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:C6:A6:CF:61:63:65:8C:C6:57:82:2C:9D:CB:83:81:48:0D:DC
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Lc7Gps9hY2WMxleCLJ3Lg4FIDdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.217.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:08:5e:b5:36:5d:87:af:ca:cb:89:36:68:1c:60:ff:57:7d:
e5:49:13:cd:2e:db:d9:8c:66:c1:fe:7e:64:47:57:9a:03:75:
5c:30:6d:d7:5c:e4:9a:ee:37:a0:e6:18:c2:58:41:7e:d1:a3:
86:9f:50:4c:44:a2:b4:b7:bd:3a:7c:de:c1:6b:13:61:09:16:
e0:e1:ac:1a:37:91:77:eb:db:1c:f5:76:2b:b5:e7:6e:b9:74:
3b:d4:ab:b8:c7:5e:75:ad:21:cf:79:e2:fc:bc:f5:5a:37:fd:
e6:32:d0:b1:63:be:39:e5:b3:7d:35:90:82:21:c2:6a:56:86:
34:3a:df:55:62:01:2c:e6:c7:a4:8f:3f:ee:f7:19:b0:a2:db:
d0:4f:8d:5f:fe:b2:ec:53:46:36:0f:d7:d5:90:57:4e:b5:2a:
4a:6e:0f:6f:00:66:04:ad:7d:5a:55:77:7c:21:a5:7b:d1:f9:
85:bd:dd:d8:0e:b3:a5:ed:c1:81:4a:1d:f1:9d:fa:8b:31:17:
3e:e6:7c:c0:1f:fe:47:d5:5c:7c:19:33:5c:d7:7d:8e:95:2c:
f8:73:b4:92:b6:19:27:03:80:35:a4:90:79:57:d1:4a:78:55:
11:a2:46:40:6b:26:15:84:e1:7c:eb:e2:42:77:76:cb:81:d6:
90:ca:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:39 2025 by rpki-client