Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/L-GO2FSILXWJDxljpsdHKCOtSS0.roa
File: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (raw, json)
Hash identifier: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=
Subject key identifier: 2F:E1:8E:D8:54:88:2D:75:89:0F:19:63:A6:C7:47:28:23:AD:49:2D
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 019427B63ED198AC2A6BEDCE7F8DB143F996
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/L-GO2FSILXWJDxljpsdHKCOtSS0.roa
Signing time: Thu 02 Jan 2025 15:50:42 +0000
ROA not before: Thu 02 Jan 2025 15:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 83.101.128.0/19 maxlen: 19
83.101.128.0/24 maxlen: 24
83.101.129.0/24 maxlen: 24
83.101.137.0/24 maxlen: 24
83.101.138.0/24 maxlen: 24
83.101.139.0/24 maxlen: 24
83.101.140.0/24 maxlen: 24
83.101.141.0/24 maxlen: 24
83.101.143.0/24 maxlen: 24
83.101.149.0/24 maxlen: 24
83.101.150.0/24 maxlen: 24
83.101.151.0/24 maxlen: 24
83.101.154.0/24 maxlen: 24
83.101.155.0/24 maxlen: 24
83.101.156.0/24 maxlen: 24
212.70.32.0/19 maxlen: 19
212.70.32.0/24 maxlen: 24
212.70.34.0/24 maxlen: 24
212.70.36.0/24 maxlen: 24
212.70.40.0/24 maxlen: 24
212.70.45.0/24 maxlen: 24
212.70.47.0/24 maxlen: 24
212.70.48.0/24 maxlen: 24
212.70.49.0/24 maxlen: 24
212.70.50.0/24 maxlen: 24
212.70.51.0/24 maxlen: 24
212.70.52.0/24 maxlen: 24
212.70.53.0/24 maxlen: 24
212.70.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3e:d1:98:ac:2a:6b:ed:ce:7f:8d:b1:43:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Jan 2 15:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fe18ed854882d75890f1963a6c7472823ad492d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:f6:63:c1:d9:2f:c8:d2:e7:3f:c3:68:3f:
d7:84:64:d5:b0:eb:7a:1b:9c:17:0e:e4:13:c6:f0:
7f:35:95:5a:0c:81:e1:ba:c9:d1:cb:5f:71:c7:54:
68:87:b9:f4:c9:d3:bc:5f:11:e3:c0:8d:9f:c9:6d:
bf:44:e0:10:31:87:a2:fa:ff:71:3e:c3:25:e7:b3:
47:39:c8:df:68:3d:0f:94:75:a8:0c:26:04:72:90:
01:ec:70:76:99:fe:fa:2a:88:a1:e8:5e:20:73:29:
73:91:c9:99:14:40:32:17:84:ee:bf:14:d4:05:d6:
f7:2c:70:5b:ba:df:74:1c:a1:bf:e8:af:ec:36:2a:
c2:c6:92:83:f9:6d:19:d0:4e:59:4b:bd:27:22:22:
71:4e:d6:da:54:49:6d:8c:ff:6f:a1:4a:65:ff:f6:
39:53:d2:a9:ce:42:e2:9f:fb:01:c9:e2:87:7f:32:
a7:92:dd:65:e8:e0:65:c3:3a:04:13:21:8e:d6:fa:
c5:1f:e1:40:35:5b:7b:24:a7:d6:b1:80:9b:c0:44:
ed:04:e8:92:5d:37:59:23:4b:d8:e8:c1:ae:3e:01:
17:e7:9c:fd:3f:30:e7:64:67:73:ad:6b:66:7f:b7:
2e:46:84:10:1f:00:2f:71:e8:9b:9d:57:cc:9b:58:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:8E:D8:54:88:2D:75:89:0F:19:63:A6:C7:47:28:23:AD:49:2D
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/L-GO2FSILXWJDxljpsdHKCOtSS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.101.128.0/19
212.70.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:e7:20:d5:4a:05:57:fe:de:f2:3e:fd:d4:2c:84:a2:30:f1:
a1:be:70:ea:fb:0a:63:67:cd:6d:cd:08:b7:59:9b:d5:b8:81:
ef:7a:9f:e1:f8:8e:e5:98:68:94:f4:b9:63:ed:5d:87:0d:9c:
0d:76:da:de:49:9f:81:9a:d4:4b:42:1b:66:f5:43:b4:62:ab:
ef:68:a0:cc:cc:cc:ee:5f:a2:11:dd:d4:16:c8:f3:6c:f1:08:
b9:79:5e:cb:08:d7:c9:d4:84:47:65:42:87:c4:37:74:0d:40:
50:51:c6:85:52:e0:1d:6c:51:e0:f6:a1:5b:c8:dc:28:43:0d:
7c:a3:5b:f9:88:9a:52:f5:27:99:97:94:5a:aa:88:11:53:8c:
38:18:c7:95:b7:f8:0c:01:a1:45:ce:fe:d2:bf:8e:f3:9e:42:
14:c7:33:a2:c7:f4:00:ad:90:9e:b1:4c:a8:a0:70:80:39:50:
41:0f:52:1c:41:fa:65:69:f4:60:52:80:ec:f3:cc:2c:a3:74:
27:80:0b:59:73:8e:cf:93:33:20:62:f3:52:34:50:9e:6a:ee:
42:ad:7a:0c:a0:2d:15:50:ba:21:72:bc:18:05:2b:ff:84:b9:
04:3e:5a:5b:c3:23:90:b6:b5:61:8a:ac:41:4d:77:cd:d2:d2:
d5:16:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:34:01 2025 by rpki-client