Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/LxmN4uMoK6wh408GJ6l9gH0ugu0.roa
File: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (raw, json)
Hash identifier: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=
Subject key identifier: 2F:19:8D:E2:E3:28:2B:AC:21:E3:4F:06:27:A9:7D:80:7D:2E:82:ED
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019426D9D30EB7CED9555DFC25CD32CB5EDD
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/LxmN4uMoK6wh408GJ6l9gH0ugu0.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17782
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d3:0e:b7:ce:d9:55:5d:fc:25:cd:32:cb:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f198de2e3282bac21e34f0627a97d807d2e82ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:20:db:5e:43:66:22:1f:3b:7a:78:85:74:
08:15:b7:93:4c:92:ae:ae:5e:d3:67:10:a8:f8:6b:
f1:2f:a6:60:81:b9:8f:16:94:f4:41:0f:ef:65:93:
cd:d9:b9:3d:f0:dc:c1:c1:38:41:c0:9f:64:02:28:
f1:a0:33:48:a0:8c:cc:a2:5a:44:a8:7d:ee:aa:52:
d4:d1:47:77:fb:af:cf:80:83:f6:ea:8e:dd:2b:8a:
0e:d9:b5:62:db:c3:96:b2:30:ae:bd:33:a7:94:97:
76:9c:3c:4b:fb:59:61:ae:6a:66:41:d1:b6:37:b2:
ce:d9:4f:04:9e:e0:d7:c2:db:2d:b3:35:ac:05:14:
c3:93:6f:68:16:b1:c1:92:24:be:33:5b:4d:08:54:
d7:7b:e0:e0:a9:ad:6c:47:25:ab:e2:3a:87:91:17:
81:b2:b1:cf:e4:30:d8:b1:3d:08:d3:7d:d1:4a:f3:
41:30:ca:6f:6d:db:97:9f:aa:00:d7:b4:b9:67:9a:
44:d9:d8:5a:21:90:22:3c:60:67:5c:f2:86:a8:6d:
c3:65:88:c9:ea:11:cb:db:b3:8f:99:44:55:4e:d4:
7f:72:66:e1:eb:5b:44:24:52:a7:e1:e1:db:2e:60:
70:86:1b:93:fc:94:c5:b7:19:f5:d8:6b:22:07:5f:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:19:8D:E2:E3:28:2B:AC:21:E3:4F:06:27:A9:7D:80:7D:2E:82:ED
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/LxmN4uMoK6wh408GJ6l9gH0ugu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:49:37:cc:02:28:10:ff:54:fd:70:73:85:3a:4e:0c:24:6e:
b3:25:43:c6:af:c6:70:94:00:75:c1:e7:1d:92:44:6c:be:4a:
eb:71:52:f1:05:99:8f:a3:ff:d5:26:ee:c0:8a:ed:fb:82:97:
55:5d:6b:50:9e:a0:b2:ab:f0:54:72:67:08:3e:56:5b:a9:98:
50:f1:26:d7:01:d4:0d:2d:57:b5:c6:06:e7:6e:e4:ed:34:1b:
3b:ce:37:74:f8:28:6f:0e:e7:07:04:f4:d7:75:40:ec:f2:4c:
2f:8d:68:51:dc:ff:77:75:ba:82:5f:c5:bf:75:51:54:bf:df:
aa:84:0f:ea:0b:b9:45:d5:7a:fb:0b:d6:4e:6b:98:54:48:29:
6f:bf:b9:b1:34:e2:47:ef:f3:a9:6c:0a:15:09:26:06:ec:a8:
25:f3:62:85:d4:a2:0c:cb:c0:26:90:25:70:8c:14:02:87:df:
b9:32:3b:bb:12:8e:bd:13:4c:78:c5:bc:a5:b6:62:66:7e:52:
e9:e5:27:60:65:c2:67:96:c7:9f:09:b4:4c:0c:ac:df:f7:27:
cf:74:fc:4b:88:e8:e4:56:18:79:26:a3:56:8b:f9:82:12:80:
1a:2f:85:35:de:85:8b:2d:bd:f1:4c:64:e3:af:b5:13:ae:5c:
d9:a5:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:29:11 2025 by rpki-client