Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/LAhe47jehZRDXS2k5Cvo6e2BKTA.roa
File: LAhe47jehZRDXS2k5Cvo6e2BKTA.roa (raw, json)
Hash identifier: eJigChiP4udtFtyGw/j6uWJandcaKHMVNA9ufjEkaCI=
Subject key identifier: 2C:08:5E:E3:B8:DE:85:94:43:5D:2D:A4:E4:2B:E8:E9:ED:81:29:30
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0195135F39E3AF097DC4BF2110AFB8E4D0C7
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/LAhe47jehZRDXS2k5Cvo6e2BKTA.roa
Signing time: Mon 17 Feb 2025 10:06:02 +0000
ROA not before: Mon 17 Feb 2025 10:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214361
IP address blocks: 178.239.146.0/24 maxlen: 24
185.212.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:5f:39:e3:af:09:7d:c4:bf:21:10:af:b8:e4:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 17 10:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c085ee3b8de8594435d2da4e42be8e9ed812930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:19:41:ab:ad:17:8f:5f:71:ce:a3:aa:f2:
35:66:36:56:c3:f2:ff:3c:d6:ca:aa:8a:95:2a:bf:
d9:6d:db:46:69:86:67:84:57:bb:9e:37:e0:f7:94:
a1:4b:88:a5:f4:17:a6:a3:69:bc:ea:0b:c4:fc:b3:
98:53:a8:42:65:ed:2d:f9:5b:4e:a6:7c:be:9d:f3:
6c:7c:92:5f:85:ea:f0:1d:27:4d:6a:ac:14:69:01:
c3:81:56:98:ad:df:a7:96:0b:8e:2c:42:2f:6c:7d:
32:ab:5f:e6:be:dd:3b:af:0a:b1:c1:5c:85:b1:61:
08:1c:fa:42:c3:3b:dd:f3:a9:11:95:6f:31:87:2c:
ef:14:2c:15:94:f8:6c:19:0a:85:4e:c9:df:16:bf:
e0:b5:4a:54:aa:45:1c:9a:c7:57:04:89:00:e3:7a:
10:af:83:3f:34:cd:df:08:04:f2:e9:c4:6a:ab:96:
4d:52:fd:01:61:a8:1b:97:4d:a3:0c:22:0e:34:60:
28:54:46:22:f2:eb:aa:d5:7f:91:49:ba:ed:25:0e:
3e:1f:75:dc:b0:6b:be:05:3f:e8:4c:e5:e5:a0:dc:
e4:fc:12:35:36:7d:77:f2:bb:33:72:2b:a6:3c:5f:
e1:e0:2e:f9:2f:db:1f:47:d3:d8:8a:0d:5e:cc:11:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:08:5E:E3:B8:DE:85:94:43:5D:2D:A4:E4:2B:E8:E9:ED:81:29:30
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/LAhe47jehZRDXS2k5Cvo6e2BKTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.146.0/24
185.212.50.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d4:79:3b:50:0d:c8:4f:b3:75:2d:65:23:e2:1c:01:e5:1d:
8e:f3:b7:ea:89:4d:e6:87:80:42:07:41:81:49:33:f3:1a:0e:
65:eb:4d:e6:8e:f4:68:97:fe:f2:d9:0e:d8:70:c5:88:f2:8a:
46:64:22:84:0d:10:07:1b:cc:1e:f8:fe:37:7d:49:39:08:d8:
04:ae:86:dd:e3:f5:ae:7c:0e:27:06:29:02:6f:16:f8:6b:e0:
6d:3d:8e:36:4a:c1:5a:73:9a:36:a0:05:d5:35:07:67:de:ae:
42:a8:10:d7:50:a1:e2:eb:bc:c7:9c:31:6e:2f:e0:ab:f2:c0:
9e:93:da:ab:17:48:dc:1e:1b:17:9e:8c:94:b8:b5:d9:88:91:
91:02:91:a7:df:ab:3f:bd:b8:c7:3f:dc:f8:63:06:2d:a5:75:
93:12:0d:37:ee:7f:7d:33:fe:fb:a5:90:44:4f:11:5f:cb:b8:
85:3f:b5:77:7f:25:90:5d:c6:19:e7:f0:c5:5b:44:b1:e9:12:
6b:82:e3:4f:47:24:84:4b:dd:48:64:f3:7e:6d:4d:61:15:81:
08:88:4f:95:d4:e7:44:1d:d5:c5:a6:0e:b3:04:95:90:bc:94:
a7:d1:24:d3:78:7c:15:42:58:db:b7:9b:86:28:39:02:7f:90:
a4:16:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:37:47 2025 by rpki-client