Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LEE4k9atZw4VR9Dl9F5Ld9oEJxQ.roa
File: LEE4k9atZw4VR9Dl9F5Ld9oEJxQ.roa (raw, json)
Hash identifier: 6+V45Pn6Z6BfCPku9QRmL3ZedeaD5oTBDZQAWLhV+UA=
Subject key identifier: 2C:41:38:93:D6:AD:67:0E:15:47:D0:E5:F4:5E:4B:77:DA:04:27:14
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA35B97BC5749CE7F578DA3BA3C507
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LEE4k9atZw4VR9Dl9F5Ld9oEJxQ.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41749
IP address blocks: 86.106.134.0/24 maxlen: 24
89.43.54.0/24 maxlen: 24
89.44.125.0/24 maxlen: 24
89.47.42.0/24 maxlen: 24
89.47.88.0/24 maxlen: 24
188.241.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:35:b9:7b:c5:74:9c:e7:f5:78:da:3b:a3:c5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c413893d6ad670e1547d0e5f45e4b77da042714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:ed:b2:44:64:ee:53:65:8d:a3:17:19:e2:
0f:d2:e8:66:86:c4:6a:ff:c9:ae:ba:0b:b3:31:d8:
1c:08:7f:fe:47:3f:96:5a:87:89:e8:37:24:c8:95:
ad:81:09:cd:15:4f:fa:9f:ba:bc:a4:42:fb:8a:c6:
53:b0:d5:bb:33:44:18:cd:b6:a8:81:98:2b:42:18:
16:d0:f8:33:43:c5:8c:c5:af:aa:2a:82:2c:44:f3:
d3:c6:e0:6f:1e:ef:0e:8d:5f:c4:cb:5d:5e:d5:a5:
7c:33:6e:c7:ad:9d:89:b2:9f:bb:40:91:8a:0e:21:
24:27:bc:3d:cc:5d:9a:38:45:df:6b:99:62:57:4a:
4c:86:a4:93:3a:96:88:ec:d6:1b:26:e3:92:52:7f:
90:ab:c2:78:e8:44:3a:c5:eb:a4:eb:b4:48:9e:54:
15:98:46:bc:76:19:a1:22:cf:14:f1:4c:ec:e4:7b:
2e:ea:19:7e:33:ff:62:a4:6f:d8:5c:23:6d:e9:ba:
04:8e:80:6a:36:4b:1b:6e:df:c6:6c:30:d6:1a:49:
ca:bd:8a:7b:4e:91:68:65:54:2e:0e:dd:35:ec:10:
68:e5:1c:d7:9d:a1:ec:ef:d7:9b:da:97:ba:ce:f4:
fe:23:89:98:c0:95:0c:dc:d5:d0:8d:57:d9:96:68:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:38:93:D6:AD:67:0E:15:47:D0:E5:F4:5E:4B:77:DA:04:27:14
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LEE4k9atZw4VR9Dl9F5Ld9oEJxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.134.0/24
89.43.54.0/24
89.44.125.0/24
89.47.42.0/24
89.47.88.0/24
188.241.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:88:6a:52:c1:9d:ae:77:4e:19:af:79:72:0f:be:90:2d:e5:
09:83:db:b9:e0:b8:e8:01:93:06:84:8f:2a:5a:e3:70:57:d1:
da:a4:5d:e2:e3:22:d5:1a:03:0b:8c:02:3b:b1:4d:3f:1c:9b:
bd:2b:ce:67:5a:70:0b:04:5a:5e:1d:3f:8a:b0:d6:8c:d4:82:
14:c7:36:eb:ca:27:4c:d6:f6:38:d9:37:cc:b9:0c:36:16:b7:
9c:da:9a:11:17:3c:16:0e:27:0e:a5:ac:e0:48:6f:f9:68:63:
d1:fa:e5:4c:52:eb:91:68:30:d6:ca:4d:2a:06:29:57:81:6a:
23:43:97:14:f5:3f:42:6f:07:92:ad:66:c4:9a:e0:59:21:ba:
5c:33:79:e8:93:3c:82:41:d2:eb:b7:5a:e6:00:6a:c2:61:d7:
70:db:24:65:27:31:4c:97:eb:b6:58:fc:0c:74:b5:85:f5:b2:
43:90:5b:ea:e8:d3:97:df:56:a0:a7:03:e8:b8:72:06:02:fb:
2d:41:35:8e:17:69:7e:89:b7:1f:cb:b5:46:45:8c:cf:d6:ed:
5c:b7:23:93:22:a5:90:6f:b7:3d:c8:af:1a:56:a3:9d:ad:0d:
93:90:26:88:67:7f:05:35:89:fc:53:89:96:ea:e2:a5:45:f6:
e3:95:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:41 2025 by rpki-client