Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/LcFyOrobUrG-q36ENaVBWkIxyec.roa
File: LcFyOrobUrG-q36ENaVBWkIxyec.roa (raw, json)
Hash identifier: aiGhAwWl1vo/+1mZ5amS0ElRqf0Ru78HcL61kI16D7M=
Subject key identifier: 2D:C1:72:3A:BA:1B:52:B1:BE:AB:7E:84:35:A5:41:5A:42:31:C9:E7
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 0194258FA61A0D1EBFD609BDC17821C8051F
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/LcFyOrobUrG-q36ENaVBWkIxyec.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39402
IP address blocks: 91.188.208.0/24 maxlen: 24
91.188.209.0/24 maxlen: 24
91.188.210.0/24 maxlen: 24
91.188.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a6:1a:0d:1e:bf:d6:09:bd:c1:78:21:c8:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dc1723aba1b52b1beab7e8435a5415a4231c9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:d6:4b:9b:69:de:d9:ac:ca:ae:b9:c9:3c:
59:8b:e4:ed:ec:85:46:7d:fd:56:9b:02:20:9e:65:
74:84:7f:94:99:cb:d9:fe:d3:5e:13:07:69:62:35:
39:02:5c:fd:1a:49:21:3d:8e:ec:2b:93:59:04:22:
d3:32:0b:85:23:4a:ff:10:80:3d:2e:52:e2:18:2d:
d9:94:9b:c4:f1:23:c7:2c:b2:d7:51:dd:e7:d8:06:
d2:e6:b0:c1:c2:ca:07:8e:07:c9:d1:7d:fc:f1:ca:
9f:da:92:82:b4:eb:45:b4:48:67:d1:65:85:34:c9:
5e:7f:e9:63:a5:a0:d2:6b:03:7b:38:a0:b1:24:8e:
1c:a3:07:78:32:91:c8:08:f8:66:8a:43:af:6a:9b:
be:cf:22:48:2e:bf:e5:2e:88:48:ad:bb:81:42:6c:
69:f4:58:bf:08:3e:46:9f:06:1c:65:8c:91:30:e4:
40:b5:d6:e0:ac:18:5d:de:a9:f7:d3:7d:b5:7a:76:
12:b8:27:a5:dc:4d:60:42:1b:a3:ee:7f:1f:f7:97:
04:64:81:8f:5a:dd:c4:a8:d2:d8:a3:69:29:da:a4:
ec:5b:90:58:fb:c4:ca:62:9f:2c:3a:06:46:d1:85:
b2:a6:0c:a7:39:02:84:38:b9:cb:7a:b9:76:94:6d:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:72:3A:BA:1B:52:B1:BE:AB:7E:84:35:A5:41:5A:42:31:C9:E7
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/LcFyOrobUrG-q36ENaVBWkIxyec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:67:c3:c0:2d:33:7c:2a:c1:4e:2c:0f:26:4f:e6:e8:10:a4:
ee:27:71:69:7a:cf:95:a3:c5:02:6c:77:c7:bf:66:ac:f9:47:
62:76:a8:8d:d4:4f:2f:b3:f1:48:f5:b4:a4:e7:ee:5a:a5:1a:
9c:94:62:48:8f:7c:77:f8:46:5e:03:d1:47:48:a1:f2:9c:fe:
6d:e4:0d:a0:3a:80:1b:84:55:ee:37:54:d1:f5:81:37:32:c1:
fd:b2:35:d3:d8:35:ca:e3:04:8b:bf:7d:d1:61:9a:7a:c5:11:
ac:78:aa:8e:a0:89:62:4d:ad:36:6d:ff:78:cc:d8:7a:d1:38:
9a:16:71:c4:7a:86:ad:2f:d9:54:d4:0a:cc:e6:07:b4:e9:61:
78:95:73:43:64:91:c1:c4:8c:6e:17:ec:b8:30:23:7d:2e:d6:
d5:91:b8:32:97:1c:c3:68:f2:9b:54:34:9a:b0:b7:f0:48:e9:
0a:e7:eb:79:fc:14:31:ea:b4:36:ea:29:c3:02:1c:38:49:cc:
76:9c:8b:03:ab:71:c2:ca:4b:cd:54:c1:46:0d:df:73:04:64:
77:26:30:93:4d:83:02:bd:dc:37:da:7b:27:01:15:a5:2b:92:
e9:61:1c:72:73:04:42:bd:25:af:ad:e9:9e:31:a5:2a:86:00:
a7:75:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:06:57 2025 by rpki-client