Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/LHDFKCfWLJp2mBfByLfhuS_iDkY.roa
File: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (raw, json)
Hash identifier: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=
Subject key identifier: 2C:70:C5:28:27:D6:2C:9A:76:98:17:C1:C8:B7:E1:B9:2F:E2:0E:46
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019425FC2572BE1D977BAE07935FDD996EAB
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/LHDFKCfWLJp2mBfByLfhuS_iDkY.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3254
IP address blocks: 62.244.0.0/18 maxlen: 18
62.244.48.0/22 maxlen: 22
193.193.192.0/19 maxlen: 19
193.193.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:25:72:be:1d:97:7b:ae:07:93:5f:dd:99:6e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c70c52827d62c9a769817c1c8b7e1b92fe20e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:3f:14:56:af:0f:dc:bf:4f:d4:8d:f2:66:
a5:b9:8e:a7:53:95:d7:4d:b2:08:a5:b0:e3:50:7f:
f2:50:0c:b4:29:fa:a8:85:c4:bc:a7:31:56:d3:ab:
59:ea:43:62:2b:68:cf:e6:e3:cc:c4:56:a9:1d:1f:
5c:1b:2b:4c:86:f6:f3:4b:c0:e1:e1:6f:d6:d3:7e:
46:26:55:d3:40:77:39:cd:a7:64:e9:4f:3d:5f:c1:
81:18:8f:55:a0:7b:25:a4:68:de:10:ee:91:bc:83:
a4:e7:2e:76:d6:59:db:30:f1:ff:79:06:e3:4f:6f:
f3:2b:e4:66:88:4d:93:74:f7:96:f9:bd:68:e6:ed:
8c:50:9a:77:95:37:32:f0:39:6a:1d:15:0f:81:75:
9e:c8:9c:b1:14:c2:9a:94:b3:c8:b4:91:23:54:4c:
72:c0:1d:96:08:08:52:70:5a:11:7c:33:ef:f1:07:
ca:70:34:e1:23:fd:2a:99:10:37:6d:67:bc:7d:56:
3e:90:52:ed:ec:cf:10:cc:4d:16:0d:54:a0:88:d8:
66:f9:43:3f:61:f0:e3:b5:74:5e:a7:fb:82:79:de:
0c:3a:5c:2f:28:9e:94:af:2c:bf:19:a0:60:2a:a1:
e6:33:87:c1:ee:a9:b1:47:2e:91:8b:0e:dd:27:9a:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:C5:28:27:D6:2C:9A:76:98:17:C1:C8:B7:E1:B9:2F:E2:0E:46
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/LHDFKCfWLJp2mBfByLfhuS_iDkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.0.0/18
193.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
81:0a:0d:e0:3b:6f:fb:0e:99:14:5d:e0:5d:32:67:e5:8b:f8:
83:b3:1d:2b:7b:c2:f6:d8:97:12:d3:2b:3f:22:de:7d:49:7e:
65:37:6a:9d:e7:39:bf:33:6f:f4:c5:aa:1d:52:21:93:d3:d8:
2b:a0:68:b3:4a:46:1d:9d:27:62:44:e2:1f:ae:d3:9f:1f:23:
67:d5:88:0f:41:7e:5d:86:a8:ed:27:b8:35:b6:0b:88:0b:5f:
b2:68:26:80:0e:bf:db:b0:cc:a2:42:99:25:8a:5f:88:cb:46:
57:7a:98:97:d4:65:2d:eb:33:17:b4:62:aa:01:b5:43:d2:49:
e3:4a:e7:0b:ee:f5:dc:c1:fe:ee:73:fb:4e:d9:da:2a:fe:55:
ad:4e:04:30:c0:9f:a1:bd:95:a7:90:e2:5c:1d:56:a5:89:c6:
c3:30:43:a0:df:3e:40:9e:7f:a7:ab:56:28:37:9a:57:19:8e:
25:33:0e:6a:35:51:8b:58:0e:fd:5a:7b:d2:12:7d:23:26:0d:
ab:ff:0e:f5:d0:b4:7d:30:24:5b:e1:8a:a3:36:bd:0d:e7:cd:
33:42:5d:55:8c:72:f9:af:60:92:76:a5:ab:7d:aa:eb:2d:a4:
65:67:80:07:1c:09:5b:db:e3:b2:1f:a5:1e:b2:c3:c5:ef:d6:
ce:a4:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:03 2025 by rpki-client