Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa
File: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (raw, json)
Hash identifier: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=
Subject key identifier: 2D:10:12:18:AF:1B:9E:34:61:DD:16:E7:E8:F4:0D:ED:72:B9:BD:0B
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01941FFA5F8A99F72883D05060AA2068E027
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 46.235.40.0/21 maxlen: 21
83.150.232.0/22 maxlen: 22
2a00:d640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5f:8a:99:f7:28:83:d0:50:60:aa:20:68:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d101218af1b9e3461dd16e7e8f40ded72b9bd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:2f:31:7b:94:89:27:0f:ee:4d:6e:79:59:
d1:cf:17:ca:d3:0b:03:bf:cf:c6:de:96:23:ec:8a:
36:8a:59:6d:15:3b:93:c8:0e:3b:e8:22:02:31:5c:
52:b1:20:ad:8f:6d:8c:8e:67:28:bf:e9:97:8f:99:
f9:32:4a:a1:72:33:fc:6b:fa:4a:34:4f:59:2c:dd:
a7:5f:5d:22:da:0d:b7:d2:d9:17:8a:4b:96:14:a4:
24:4d:fb:d3:b1:26:47:fd:23:e0:c2:5d:30:f5:69:
f4:83:3d:21:dc:bd:a5:d8:cb:58:f9:1d:e8:ac:ad:
b1:75:70:3d:e0:95:1c:2d:41:11:9e:06:d1:40:fc:
a7:cd:f4:64:2b:eb:89:7d:0d:d9:21:a3:f6:25:3b:
a5:23:23:f5:4e:d6:f3:a5:16:24:dd:1e:84:19:fe:
3a:64:f7:92:a1:5e:51:c6:33:04:3c:b6:18:f6:f3:
83:4b:ef:3f:92:8b:81:ee:54:d4:8a:bf:a1:46:3e:
e7:09:0c:db:ca:ce:0b:26:a2:3f:4b:0d:17:b5:4f:
40:bf:db:91:a4:62:6e:52:d6:e3:11:d6:79:eb:ac:
03:6f:c3:99:d3:4e:2a:3f:00:ec:3d:d9:93:39:2b:
57:35:ee:a7:0d:6c:77:24:59:85:4c:df:79:8a:80:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:12:18:AF:1B:9E:34:61:DD:16:E7:E8:F4:0D:ED:72:B9:BD:0B
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.40.0/21
83.150.232.0/22
IPv6:
2a00:d640::/32
Signature Algorithm: sha256WithRSAEncryption
11:e7:60:f0:fd:96:b4:2b:d3:4b:3e:26:ae:da:15:eb:1c:56:
f8:17:6a:bf:57:49:00:66:ee:fa:b6:e4:33:1e:1d:26:a2:d9:
6f:e5:66:03:41:bc:2b:fe:80:7f:35:73:96:af:f3:f5:c2:41:
da:8b:39:60:06:18:84:31:cf:ee:ff:26:a5:24:ca:b0:9e:75:
cc:8c:8d:1a:f2:76:a4:e2:de:4c:57:8b:e7:97:ef:19:24:3d:
a3:a6:3a:e0:31:88:69:a4:48:62:54:62:93:2a:5b:b0:29:ac:
c8:a1:23:3e:2e:b1:62:b4:95:2c:0f:2b:b1:93:05:fe:3c:08:
4a:6a:0c:6f:28:6d:50:23:e9:15:3a:73:46:47:7c:40:bf:71:
19:85:5f:bb:cf:27:41:a2:af:36:9a:5f:8b:9d:37:d2:c1:c0:
1a:c9:69:7c:b5:0c:36:5b:29:a3:60:2a:6c:e2:d6:f6:c4:ec:
7c:c8:42:ae:56:53:64:d7:ab:3f:85:0f:55:2a:5c:81:0f:dc:
aa:ac:ca:59:1d:5d:68:b8:e0:d5:f8:fd:67:74:9a:cb:5a:27:
d0:db:4c:ab:1e:b8:cc:1c:2a:d0:35:94:65:7f:98:a4:d1:ed:
0b:64:54:f9:c3:ee:00:59:58:77:69:47:1e:1c:8d:23:41:d1:
d6:a6:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:09:59 2025 by rpki-client