Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LLR4Mbf-e_olPPoWJgQHhGTw6Aw.roa
File: LLR4Mbf-e_olPPoWJgQHhGTw6Aw.roa (raw, json)
Hash identifier: aITSOUXYp/tCqYZkT4QV13iGKzPa6W5YsNwrVKRhGPo=
Subject key identifier: 2C:B4:78:31:B7:FE:7B:FA:25:3C:FA:16:26:04:07:84:64:F0:E8:0C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143F92614079FD9B70E6A92F96EAB7D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LLR4Mbf-e_olPPoWJgQHhGTw6Aw.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 217.145.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:26:14:07:9f:d9:b7:0e:6a:92:f9:6e:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cb47831b7fe7bfa253cfa162604078464f0e80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:98:9e:98:19:c1:ff:5d:27:f0:63:7d:ca:
95:12:d0:19:f2:ed:db:bb:85:93:22:16:b1:af:a7:
0c:1b:b6:7e:74:c6:d5:12:d0:b6:d3:8d:28:17:82:
7e:3a:a4:23:f7:08:4f:d2:e1:b9:3a:25:48:cf:36:
0c:b4:77:69:75:dc:af:8f:8d:7e:33:99:57:78:85:
c0:ef:00:c1:91:6d:93:f8:2d:8b:9b:12:82:56:f7:
24:51:ff:e0:0a:da:87:5f:63:ae:d6:27:04:39:6e:
6c:33:9f:d9:9f:30:2f:a4:80:65:9c:0a:8d:2c:27:
c1:6d:81:7d:01:5e:97:b5:82:68:09:a8:2f:2c:06:
cc:9d:33:4f:1f:2b:67:bd:a6:68:99:5d:31:a8:e4:
58:3d:2b:a9:17:c3:84:75:f0:b0:27:94:18:1b:b8:
5e:b3:8f:9f:31:1c:f7:96:53:19:58:f9:35:f6:6b:
9a:22:0f:9a:67:80:95:b0:6d:67:13:c9:38:ea:75:
d0:07:82:a7:c0:4c:2a:1d:5a:b1:a7:e3:24:09:ad:
aa:37:51:0e:ba:4b:de:ff:c1:b4:37:e1:ff:d9:32:
8b:78:8c:22:78:7b:43:69:50:93:48:68:6f:59:1a:
6a:33:f2:73:89:fd:95:12:51:c1:a2:c7:aa:25:85:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:78:31:B7:FE:7B:FA:25:3C:FA:16:26:04:07:84:64:F0:E8:0C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LLR4Mbf-e_olPPoWJgQHhGTw6Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
24:32:0a:d8:f2:62:27:8f:e1:f9:00:ff:22:c4:e1:84:94:1b:
f2:58:16:c6:c7:09:8a:ef:fc:12:4e:50:ff:98:9a:87:05:b3:
38:e7:d6:a4:10:b0:bb:5a:96:49:2a:31:8d:ad:d9:d8:ee:bd:
a5:3e:1f:a4:28:a4:b0:8b:0e:3c:91:7d:a1:7f:98:7f:1b:3c:
55:65:a0:1d:bf:f9:5e:69:5d:ff:04:17:34:5e:ac:ee:75:22:
62:32:6a:52:93:00:b3:74:db:cb:49:10:c9:26:33:41:c8:6e:
32:9a:6e:d2:2c:3f:21:12:6d:56:87:89:9f:17:8b:2b:e0:05:
a1:96:3a:e9:99:c3:bc:43:d3:5a:1f:f1:e3:65:de:f9:21:2d:
c6:2e:fb:a7:ab:cc:67:2e:fa:02:a6:f5:30:a2:cd:8f:55:59:
5f:f5:1f:08:30:5d:38:8a:01:1e:4d:8b:e9:28:48:68:13:1b:
65:a0:1f:43:35:69:dc:6e:a8:17:3a:52:59:9f:37:9e:8c:4f:
fc:48:91:c8:1d:d3:19:f3:49:8f:0e:36:06:72:c6:d2:54:2a:
ff:51:ef:ad:d3:99:85:2d:9a:d8:d9:20:fc:93:5c:70:b7:77:
f2:1a:51:01:cd:29:d1:db:89:23:cb:9b:d6:5c:c2:6f:6c:fd:
38:1a:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:47:35 2025 by rpki-client