Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/lmg8TFGUlHLh94h8C2YmH1aKN7I.roa
File: lmg8TFGUlHLh94h8C2YmH1aKN7I.roa (raw, json)
Hash identifier: /G2RJ6kE/znQ/BtVoL2ygrSOBDDhTzMPkkZBmwvtXKU=
Subject key identifier: 96:68:3C:4C:51:94:94:72:E1:F7:88:7C:0B:66:26:1F:56:8A:37:B2
Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial: 01941F8C7E0A36E6736D4031D4C26DA55D59
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/lmg8TFGUlHLh94h8C2YmH1aKN7I.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.152.20.0/24 maxlen: 24
185.152.21.0/24 maxlen: 24
185.152.22.0/24 maxlen: 24
185.152.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7e:0a:36:e6:73:6d:40:31:d4:c2:6d:a5:5d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96683c4c51949472e1f7887c0b66261f568a37b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:40:88:75:21:a4:c7:be:2b:da:26:c4:6a:
c0:88:b9:01:17:73:47:31:31:50:3a:4c:fe:24:c8:
fa:20:00:79:94:6f:08:84:67:3e:2a:30:21:0e:a6:
8e:f3:20:f6:1d:d7:53:90:bb:8b:45:bb:5b:3a:d8:
30:70:69:58:b9:47:0b:3d:6b:84:38:67:21:e3:4a:
5b:5a:95:d4:05:b0:24:3d:48:60:7b:5f:33:48:3d:
a6:2f:c4:08:82:ca:6a:a8:c3:cc:3b:4a:9d:23:01:
c7:75:5f:f2:95:24:3e:ac:6a:fe:84:ce:bf:96:d0:
e8:e5:66:71:c9:cc:92:63:67:24:21:ef:fd:83:5a:
4f:78:c1:f3:f4:09:c1:07:e0:ec:11:93:97:0a:21:
d8:b3:c8:75:e7:53:2d:98:c5:41:f0:77:21:72:72:
56:86:8c:db:d1:a8:6d:e0:dc:ee:2c:96:2c:83:da:
33:48:5d:25:69:09:e4:cb:e9:a7:4f:01:49:4f:44:
81:16:db:24:19:46:5a:60:25:67:e0:76:b6:9f:eb:
19:8f:85:46:15:d2:c2:95:05:f2:16:b7:38:2b:76:
6e:b9:fe:ce:6d:98:56:29:4b:9a:db:91:f5:c9:a6:
49:b8:e7:32:2b:96:36:75:cc:e8:40:3f:6c:ed:b8:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:3C:4C:51:94:94:72:E1:F7:88:7C:0B:66:26:1F:56:8A:37:B2
X509v3 Authority Key Identifier:
keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/lmg8TFGUlHLh94h8C2YmH1aKN7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.20.0/22
Signature Algorithm: sha256WithRSAEncryption
05:85:e4:5d:8b:30:2b:54:8e:10:4d:07:30:44:e6:f7:0e:77:
05:fe:87:e3:f2:d1:53:be:7d:59:66:13:9a:ce:5c:82:aa:8c:
31:1d:de:d2:5f:0c:3e:05:f4:51:84:bc:16:ca:f6:15:84:cf:
cd:f2:9d:e8:7d:ff:8f:91:f2:9d:d4:2d:d2:b2:87:2f:f1:c1:
77:25:20:c3:1a:a9:59:df:ca:31:7d:5f:73:7a:ec:72:23:7b:
ee:bf:e5:52:9d:dc:0f:89:96:de:69:f8:dd:13:de:77:e5:b2:
ac:01:02:24:a9:b1:30:f8:f3:44:69:51:e6:f2:e5:ed:a9:df:
8c:a8:1c:e9:a9:d6:04:e6:cc:90:40:f6:c4:7a:7b:86:d7:62:
09:24:92:8d:ed:0e:c5:e3:ae:46:c4:d3:10:eb:e9:f2:d5:ca:
31:ec:ac:55:76:de:c2:95:cd:e6:8d:56:8e:ac:8c:8f:59:09:
40:9a:77:db:8a:3f:47:35:89:95:24:12:27:a3:d2:64:f3:b3:
a0:30:48:1e:10:14:4c:f8:97:7b:32:fe:75:11:8c:18:3c:f5:
07:9f:1c:f7:10:d6:c2:b6:8c:c5:f1:4a:0c:08:ff:37:1b:42:
59:a1:47:fe:fe:30:cf:7f:46:ee:63:d8:41:16:81:f3:15:2e:
ea:89:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:02:10 2025 by rpki-client