Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/lnM8FCGF8fRbpieUbEQd8sXstK8.roa
File: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (raw, json)
Hash identifier: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=
Subject key identifier: 96:73:3C:14:21:85:F1:F4:5B:A6:27:94:6C:44:1D:F2:C5:EC:B4:AF
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 01942520A00626A7F404C91370F3F1D50542
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/lnM8FCGF8fRbpieUbEQd8sXstK8.roa
Signing time: Thu 02 Jan 2025 03:48:02 +0000
ROA not before: Thu 02 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9044
IP address blocks: 194.147.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a0:06:26:a7:f4:04:c9:13:70:f3:f1:d5:05:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Jan 2 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96733c142185f1f45ba627946c441df2c5ecb4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:10:f2:84:c6:68:75:51:ab:66:10:30:9d:
c1:14:f7:b8:a6:4d:25:07:8b:03:a7:e9:6d:5c:aa:
ed:1c:6b:12:d8:4a:0c:89:3e:e7:a9:e8:42:5e:e0:
bc:da:d5:29:ad:6e:06:d6:62:2c:9c:b5:45:68:9b:
5f:e4:75:a3:e4:5e:cd:d5:3b:e1:2b:5c:40:f2:57:
24:53:61:29:b0:15:7c:bf:69:54:65:ab:16:85:bd:
e8:6f:a4:60:21:fe:83:39:e8:7b:9f:46:54:83:98:
f5:0d:e9:65:e4:3c:ad:35:5d:42:a3:93:cf:a8:95:
30:79:c6:9b:0f:39:ee:cd:14:fa:85:59:c6:5f:cd:
6e:7a:e7:34:9e:f5:58:ab:46:6b:24:29:2e:bf:a6:
aa:29:3b:bb:a0:3c:01:18:e4:7a:f9:7a:9a:1a:83:
4d:08:cd:4e:13:9c:08:53:c3:48:1a:58:01:98:b7:
f7:17:40:8f:00:0e:45:64:b4:82:87:bc:d6:62:80:
45:9d:47:4a:55:55:72:c0:c5:4d:93:69:6d:dc:d1:
2d:94:7d:b9:86:d3:82:49:06:a4:03:55:d9:1b:f8:
cb:63:52:9e:36:86:59:ad:43:1d:60:29:5e:fb:3f:
fd:b0:2f:4b:a1:ac:8d:a1:bf:41:df:d8:36:46:85:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:3C:14:21:85:F1:F4:5B:A6:27:94:6C:44:1D:F2:C5:EC:B4:AF
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/lnM8FCGF8fRbpieUbEQd8sXstK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4e:80:38:17:bc:82:51:56:af:59:c2:d4:48:72:c3:4d:26:
44:db:4c:f3:a7:23:be:1d:13:8d:43:59:3a:02:ac:6e:61:7f:
43:b2:f4:46:7d:bc:8b:81:51:5a:d4:dd:25:ed:ab:69:7a:7d:
4c:c8:e6:75:a4:b8:79:e4:6b:25:29:3b:c7:fe:e0:d0:f0:86:
9d:93:07:86:14:61:e3:e7:a5:af:4f:ce:54:af:f6:4c:20:77:
8d:84:43:88:ab:a6:83:76:b1:50:cc:88:07:fc:5a:b6:46:fc:
42:e4:b9:0d:88:a9:fe:4d:d9:de:b0:62:bd:9b:75:6d:35:40:
9a:83:c0:02:a8:98:6a:c2:f2:0f:ca:16:90:42:be:05:e2:99:
cf:e4:de:4e:38:b9:ea:2b:09:41:29:b8:41:82:d1:0a:2d:5b:
ee:7a:fe:19:d0:c6:da:e6:0d:2a:9f:98:13:02:87:20:20:f7:
05:4c:32:2f:59:8c:c0:a8:01:7e:e9:f1:64:0b:f1:73:fc:ac:
0c:f4:10:0e:73:22:f2:95:11:06:bd:56:ef:f5:33:ef:6a:15:
ed:b5:fa:89:4a:f5:6d:41:84:bd:4c:d8:79:52:81:b0:bb:43:
e3:ca:ff:a2:54:36:68:a1:7f:d8:90:8c:b3:ea:fb:c4:38:46:
16:25:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:27 2025 by rpki-client