Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/LDkoUP_y05Q4menYaO8UkXEB7c4.roa
File: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (raw, json)
Hash identifier: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=
Subject key identifier: 2C:39:28:50:FF:F2:D3:94:38:99:E9:D8:68:EF:14:91:71:01:ED:CE
Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial: 019425FDA1F5A0013747B7703970E33CDAA4
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/LDkoUP_y05Q4menYaO8UkXEB7c4.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28704
IP address blocks: 91.190.208.0/24 maxlen: 24
193.243.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a1:f5:a0:01:37:47:b7:70:39:70:e3:3c:da:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c392850fff2d3943899e9d868ef14917101edce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:49:bd:bd:07:24:bd:63:87:4b:3a:00:78:
38:13:d3:a8:ed:04:92:d5:e6:8d:25:47:c9:51:8f:
5d:61:3b:44:d2:c7:69:06:b2:67:f7:ae:a7:c5:8c:
9e:a9:3c:c0:01:99:c1:41:a5:1e:43:e5:1b:93:54:
72:4e:d0:b4:8b:f9:e2:3f:7c:95:88:74:0b:4b:8f:
cc:b6:88:df:46:c8:3c:ad:28:8c:18:0f:2d:c3:fd:
5e:1f:e6:38:c2:bf:32:27:4b:63:bb:f6:4c:9b:a2:
2a:ed:37:f5:9c:94:69:ba:30:fb:c2:03:b5:06:35:
84:68:2e:87:a0:24:2f:d5:19:53:1a:f6:50:19:4f:
dc:8c:e7:cd:e4:20:b7:c2:4a:fa:28:74:de:13:cc:
7d:fc:e9:3c:dd:00:93:b5:09:d2:08:72:02:61:c3:
67:6d:e2:d1:55:96:b4:a3:48:87:19:94:d1:02:c6:
d4:70:56:cc:cd:a7:03:bd:91:65:8f:27:05:b4:2b:
9f:53:ac:cd:06:de:dc:97:5a:ab:e5:cd:e3:90:80:
13:5b:a7:65:d1:68:d9:36:64:5a:da:13:f0:b6:42:
c2:0f:a1:ee:86:79:66:ea:d2:31:e2:e5:18:29:83:
08:07:12:e2:e7:10:be:37:af:e8:80:db:31:92:c9:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:28:50:FF:F2:D3:94:38:99:E9:D8:68:EF:14:91:71:01:ED:CE
X509v3 Authority Key Identifier:
keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/LDkoUP_y05Q4menYaO8UkXEB7c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.208.0/24
193.243.136.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:d7:2b:4e:d0:36:5f:95:65:a1:51:dd:2f:6f:16:43:7f:1e:
58:62:e4:8e:83:cd:fc:60:64:df:fd:a5:62:32:aa:7b:1e:dc:
c6:4a:f9:53:b8:8c:4d:0a:c1:bb:30:f6:c4:e3:2f:87:ec:74:
f2:df:bf:a5:2c:8b:e3:89:81:9c:28:a1:73:58:52:56:14:a6:
b6:bd:b6:ed:6d:a8:1c:55:0d:07:a6:b2:81:f4:e1:fa:ad:4c:
09:49:1b:95:01:a5:3c:5b:1b:0f:36:c5:86:fd:f5:59:28:39:
e9:00:88:ef:b8:e1:8c:3e:84:70:09:f1:ab:a4:18:49:42:a0:
a5:47:12:b1:94:2b:66:56:0d:eb:fc:11:c6:25:24:46:d2:31:
f1:c2:98:89:65:67:5c:b9:80:b1:5c:8f:fa:6d:13:bf:e3:db:
66:c5:b6:5e:cd:6d:09:01:07:ea:da:29:4f:d0:1c:b8:55:44:
c2:45:c0:52:56:d2:b6:e0:bd:58:ab:88:66:06:90:b4:a2:4e:
70:d7:e2:62:5d:5e:48:03:8e:fe:21:dc:31:0a:5c:7d:21:80:
77:88:8c:64:4d:4f:75:6d:ce:65:ae:3d:e9:50:22:23:9e:70:
fc:6d:57:cd:d1:9b:ce:28:24:1c:f1:36:7d:02:8d:2b:24:8a:
99:56:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:14 2025 by rpki-client