Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lacmIpGuUGy6nOXxcQKKWVV4Umg.roa
File: lacmIpGuUGy6nOXxcQKKWVV4Umg.roa (raw, json)
Hash identifier: OP6mjIggPMZuDvxs0RMOKVUvLGKENk4owGXoDsXKh0M=
Subject key identifier: 95:A7:26:22:91:AE:50:6C:BA:9C:E5:F1:71:02:8A:59:55:78:52:68
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423699905941A7EDB9A4DA2165CC9F8BA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lacmIpGuUGy6nOXxcQKKWVV4Umg.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48669
IP address blocks: 89.38.104.0/24 maxlen: 24
93.115.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:99:05:94:1a:7e:db:9a:4d:a2:16:5c:c9:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95a7262291ae506cba9ce5f171028a5955785268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:a3:e7:f4:7b:a1:49:53:a3:1a:f3:64:83:
34:b5:01:9e:70:2d:96:40:f2:67:e0:12:4a:be:1a:
f5:c0:f9:70:ac:28:28:b6:f4:e5:9f:3e:52:da:84:
2a:be:86:42:09:77:4c:74:04:da:59:4b:f3:2a:9b:
50:e2:c2:7e:87:37:08:33:c4:d0:2f:1c:47:98:2c:
a3:60:8d:59:7f:9a:a5:88:87:95:70:96:65:8f:ed:
67:92:d6:29:ea:f1:ed:59:03:1e:ad:77:fa:99:74:
3f:5d:4f:68:71:cd:c6:71:60:b3:69:73:c4:8d:1c:
1f:ad:ae:59:0e:11:aa:39:c4:c3:32:34:39:9e:48:
80:29:bf:9e:c8:7b:52:5d:cd:af:35:05:e2:28:73:
be:6c:df:e8:15:46:2a:f8:7e:11:56:65:07:6a:f6:
fc:80:db:8c:e4:47:97:96:66:c4:35:99:84:74:21:
97:63:10:15:c1:55:22:53:d8:cd:1c:88:ce:f2:dc:
ca:e6:c5:65:c9:8e:9f:d5:39:23:25:5d:86:bb:a4:
4c:1f:04:92:4e:b7:66:0b:75:63:fb:2d:73:ee:8b:
b8:49:33:d7:e0:f5:ff:e8:c5:d6:95:13:4c:0c:54:
ef:33:9a:02:60:d3:85:b3:31:b7:34:5e:db:11:41:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:26:22:91:AE:50:6C:BA:9C:E5:F1:71:02:8A:59:55:78:52:68
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lacmIpGuUGy6nOXxcQKKWVV4Umg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.104.0/24
93.115.32.0/24
Signature Algorithm: sha256WithRSAEncryption
42:84:35:0b:25:16:fc:e8:93:49:8c:9a:08:33:7b:f1:cd:d2:
b3:8d:5f:49:ce:6a:91:89:8c:a1:aa:89:47:36:67:d8:3f:c4:
4c:8d:a9:d3:39:85:bb:f4:c1:a1:38:dc:61:9a:82:2b:2d:da:
6d:b7:f1:2f:4d:3d:f8:24:dc:41:bb:a9:a8:4f:37:d7:fe:3b:
4d:41:64:72:6e:da:bd:d6:e4:e0:f9:b5:93:ab:50:b3:38:85:
50:09:1d:7d:ba:dd:28:c2:44:71:b3:ba:63:8e:01:59:5c:35:
4e:35:db:b2:c9:45:3d:35:2c:f7:ea:e8:69:df:c0:94:4e:cc:
b5:2d:54:32:5e:e4:92:82:24:f4:7e:ed:40:95:30:9c:b6:d6:
bb:fd:31:f9:ca:8a:44:f8:62:38:37:93:cd:55:7f:62:9d:69:
5a:46:4a:21:f0:70:f1:1b:d2:ef:7d:56:12:fc:08:98:4b:6f:
ed:2c:9d:06:02:4b:98:1c:a5:e5:9d:d7:f8:c1:94:fb:28:97:
a4:4d:90:f0:db:fe:72:df:ad:37:d1:83:47:15:40:c2:85:95:
a7:5a:41:fe:01:25:5a:61:86:ec:b6:91:c8:6e:4f:90:4c:e7:
e2:80:e5:e6:e1:6f:42:e2:91:be:9f:67:01:ba:61:96:f3:b2:
97:70:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:26 2025 by rpki-client