Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lEEurz6wEx6r_j-vy9mAq0s9oW4.roa
File: lEEurz6wEx6r_j-vy9mAq0s9oW4.roa (raw, json)
Hash identifier: tDPslTX9jZDqCHsJTwFz/aHfAeWa088zuj/tR2FGL1I=
Subject key identifier: 94:41:2E:AF:3E:B0:13:1E:AB:FE:3F:AF:CB:D9:80:AB:4B:3D:A1:6E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421443CEA19743B9C71E71084F471B81E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lEEurz6wEx6r_j-vy9mAq0s9oW4.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400810
IP address blocks: 80.240.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3c:ea:19:74:3b:9c:71:e7:10:84:f4:71:b8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94412eaf3eb0131eabfe3fafcbd980ab4b3da16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:e2:58:c9:11:89:e3:76:68:e1:d1:bc:e9:
72:f6:91:02:7b:f2:fb:38:d7:79:44:e2:2f:9b:90:
40:67:29:4a:e4:52:6b:66:fe:b7:48:27:c8:5f:0f:
2d:ba:6a:d4:a6:4c:c2:fc:03:b9:fb:39:90:9f:9f:
99:09:07:6a:22:5b:42:76:73:e8:8f:76:e3:dd:73:
2b:73:2e:eb:51:71:eb:5e:bd:80:31:fe:28:29:bc:
f2:aa:95:f6:4e:cc:6c:72:d5:db:65:cf:06:e4:64:
cd:75:99:b6:bd:58:d4:d8:95:ce:d8:c6:2f:8e:80:
a3:ef:4d:2a:55:89:b7:cb:6f:d9:73:bc:41:e0:4a:
86:f0:4f:51:d8:6e:51:c2:e4:8e:f5:da:1c:21:e0:
81:6f:d0:18:8e:73:ad:5e:b9:c4:70:21:cd:28:74:
8c:60:be:6b:b9:95:30:d2:0f:81:3f:47:dd:0f:2d:
f6:3e:7c:2d:b0:c3:0c:e6:6f:dc:40:fe:9f:58:9b:
8c:3c:26:9f:f2:46:6f:14:60:db:70:a5:36:90:55:
07:d2:2d:95:a5:94:57:e0:34:3b:34:34:07:8d:88:
95:bf:3a:b5:ad:a9:e2:31:fd:43:b1:15:0b:4d:c6:
ba:d0:ef:44:95:e1:c7:3d:d7:a4:0d:5a:2a:d4:b1:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:2E:AF:3E:B0:13:1E:AB:FE:3F:AF:CB:D9:80:AB:4B:3D:A1:6E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lEEurz6wEx6r_j-vy9mAq0s9oW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.84.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ad:bb:ae:53:8a:bc:c5:aa:74:33:dc:33:c7:ab:a0:6b:ca:
35:57:f8:d4:23:d9:59:12:d2:d5:8a:dd:f9:cc:ba:05:1c:ab:
b5:4a:eb:14:a6:39:53:4a:d9:20:54:47:45:36:4a:ae:2f:43:
4b:fa:9d:84:17:23:bc:8e:24:98:1d:bf:e4:83:bd:ee:69:ef:
c7:c6:eb:60:55:99:4d:cc:cf:37:72:a8:64:33:67:0e:39:35:
d3:d7:e2:71:f3:c3:ee:b1:f5:38:5c:4c:f5:2f:fc:fd:1d:55:
9e:9d:3b:f3:77:31:8f:cd:6b:41:98:14:97:91:65:1c:62:db:
aa:b6:80:f6:d0:a9:80:24:75:bb:4f:25:e0:19:cd:2f:86:7b:
70:70:a9:f3:b8:10:f7:89:9a:e4:f8:89:3a:8a:61:4b:1d:9e:
b6:06:6f:62:71:ae:ab:00:d8:6b:39:90:6b:37:0a:f8:6b:8b:
81:65:98:41:64:db:bc:6e:c0:83:64:ea:0e:2c:b5:1b:c5:b8:
4e:23:da:54:f7:2a:cf:07:68:44:4e:f4:19:58:a8:46:59:b9:
26:60:45:b5:12:24:6e:bf:dd:95:7d:17:82:64:18:ef:42:91:
96:0b:6a:ac:b5:cc:1c:6e:4c:41:f0:26:79:f7:d8:91:9f:a3:
21:31:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:09 2025 by rpki-client