Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LB1GcsyU4zrivtmh4Y-5ahuJoPY.roa
File: LB1GcsyU4zrivtmh4Y-5ahuJoPY.roa (raw, json)
Hash identifier: jhdMXHkRLxzA0l81lJjuyLRhF979kNoecc7T4ENc4GY=
Subject key identifier: 2C:1D:46:72:CC:94:E3:3A:E2:BE:D9:A1:E1:8F:B9:6A:1B:89:A0:F6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019427B58550512CB2C8257AAF4697E56866
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LB1GcsyU4zrivtmh4Y-5ahuJoPY.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56815
IP address blocks: 185.140.240.0/24 maxlen: 24
185.140.241.0/24 maxlen: 24
185.140.242.0/24 maxlen: 24
185.140.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:85:50:51:2c:b2:c8:25:7a:af:46:97:e5:68:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c1d4672cc94e33ae2bed9a1e18fb96a1b89a0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:2c:c4:25:3b:18:70:60:38:1c:cd:51:39:
10:a2:93:eb:13:f6:7a:7c:ea:60:48:69:d0:15:92:
43:71:42:5a:58:a7:89:a6:53:09:96:9a:93:80:34:
bd:80:d3:78:fc:70:65:56:c3:1b:b1:c4:c4:e7:b0:
4b:31:60:e2:14:89:ee:f8:f0:54:ae:2b:a5:42:26:
4c:cd:5e:9c:d3:ed:d2:54:9a:19:a3:ba:4a:fb:d5:
3b:e1:2d:11:52:17:fd:1a:03:db:ec:ea:c2:56:17:
f2:c4:b3:db:21:cd:27:ff:8a:eb:82:b4:11:d5:b8:
db:84:73:b3:86:e7:19:87:a3:54:42:a0:16:9f:01:
12:bc:f6:f8:93:33:51:f8:ad:99:6d:e6:f8:83:3b:
95:05:c0:8a:b5:6f:ef:99:42:2b:8b:0d:ea:32:d6:
0d:7d:05:4a:21:de:41:3f:c5:f4:6c:8e:65:4c:a8:
c8:10:27:ed:38:d1:52:d9:94:43:e3:39:41:99:60:
2c:f7:f0:66:a8:63:d6:23:cf:8f:46:e2:8b:fd:13:
91:d9:bb:8e:7a:37:09:df:4a:50:2b:fd:72:d6:87:
74:7f:dc:20:24:11:c5:b2:5c:c8:ea:02:b1:ae:46:
4b:9f:55:c6:dd:59:bc:3e:9b:a6:f6:a3:95:cf:3a:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:46:72:CC:94:E3:3A:E2:BE:D9:A1:E1:8F:B9:6A:1B:89:A0:F6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LB1GcsyU4zrivtmh4Y-5ahuJoPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:fd:5a:7f:8f:00:49:b9:f9:7b:b8:67:46:ef:61:51:ed:b6:
a2:9d:8f:d4:18:7f:ea:75:b9:b5:b5:5b:ce:4c:91:b8:f8:92:
89:9e:d3:c4:cc:dd:a1:42:89:0e:e6:bd:ac:20:40:6a:82:8e:
1e:10:53:f3:f9:94:70:81:bb:58:49:fe:8f:e1:3f:2a:85:c6:
b3:a9:9e:21:da:5b:26:11:6a:5c:a4:d9:2d:a4:54:2a:50:66:
41:36:8b:01:f3:e9:f4:a9:17:f7:81:4d:09:94:cc:84:e5:fd:
a5:ce:ec:b0:8f:6e:b8:0c:5f:5a:3d:34:6c:63:fa:5b:17:3a:
6e:5b:74:f5:e5:04:09:d9:ce:ae:76:c9:57:49:07:bb:f0:83:
ec:46:c1:c7:e3:75:ad:e2:ff:73:14:b9:7f:8b:42:3c:fd:08:
0a:31:4b:7f:3f:6f:29:35:66:da:1a:e8:25:c6:6d:c9:a8:cc:
c7:76:8c:55:89:1f:35:80:c9:80:cd:3d:0f:f0:70:81:17:d6:
e4:42:94:5c:99:4c:fe:be:73:8d:0d:5a:2f:63:98:d2:e3:b0:
d7:b9:72:60:79:fa:93:eb:e4:97:ef:b7:ea:96:e1:ac:f6:88:
32:64:20:ee:d5:3d:5d:83:99:4e:5e:c9:90:16:7a:ba:85:2e:
f8:7c:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:47:50 2025 by rpki-client