Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa
File: LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa (raw, json)
Hash identifier: 3vPL4LbfqaoCiLmMXdpcZ0SWEsuh6HbkyOFi9gXwiDM=
Subject key identifier: 2D:58:3E:12:B8:EA:B0:6A:4D:FF:B7:5F:C5:7A:CC:D4:D2:4B:72:0A
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0194221FA9DDFBFE470FC20EDD64289CD9CE
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.238.140.0/22 maxlen: 24
87.238.140.0/24 maxlen: 24
2a06:56c1::/32 maxlen: 48
2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a9:dd:fb:fe:47:0f:c2:0e:dd:64:28:9c:d9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d583e12b8eab06a4dffb75fc57accd4d24b720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:b9:22:72:c4:b9:04:27:b2:39:16:fb:ec:
72:57:e3:b8:90:ac:d7:0f:77:f0:8c:35:40:d3:5e:
08:89:04:c5:59:4a:16:08:3c:ae:4c:41:55:90:7f:
59:d0:03:3b:ef:37:e2:20:3d:fe:f1:ca:15:27:69:
98:30:37:6e:d8:78:77:ff:d4:7b:46:56:86:50:5f:
b7:b2:f6:c5:ea:a5:44:0a:79:83:73:6d:79:2d:56:
3b:3d:7f:a0:4d:7b:7d:b9:e3:32:68:6d:74:50:f7:
f3:17:b1:7a:c3:58:f6:c2:7f:45:47:9f:38:79:d5:
ea:3d:2b:d9:e2:de:e5:5b:2e:4e:21:54:e2:1e:49:
03:90:dc:84:6b:ba:db:d9:cc:ef:d5:76:a2:de:29:
05:1b:1b:ca:14:19:e1:36:52:62:5f:ae:1f:aa:e8:
90:ff:a3:63:b3:60:b3:61:43:4a:c9:10:f4:a1:8f:
a8:98:8f:a0:86:78:32:73:85:f1:11:e6:85:91:c4:
f7:93:15:a7:6f:26:8d:3c:cd:97:25:a6:5f:eb:eb:
3a:e7:3f:d5:54:7e:32:49:07:dc:ad:8a:80:1a:b2:
eb:e8:65:b0:1a:25:1e:f3:c7:67:58:73:9b:8c:c5:
26:57:a1:4b:c3:7a:f9:e6:b2:0d:7c:61:12:f2:59:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:3E:12:B8:EA:B0:6A:4D:FF:B7:5F:C5:7A:CC:D4:D2:4B:72:0A
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.140.0/22
IPv6:
2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b4:77:f5:30:0d:53:c3:52:5c:98:8b:56:f2:ff:47:4a:cb:2c:
07:30:c3:7f:16:d1:8b:29:3c:08:cb:58:36:26:24:6d:4b:78:
c0:6a:81:e9:0d:f5:63:22:02:df:bd:01:7f:99:c4:1b:8a:d2:
e7:ce:14:c6:fd:46:72:6f:7c:42:16:93:01:5c:b6:69:c6:99:
ad:90:0b:db:5f:87:f7:a1:06:96:39:8c:9d:42:1b:9a:6a:e8:
1b:3d:7e:12:f3:6a:68:56:32:28:cb:99:18:f2:87:7f:64:d5:
23:62:6b:b7:6c:ee:97:99:5c:86:f4:34:75:01:b5:10:61:08:
60:91:bf:43:aa:d1:18:60:d3:2a:bf:25:da:71:62:51:1f:c3:
c2:ea:08:a6:d6:a7:02:a2:69:1c:9c:4c:53:ea:b1:b2:7d:df:
b2:2d:42:7a:ec:5a:5b:7d:8b:09:ed:89:51:f0:34:fe:1d:16:
ff:90:fc:77:3c:55:5d:cf:5a:95:63:a4:07:51:9e:0c:fc:40:
0f:f5:d1:28:33:c8:ee:e5:bc:ec:62:9d:d2:16:29:c8:a9:15:
1e:dc:3a:fd:29:2f:a6:d2:66:d3:4e:cd:93:f3:f8:6a:bd:b4:
b4:bd:11:37:6c:06:63:71:b8:fc:58:a3:47:f1:42:99:5b:ad:
4c:c7:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:53 2025 by rpki-client