Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/lnnez22JWNJd2WeZ5gJhM-lXVrk.roa
File: lnnez22JWNJd2WeZ5gJhM-lXVrk.roa (raw, json)
Hash identifier: /nXGCYPW3MVBYSZbtf5SJkkLnnjwK5da+GKvEPkj/WA=
Subject key identifier: 96:79:DE:CF:6D:89:58:D2:5D:D9:67:99:E6:02:61:33:E9:57:56:B9
Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial: 0194258FC3D32A17EF3E880C0ED0416530BE
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/lnnez22JWNJd2WeZ5gJhM-lXVrk.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199256
IP address blocks: 193.120.22.0/24 maxlen: 24
193.120.40.0/23 maxlen: 23
193.120.55.0/24 maxlen: 24
193.120.164.0/23 maxlen: 23
194.125.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c3:d3:2a:17:ef:3e:88:0c:0e:d0:41:65:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9679decf6d8958d25dd96799e6026133e95756b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:52:0b:da:63:d6:9f:f7:64:75:4c:f3:e7:
c4:08:1b:1e:fd:76:ff:41:fa:ea:e9:07:82:ff:0f:
fb:dd:8d:b6:72:f0:25:41:50:c2:7b:d7:90:a9:6e:
a7:74:22:1a:d6:de:4a:16:d7:f2:db:83:7f:6b:cc:
53:57:8f:4d:35:fe:1f:04:0a:9a:50:de:cc:49:2c:
3b:ce:d9:4b:9b:3c:96:c8:2b:6a:22:9d:56:15:2a:
43:4f:3c:86:0d:bf:e7:e4:28:26:06:90:50:7c:1f:
63:36:68:de:0a:1b:a5:8d:ac:5c:34:ef:e7:7b:d9:
c6:39:a7:db:c4:fe:0d:ac:8d:ee:47:27:b9:e4:53:
68:cc:69:ea:52:60:86:e6:59:41:15:1c:7f:af:b6:
0f:63:4d:b9:7d:a3:a3:6f:3f:c1:bb:75:f0:72:74:
d0:7d:02:1f:f2:45:76:19:51:66:b9:01:14:12:dd:
1f:70:26:54:38:d1:74:da:31:4a:bb:5d:b3:cc:91:
b5:c3:53:c3:d0:b9:2b:db:9d:d8:fa:87:26:83:4e:
d7:fd:04:0d:60:a8:43:56:ae:07:c9:46:4e:72:71:
e9:04:7a:af:e8:a0:98:83:25:be:98:67:43:c4:53:
ee:01:79:0c:59:71:52:71:9a:61:c0:16:fd:9a:7a:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:DE:CF:6D:89:58:D2:5D:D9:67:99:E6:02:61:33:E9:57:56:B9
X509v3 Authority Key Identifier:
keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/lnnez22JWNJd2WeZ5gJhM-lXVrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.120.22.0/24
193.120.40.0/23
193.120.55.0/24
193.120.164.0/23
194.125.118.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a8:89:57:84:ac:97:bc:3a:66:30:7e:03:0e:fe:a0:96:cb:
a2:57:b3:93:be:c3:63:ae:f5:2d:bd:5d:02:d7:85:94:b9:56:
bf:43:f4:77:fa:4c:77:ea:9a:5a:7d:7d:83:78:3a:aa:fe:d3:
06:14:33:0e:58:fa:4f:c7:00:0e:b0:a7:f7:99:6a:08:ea:34:
22:89:61:e9:9e:60:39:45:68:56:2c:3e:59:91:c6:92:57:55:
04:13:ca:78:de:5f:ec:6e:43:83:6f:4f:dd:1e:64:e9:46:3c:
0e:d9:8c:e4:6c:5f:6d:6d:b6:7c:48:5b:c4:33:4e:d7:9e:31:
e6:f9:ea:c8:29:a4:7c:5e:9d:81:77:0c:65:17:4d:2c:73:3c:
a8:15:af:83:f3:9d:5f:f6:09:6f:3f:93:c3:f4:1c:5e:b3:35:
6c:f8:46:8d:36:6c:6c:b5:30:ee:5b:87:f7:60:71:4d:fd:6d:
21:16:e5:74:20:06:49:46:7e:2c:23:c6:7a:af:7f:58:6a:bc:
33:ff:25:8a:52:cc:8e:17:d8:1d:a2:27:79:f1:7a:6d:13:d0:
f9:67:ea:2f:62:08:10:c1:b6:50:fe:e7:45:75:6c:32:82:a1:
a8:b7:49:31:d0:26:91:0a:44:83:17:17:fb:91:6f:aa:ee:05:
8e:d4:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:22:50 2025 by rpki-client