Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa
File: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (raw, json)
Hash identifier: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=
Subject key identifier: 2C:F4:6D:03:5F:48:49:DA:0C:01:C3:A0:E5:D4:DD:56:1E:8B:F4:99
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 0194221F8DC3EDF338C0B3C4F202847DB900
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 185.232.200.0/22 maxlen: 22
2a0d:9bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8d:c3:ed:f3:38:c0:b3:c4:f2:02:84:7d:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cf46d035f4849da0c01c3a0e5d4dd561e8bf499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:c9:6f:c3:64:2c:2f:7c:f6:f1:2e:60:51:
01:88:c6:c5:bf:8b:26:2b:24:9b:ca:f8:15:6d:b7:
b2:95:c5:b3:91:1f:6b:7e:d1:4d:c3:23:fb:96:c2:
fd:76:8f:f3:f6:6c:ad:ac:eb:12:c0:39:bc:67:f4:
bf:97:d5:b6:42:1e:10:cd:bd:ed:a8:f0:79:c2:27:
8f:60:dd:5c:60:32:95:a5:91:ae:2f:d4:0f:33:e4:
0f:82:d5:60:41:05:18:92:89:56:c3:27:2c:45:2b:
3e:88:57:0b:9b:87:42:05:d9:5d:52:1b:78:31:08:
fa:34:e9:54:9f:68:ab:e3:d8:1b:f8:90:1b:6d:9c:
a1:65:a0:d1:03:f2:f3:28:01:b6:3b:87:16:c0:db:
29:a5:ba:7d:31:16:60:f6:c7:80:9a:08:b3:6b:e7:
8b:0e:ed:07:58:1f:d7:25:64:59:fc:08:42:3d:65:
be:9e:34:b3:e2:d3:e2:a8:76:3a:3e:45:02:59:a9:
be:8f:fb:7d:52:1f:4c:6c:14:31:73:69:b5:87:0b:
74:65:7c:e0:44:5e:85:b7:83:03:3f:60:82:b9:cf:
95:12:33:9b:45:26:e8:8b:96:cd:b7:bc:49:dd:2f:
e6:3b:00:9b:e8:0f:f3:17:54:a5:78:04:a9:47:9f:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F4:6D:03:5F:48:49:DA:0C:01:C3:A0:E5:D4:DD:56:1E:8B:F4:99
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.200.0/22
IPv6:
2a0d:9bc0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:f4:b4:77:2a:94:c4:9d:98:50:2c:e1:c9:34:68:13:d4:11:
00:56:e1:05:7f:d7:ce:50:53:a6:d9:7a:6a:29:ec:3e:08:9d:
9f:5c:1f:0e:ed:7f:cf:71:5b:dd:7d:ee:5f:34:eb:6f:7d:f4:
55:5d:88:c7:36:fb:b9:8e:95:8b:61:dc:94:e6:06:35:b7:2f:
43:0c:1a:dc:92:5e:34:c6:80:cf:81:4f:a4:28:11:69:9a:35:
45:83:b7:d7:87:13:b9:a6:3f:ae:b0:76:f8:4f:3b:ef:31:67:
1b:4b:20:48:39:1d:1d:5a:8f:d7:88:1f:3b:b3:cd:57:13:73:
bb:a2:70:c1:31:5b:41:51:2d:1e:83:fd:ad:43:10:d8:35:9c:
d6:4b:44:db:53:85:2f:41:b0:4a:23:f1:9b:a9:56:a0:bd:39:
5f:8e:c1:31:f6:43:f2:88:01:b9:0b:e0:30:19:8e:8e:c7:57:
6d:dc:00:91:b0:71:2f:88:e8:20:70:92:a3:ca:e3:85:fc:9c:
bf:4f:6f:b9:10:2d:02:83:07:da:4f:34:6e:62:07:cb:46:d0:
a4:4f:0d:ce:e5:07:ae:5c:d1:28:b4:bd:31:a7:07:0e:fa:e8:
fc:9f:b8:e1:a2:a4:4e:1b:98:7d:f7:24:a0:4e:44:dc:72:c9:
d0:5f:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:41 2025 by rpki-client