Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/LNJOsnr56BpDhx0zCSJoGF_8kg4.roa
File: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (raw, json)
Hash identifier: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=
Subject key identifier: 2C:D2:4E:B2:7A:F9:E8:1A:43:87:1D:33:09:22:68:18:5F:FC:92:0E
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01948018095EE858FFEF18F1B47ADC45890E
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/LNJOsnr56BpDhx0zCSJoGF_8kg4.roa
Signing time: Sun 19 Jan 2025 19:44:06 +0000
ROA not before: Sun 19 Jan 2025 19:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 185.113.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:80:18:09:5e:e8:58:ff:ef:18:f1:b4:7a:dc:45:89:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 19 19:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cd24eb27af9e81a43871d33092268185ffc920e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:9e:6f:96:d0:03:7b:0d:f6:a5:f4:24:95:
38:9b:68:e4:eb:79:09:6c:f8:37:7c:0d:62:13:5b:
a7:f2:c0:9c:e3:f8:6e:01:07:84:8d:f9:b4:74:5a:
ee:e8:53:9b:8b:bf:60:c7:28:0b:93:6d:cf:44:8d:
16:57:0e:8c:b7:9a:13:98:7a:5e:1c:d7:77:ad:d8:
78:62:5d:03:2d:2f:fa:d0:75:7e:08:ee:36:21:55:
2b:d2:cd:36:b5:96:e6:86:d4:cf:d9:85:6d:67:7b:
c4:fd:94:ce:9d:09:0a:5a:5b:9e:3c:57:ca:27:18:
58:c5:3b:07:f0:a4:a9:96:e9:55:16:f5:b3:0d:9c:
d6:6c:d1:63:2b:84:29:cb:f0:d8:b4:e1:9e:15:b4:
2d:12:28:1a:d9:72:d2:46:89:5d:76:23:7e:5b:c4:
33:9a:23:11:9f:ab:f5:55:eb:c6:b7:1b:a5:8b:ad:
da:ae:f5:4c:d8:0c:f2:7d:20:76:c6:6d:53:77:56:
ea:4c:d0:a3:67:60:fd:ab:7c:08:7f:9e:72:75:bd:
8e:3e:f4:fb:56:13:06:fd:a8:e8:7c:95:5a:1a:75:
5a:a0:79:31:41:58:88:b8:03:5c:eb:29:0b:1a:e4:
8d:ff:7b:d3:02:bb:0c:25:fa:cb:1a:a6:3a:e5:32:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:4E:B2:7A:F9:E8:1A:43:87:1D:33:09:22:68:18:5F:FC:92:0E
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/LNJOsnr56BpDhx0zCSJoGF_8kg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:86:5b:c7:38:4a:06:2f:93:d5:63:5e:6b:f2:31:a7:c5:20:
f9:ff:5a:72:2d:33:a4:be:fb:33:5c:45:88:a6:d4:fc:db:bc:
38:d8:92:c1:48:1d:31:4d:3a:33:86:fb:af:f5:73:73:ef:be:
aa:e0:47:7b:49:1e:9b:b7:cc:0e:2e:a0:3c:38:ad:e3:ac:b1:
8e:d5:09:87:31:69:57:8f:61:ad:7f:fa:3e:7f:dc:c7:28:cd:
a9:16:98:a2:30:d0:c7:a3:a6:56:d8:3e:1d:76:87:ae:59:14:
0d:96:42:bc:3b:70:78:22:3c:10:96:e9:95:23:61:a3:70:2b:
fb:44:78:a9:d4:de:b6:5d:dc:c7:ad:4d:90:df:76:ae:92:d9:
fc:d5:a9:71:f3:02:da:39:f9:d7:83:07:e8:f0:d0:fa:2b:c0:
06:18:31:5f:b5:5c:ac:21:15:ac:81:40:fd:91:ed:4c:35:29:
55:24:1a:a7:3e:8d:c4:63:38:bf:8b:79:a2:08:67:9f:d3:01:
d4:ff:ec:a7:65:ec:8a:a7:91:bd:2e:c5:6d:e7:a0:e9:d0:e2:
42:1f:d2:bc:8c:3d:72:0c:1e:54:59:b0:f3:4c:ca:c7:b6:4c:
ab:b2:02:ef:d0:30:c8:55:09:f2:db:2d:c9:15:a4:9c:70:db:
8d:47:8d:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSAGAle6Fj/7xjxtHrcRYkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjUwMTE5MTk0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2QyNGViMjdhZjllODFhNDM4NzFkMzMwOTIyNjgxODVmZmM5MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z+eb5bQA3sN9qX0JJU4m2jk63kJ
bPg3fA1iE1un8sCc4/huAQeEjfm0dFru6FObi79gxygLk23PRI0WVw6Mt5oTmHpe
HNd3rdh4Yl0DLS/60HV+CO42IVUr0s02tZbmhtTP2YVtZ3vE/ZTOnQkKWluePFfK
JxhYxTsH8KSplulVFvWzDZzWbNFjK4Qpy/DYtOGeFbQtEiga2XLSRolddiN+W8Qz
miMRn6v1VevGtxuli63arvVM2AzyfSB2xm1Td1bqTNCjZ2D9q3wIf55ydb2OPvT7
VhMG/ajofJVaGnVaoHkxQViIuANc6ykLGuSN/3vTArsMJfrLGqY65TLgMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzSTrJ6+egaQ4cdMwkiaBhf/JIOMB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvTE5KT3NucjU2QnBEaHgwekNTSm9HRl84a2c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXFCMA0G
CSqGSIb3DQEBCwUAA4IBAQDZhlvHOEoGL5PVY15r8jGnxSD5/1pyLTOkvvszXEWI
ptT827w42JLBSB0xTTozhvuv9XNz776q4Ed7SR6bt8wOLqA8OK3jrLGO1QmHMWlX
j2Gtf/o+f9zHKM2pFpiiMNDHo6ZW2D4ddoeuWRQNlkK8O3B4IjwQlumVI2GjcCv7
RHip1N62XdzHrU2Q33auktn81alx8wLaOfnXgwfo8ND6K8AGGDFftVysIRWsgUD9
ke1MNSlVJBqnPo3EYzi/i3miCGef0wHU/+ynZeyKp5G9LsVt56Dp0OJCH9K8jD1y
DB5UWbDzTMrHtkyrsgLv0DDIVQny2y3JFaSccNuNR42F
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:55 2025 by rpki-client