Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa
File: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (raw, json)
Hash identifier: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=
Subject key identifier: 95:88:8A:35:CA:07:FD:67:EA:20:C3:82:81:0B:F4:4D:89:F6:AC:A1
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 0194214400C33753C1A8FCF81AD20E38AA1F
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200109
IP address blocks: 212.46.61.0/24 maxlen: 24
2a13:cd00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:00:c3:37:53:c1:a8:fc:f8:1a:d2:0e:38:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95888a35ca07fd67ea20c382810bf44d89f6aca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:7b:53:c7:d8:8e:67:fb:16:37:6b:68:7d:
c1:df:31:d7:65:0d:de:32:4e:21:5c:8b:1a:95:d5:
c1:94:03:0f:71:f9:d3:bd:28:77:10:ec:d2:13:50:
b5:3e:ba:2b:55:65:5a:10:e4:41:dd:90:21:42:7a:
cc:1c:c4:d5:31:11:fe:5d:46:95:71:ad:32:93:8e:
d2:4a:49:70:80:d2:1d:58:00:e2:99:8a:1a:b2:46:
3b:9d:79:7b:6d:a9:fb:1e:57:1b:71:f4:c9:9a:71:
a9:9e:e6:6d:8e:8d:db:67:c7:4d:11:b4:08:03:05:
2c:29:08:c2:da:f3:aa:17:eb:76:07:1e:d4:ea:72:
23:63:53:e8:ab:2b:ed:fe:9c:e6:78:67:03:40:bd:
ee:7d:00:49:fb:e9:c8:50:58:3c:17:03:7a:73:9d:
f3:24:1d:54:6d:31:6d:08:c8:3e:b5:ba:e4:54:1c:
3d:6b:21:69:68:3b:82:0b:9b:0b:2d:00:7a:96:f5:
86:ec:89:ad:3d:a5:84:ab:53:85:c3:ab:8a:8a:0c:
44:49:21:64:9f:e6:ae:06:5b:77:a1:c4:32:00:e4:
37:8c:dc:9b:5e:a9:6c:a5:41:41:3c:88:43:c8:79:
17:ff:28:a3:6d:bd:6a:05:6a:da:27:96:43:c6:44:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:8A:35:CA:07:FD:67:EA:20:C3:82:81:0B:F4:4D:89:F6:AC:A1
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.61.0/24
IPv6:
2a13:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
67:ca:7e:85:a8:d7:42:a0:e0:08:61:28:9d:68:93:e7:d3:3a:
91:17:f8:cb:ad:5d:cd:2c:bc:4d:8e:d2:9f:0d:ce:5d:00:15:
63:13:43:bd:53:1a:fc:6c:d7:59:5f:ed:92:8c:80:56:f1:6b:
93:e4:ac:05:44:96:31:62:5f:b1:d0:75:57:83:42:14:64:2c:
00:c0:ed:b9:f8:45:94:f8:4c:3b:76:e1:86:a6:d0:20:de:15:
86:56:6d:51:0d:9e:f2:0b:86:ac:76:a7:58:3e:8b:06:8c:67:
fe:c9:95:4f:69:f2:98:0b:f7:e5:08:67:97:de:9d:fb:4a:2f:
bd:c6:44:01:5c:f5:81:5a:94:f1:0b:f8:5f:40:4e:cc:22:f0:
09:20:e5:95:ee:72:1c:ad:1f:3f:c1:f7:ec:71:88:68:5f:db:
80:bc:b8:ad:dc:d4:12:9d:df:a0:ec:fd:d3:c3:a5:51:1c:45:
13:b1:81:a2:22:b3:66:68:cc:5d:c5:fa:ab:a5:db:1d:47:91:
bd:57:73:6d:42:bc:aa:95:69:be:29:e3:76:b6:ef:54:05:bd:
7e:41:08:2b:c9:9c:06:8e:5e:aa:60:70:1a:f9:8d:14:91:50:
04:72:9e:ee:ba:11:ab:d4:d5:ba:dd:e6:7f:67:13:1a:01:f7:
d5:d2:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:07 2025 by rpki-client