Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa
File: xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa (raw, json)
Hash identifier: gmBp6MHi7PgcV0+T6HOJKzGRBuPuBU2bj1lv4nMBWYk=
Subject key identifier: C6:5D:C1:90:69:7F:7F:F4:6A:48:1E:C5:24:15:B3:C2:D4:4B:59:B3
Certificate issuer: /CN=2e94ff0301be79d81260ac66ac7362efad968a41
Certificate serial: 0194228E0775D32D27B7D43601F7352C0315
Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42134
IP address blocks: 194.0.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:07:75:d3:2d:27:b7:d4:36:01:f7:35:2c:03:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c65dc190697f7ff46a481ec52415b3c2d44b59b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:e3:48:af:59:b7:c6:13:f5:00:4a:4e:b6:
bf:ea:ef:ea:d3:81:a7:2d:a9:3e:25:d7:e3:a5:a4:
32:20:6c:03:c3:d4:12:d9:4d:30:0a:a1:94:11:34:
8d:32:43:54:5f:d3:40:b3:ca:43:8b:97:76:f0:b5:
99:d3:13:e7:0f:e8:34:b2:a5:75:c0:a8:2d:28:19:
e7:56:8c:f6:42:a9:f2:f7:00:dc:de:d5:93:bf:f6:
1d:2f:f8:e9:2c:66:e8:06:a1:fa:44:9e:aa:79:54:
2a:4a:d5:26:3a:7c:83:69:de:44:df:5c:ba:79:f3:
69:f4:dc:27:56:91:74:9e:ac:10:3f:bf:f2:fa:bd:
81:f8:23:a9:da:30:87:45:41:d4:9f:8d:32:6e:0a:
ef:1e:dc:c7:17:61:bf:8a:a3:8e:1a:8c:0e:1a:dd:
a4:37:69:80:e7:84:dd:c6:07:94:ed:67:b2:1c:2e:
a9:c1:4d:8b:11:d7:e3:35:f6:4b:5e:7c:60:23:19:
a7:07:84:f6:a1:00:42:68:39:a7:e4:01:17:f6:a9:
6d:bb:03:03:6d:90:28:ce:56:84:ac:a0:16:94:47:
76:f3:18:80:11:8f:96:b0:a7:06:8b:e6:da:cd:ae:
2f:de:ae:d3:a9:9e:bb:a6:da:4b:b4:de:79:c3:4c:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:C1:90:69:7F:7F:F4:6A:48:1E:C5:24:15:B3:C2:D4:4B:59:B3
X509v3 Authority Key Identifier:
keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4d:93:b0:9f:b4:a3:d8:83:85:40:1a:ac:4a:4a:14:67:da:
a4:09:0c:39:58:cd:0b:e8:44:80:2d:1c:90:57:c3:04:0b:3c:
bc:d2:90:23:31:a6:2a:1f:78:ea:9c:8f:b2:9a:fd:b7:2f:ed:
6c:60:c4:73:03:f9:27:9d:19:ae:d7:cd:dc:d4:d6:54:93:1a:
11:bc:ec:b6:10:83:7b:78:64:da:2b:05:5b:c1:8f:fe:07:75:
7c:90:70:65:be:26:f7:83:89:a1:d7:fb:ad:13:75:14:92:fd:
62:0f:70:a6:b4:17:32:88:f5:41:b6:6c:3d:4f:a2:1a:46:5e:
94:19:42:86:ff:33:11:a5:91:ad:41:2a:27:24:7e:4f:4e:32:
a0:dc:09:7a:d0:38:2b:08:e6:8f:1e:e1:ad:d6:0d:55:3a:ac:
03:8d:4a:0d:62:37:a1:d3:24:6e:48:cb:9a:39:1c:1a:b9:f6:
fc:4d:bc:8f:3c:5e:91:3e:82:81:aa:20:9a:75:d1:d3:62:76:
5d:f2:1c:30:65:94:f2:0c:68:1a:9e:b2:af:96:aa:cd:13:51:
74:d7:c6:33:74:2b:cf:73:a1:88:d3:73:dd:bb:34:39:b9:b3:
19:f8:eb:51:fd:1c:41:43:c0:4a:8e:33:eb:6f:01:67:07:ba:
92:5e:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:07:05 2025 by rpki-client