Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lILAw3tMqkc78s59-phvitnFCEU.roa
File: lILAw3tMqkc78s59-phvitnFCEU.roa (raw, json)
Hash identifier: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=
Subject key identifier: 94:82:C0:C3:7B:4C:AA:47:3B:F2:CE:7D:FA:98:6F:8A:D9:C5:08:45
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B2A35C88D4BB6390D4C1C5D093B457
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lILAw3tMqkc78s59-phvitnFCEU.roa
Signing time: Thu 02 Jan 2025 01:47:54 +0000
ROA not before: Thu 02 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213888
IP address blocks: 217.177.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a3:5c:88:d4:bb:63:90:d4:c1:c5:d0:93:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9482c0c37b4caa473bf2ce7dfa986f8ad9c50845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:8b:9f:76:4b:1a:ad:9d:5c:49:64:9f:49:
bf:f7:a3:1e:b7:c0:d4:a3:5e:f5:6d:38:b6:2f:bd:
78:b4:16:16:1c:3c:b8:d3:aa:00:8c:19:f4:51:83:
e6:1f:47:27:57:9e:a5:f1:ce:4f:63:b3:19:1c:7a:
60:9c:a3:82:64:8f:8b:0f:be:76:94:4c:ac:4c:5b:
d6:e8:c2:2e:5b:d3:46:47:5a:b8:6d:22:aa:a3:7c:
bc:00:a9:23:32:ee:40:0b:42:11:3d:63:8f:ce:9c:
ee:89:1a:6c:96:df:88:91:43:04:9c:c7:04:da:f3:
ab:cd:54:c7:5b:71:18:86:bb:7d:0c:76:aa:b5:50:
d0:fb:f0:b5:1b:c3:df:80:a9:4c:be:f8:53:05:11:
1e:41:d9:a3:5f:4e:9c:43:71:77:60:25:46:03:ae:
1a:3b:91:54:c5:22:fd:bb:7e:86:b9:fe:92:77:ec:
95:dd:09:c1:69:e2:3f:ac:2e:e9:e8:c1:64:99:cf:
bd:1f:32:08:d7:f2:bd:33:13:71:4d:62:60:89:71:
8c:77:c7:ae:47:fc:c3:7d:45:bc:e0:37:5e:db:ec:
53:a3:26:2f:10:a4:3f:23:52:fc:b3:6b:c5:fa:6c:
3f:c9:60:9c:34:4b:a2:82:4b:bd:11:45:0e:be:e1:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:C0:C3:7B:4C:AA:47:3B:F2:CE:7D:FA:98:6F:8A:D9:C5:08:45
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lILAw3tMqkc78s59-phvitnFCEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.75.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1c:7c:0f:43:d1:ae:59:36:24:37:1d:78:24:ce:c0:77:57:
a4:d1:d9:fc:c0:47:ea:f7:81:e9:da:a2:bc:65:4c:01:f4:92:
6e:f8:e1:83:ef:90:5e:81:d2:e6:7d:98:f9:dc:78:bb:0d:b0:
ed:e4:20:8e:a4:39:8d:a1:6f:57:c2:8b:7d:fb:f4:f1:81:d7:
91:8d:99:a6:97:8e:5a:20:a3:96:e0:82:a0:eb:29:85:c9:7c:
0e:bb:f2:df:62:ff:e4:7c:9e:22:43:e5:c7:f2:bd:a8:c6:ae:
aa:27:9a:85:b2:00:92:f4:37:80:76:ee:30:70:ef:78:ce:76:
24:3e:92:7d:1b:51:4f:4e:87:ac:63:95:5e:56:94:91:cf:ea:
2f:ae:84:f3:cd:58:1f:54:38:c7:06:18:7f:e1:ed:4d:40:7b:
e5:f1:07:fe:c2:83:a2:f9:c9:7a:7e:fd:7b:5d:e2:cc:14:3d:
87:44:6a:cf:9f:d4:ea:7a:e6:09:62:1b:9f:2d:af:a8:81:03:
eb:0b:a4:3a:f3:c3:79:6c:3c:9d:ea:f8:30:de:f6:8c:68:19:
8d:42:72:11:98:89:ad:f2:f0:3b:bb:7e:05:33:3d:4f:e7:98:
8a:54:36:4c:60:92:b9:3b:4d:50:e8:35:0f:78:4d:f5:e0:b4:
00:83:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:42:38 2025 by rpki-client