Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Lzxta0jd7ucvehlsvKMLCGGj4SU.roa
File: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (raw, json)
Hash identifier: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=
Subject key identifier: 2F:3C:6D:6B:48:DD:EE:E7:2F:7A:19:6C:BC:A3:0B:08:61:A3:E1:25
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 019428243D594F160D933A4A551CE60AE4DB
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Lzxta0jd7ucvehlsvKMLCGGj4SU.roa
Signing time: Thu 02 Jan 2025 17:50:51 +0000
ROA not before: Thu 02 Jan 2025 17:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 81.31.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:3d:59:4f:16:0d:93:3a:4a:55:1c:e6:0a:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Jan 2 17:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f3c6d6b48ddeee72f7a196cbca30b0861a3e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:d9:ad:0b:f4:df:e3:d4:2d:fb:e4:ca:3c:
fd:e0:46:14:9a:77:80:4f:77:32:61:b9:8e:2b:31:
2c:26:92:e0:89:57:e0:0a:4a:96:c9:96:45:9a:55:
d5:19:17:0e:ad:a1:cb:c4:72:73:91:88:a9:d1:86:
3b:8f:48:15:11:63:a5:2b:f6:fe:d3:18:6c:03:58:
62:3d:88:28:80:f0:a1:3d:46:01:28:a1:75:84:24:
fb:24:c5:63:2f:ec:53:e4:f5:68:30:66:5d:8f:0c:
af:ad:17:73:fe:93:af:7e:4f:94:a3:c4:68:8b:a0:
f4:ba:28:ef:0e:92:e1:1a:ed:b8:de:f1:8b:81:8a:
2f:65:99:9d:71:11:a2:03:41:f7:50:c1:d4:3c:55:
2c:10:e8:37:75:0d:bb:15:9c:f2:bd:bc:ff:9d:8a:
2e:f3:a0:56:47:26:7c:bb:1c:d4:cd:58:78:21:b8:
b0:4f:4e:0c:97:bf:70:14:a1:e2:02:dd:d6:1c:61:
ab:c7:2a:b2:b9:13:c9:6a:19:b7:d9:a9:57:07:47:
1a:c9:d4:9d:e8:57:b5:97:ee:d6:37:d0:9b:2d:17:
ed:c0:32:cc:c9:68:59:97:ef:34:b6:8a:30:f3:7d:
ac:38:92:83:74:10:d5:56:3d:56:c8:d6:5c:fc:40:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:6D:6B:48:DD:EE:E7:2F:7A:19:6C:BC:A3:0B:08:61:A3:E1:25
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Lzxta0jd7ucvehlsvKMLCGGj4SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.198.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4f:b9:ee:bf:95:90:2c:36:fa:9f:f3:48:d8:f8:04:7e:89:
ac:ad:13:bd:cb:61:ab:2c:52:28:8d:73:bd:2a:3f:be:98:6e:
15:ee:1f:bf:2a:6b:81:da:5f:6f:7d:c2:74:a6:9a:76:0c:85:
2f:46:2c:57:a9:97:ac:0b:d4:02:8e:53:5d:6a:59:7f:9f:17:
ce:35:3c:ea:9e:0c:17:6b:ec:9c:fd:ec:f4:62:e1:03:0a:3d:
5c:85:be:4d:82:29:9c:1d:7e:c2:07:f3:99:eb:00:82:7e:2e:
f0:a1:12:84:99:3a:32:6f:42:43:bd:fa:9c:1d:cf:c8:a6:bd:
ce:8b:9c:55:d1:cc:ac:cd:b1:58:21:74:77:11:d7:85:70:0d:
b3:bb:ed:eb:65:4a:87:68:e0:d4:59:eb:70:c8:44:cf:d0:16:
d5:a0:54:fa:e3:8a:48:da:09:32:9f:d3:37:8b:67:0f:9d:9f:
83:2d:df:4e:a7:45:3e:c5:77:7d:41:12:e2:72:28:fe:e7:99:
8f:94:95:09:88:b0:ac:ef:87:b9:ad:eb:24:6b:eb:dd:ed:11:
be:e3:c5:a5:da:82:a7:eb:0f:4a:6a:35:e2:56:be:b3:b5:ca:
9b:b6:35:ad:9c:18:8d:f0:a3:3a:a9:cd:f1:91:8e:dc:12:ae:
12:60:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:51:07 2025 by rpki-client