Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LobZ1-tMZSVPkDF3vZkm3NzVAH4.roa
File: LobZ1-tMZSVPkDF3vZkm3NzVAH4.roa (raw, json)
Hash identifier: pZ+Ni0WR+4/545RBsU9pNH9ZanJeGkmFH+l5uVOyRY0=
Subject key identifier: 2E:86:D9:D7:EB:4C:65:25:4F:90:31:77:BD:99:26:DC:DC:D5:00:7E
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3AAED6F3A65F7E7519C0429C6501F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LobZ1-tMZSVPkDF3vZkm3NzVAH4.roa
Signing time: Thu 02 Jan 2025 15:47:53 +0000
ROA not before: Thu 02 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205491
IP address blocks: 45.131.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:aa:ed:6f:3a:65:f7:e7:51:9c:04:29:c6:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e86d9d7eb4c65254f903177bd9926dcdcd5007e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:ea:bf:38:2f:c3:d2:00:c5:e0:71:f0:4d:
d6:8d:19:47:eb:d0:1e:18:d8:71:ef:c1:28:62:6e:
b0:53:68:9f:e3:c3:8f:03:24:a4:93:2a:57:15:38:
f4:48:61:f8:a4:15:ac:48:99:9a:71:89:fc:0b:68:
6e:49:1d:51:b7:b9:07:88:fe:f2:74:a7:35:bf:f1:
f1:9d:72:33:35:65:5d:33:4b:d1:4c:1e:2f:4f:a2:
f7:03:fc:72:c5:83:a7:a2:a4:c1:65:37:9a:d6:0b:
88:35:32:bc:49:c3:4f:de:37:f6:6b:7c:10:4d:31:
a1:1b:6e:a2:34:04:7a:5a:cd:a7:b1:e6:62:e3:f6:
a9:25:9c:02:f4:cb:8d:85:08:b4:a4:a1:0f:64:98:
bc:f6:cd:55:64:68:9e:cf:10:f7:2a:e9:82:88:97:
f5:b3:29:c6:64:d1:a2:78:20:c3:d8:92:92:85:72:
6f:48:12:7e:9f:2b:90:e2:0e:c0:05:ae:6b:c0:a0:
6e:a2:c4:ed:8e:8f:03:b4:69:d3:9f:58:25:7f:55:
9e:c8:59:2f:2e:c5:98:37:51:f0:41:2c:12:60:e7:
97:ea:49:78:14:79:47:a7:0f:af:de:96:b2:e3:67:
8f:f4:f4:4b:3a:18:96:02:f4:e8:19:41:ca:dc:99:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:D9:D7:EB:4C:65:25:4F:90:31:77:BD:99:26:DC:DC:D5:00:7E
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LobZ1-tMZSVPkDF3vZkm3NzVAH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.61.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:cc:92:7f:db:dc:57:58:7b:9b:b7:57:e8:ce:5a:27:5f:fe:
a4:09:1b:8a:5d:ee:d0:86:12:e5:93:86:6e:2a:db:49:99:6c:
7f:18:fe:33:5d:6d:46:ff:01:9b:4b:14:34:87:54:eb:2d:28:
0f:8a:22:d9:bd:75:d5:dd:db:6b:bc:8a:4a:14:77:ef:b5:db:
66:50:bc:3d:dc:51:dc:42:37:8a:ff:e7:ea:5f:33:db:a4:07:
a6:f9:45:12:8b:70:28:ac:02:dc:f8:6b:59:12:be:b4:8e:68:
35:3a:5d:1d:f7:66:99:b6:f6:ab:93:73:07:f8:de:d5:3f:95:
99:97:0b:a2:f5:63:df:fa:a3:63:46:a3:22:78:97:52:01:68:
6b:49:28:07:61:06:52:ee:b9:62:1b:e4:23:1c:b1:2b:01:40:
cd:34:b7:b4:27:00:e8:f4:54:33:68:34:7c:45:0f:92:cc:23:
99:b6:f3:d2:b6:5f:7b:58:f5:b8:d5:0b:1a:1e:75:74:52:8d:
03:21:0c:2a:63:2e:1f:17:68:b4:69:f6:08:08:1f:b9:98:b4:
da:97:3c:a9:fd:39:b7:ff:25:c0:1c:5e:df:de:e8:c3:65:ac:
68:c2:82:5c:d9:fe:38:77:e0:b0:b2:f3:ee:be:f0:80:31:ed:
ae:42:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:45:31 2025 by rpki-client