Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa
File: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (raw, json)
Hash identifier: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=
Subject key identifier: 2F:C6:2C:AC:E2:E5:C0:EE:BA:06:C4:04:12:D2:BA:2E:0F:1A:52:AA
Certificate issuer: /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial: 019424B28576BF05047369B6348F8A0938E6
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa
Signing time: Thu 02 Jan 2025 01:47:46 +0000
ROA not before: Thu 02 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15694
IP address blocks: 185.123.124.0/23 maxlen: 23
185.123.126.0/23 maxlen: 23
2a06:af00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:85:76:bf:05:04:73:69:b6:34:8f:8a:09:38:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Validity
Not Before: Jan 2 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fc62cace2e5c0eeba06c40412d2ba2e0f1a52aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:83:48:41:4a:c4:c4:c4:ad:8f:1b:ce:cd:
34:2e:e8:21:7c:bf:e4:7a:33:68:82:80:61:0b:78:
bb:54:bf:01:de:c0:16:86:49:68:b3:1b:83:21:64:
3d:e4:88:09:a3:aa:79:ad:30:d3:27:35:77:1d:f0:
52:10:f7:43:06:c8:aa:66:2e:14:8a:82:13:a5:e6:
db:21:c7:51:ff:68:53:ba:ef:11:7c:e6:3d:fa:67:
a4:b9:e6:ff:86:37:f5:87:8d:02:c2:4a:e9:c2:b0:
91:8b:f5:4f:d2:37:ad:3d:00:26:44:a0:1c:86:3e:
db:46:3c:55:0f:27:9c:04:a9:4e:45:66:e9:d5:68:
45:6e:0b:62:6c:cb:5b:76:6b:b3:21:b0:e7:de:ee:
ac:5e:8d:fb:7d:8f:25:29:2f:bd:ae:e3:05:47:10:
06:e1:c7:36:1d:08:3b:ac:7f:05:ee:f3:f0:bb:18:
d7:56:a3:59:8c:b3:3a:c9:70:4a:b7:ca:8b:ee:7e:
b4:f6:c6:79:a5:97:07:3e:21:57:31:83:5b:46:83:
44:54:0f:e4:ca:61:ac:fd:df:74:88:a5:79:0c:42:
bf:77:3e:c8:de:f7:7f:c9:3a:57:44:49:88:c6:15:
29:cd:d3:e1:3f:a3:ca:f0:ce:33:50:07:50:7c:5b:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:2C:AC:E2:E5:C0:EE:BA:06:C4:04:12:D2:BA:2E:0F:1A:52:AA
X509v3 Authority Key Identifier:
keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.124.0/22
IPv6:
2a06:af00::/29
Signature Algorithm: sha256WithRSAEncryption
24:22:cc:7f:76:53:f7:a3:8d:21:4f:38:09:c3:d5:e2:b4:d4:
c3:3c:c9:a6:49:b1:36:1e:e7:84:33:58:fd:f8:40:66:61:bc:
76:70:7b:6a:eb:4a:94:60:1f:61:87:5f:b6:87:3a:c6:d3:8c:
00:5d:3e:2f:5b:18:d8:3d:0a:f4:18:b0:05:9b:a5:3b:ee:f9:
8e:92:e7:2e:d8:89:a0:7b:a1:bb:c0:73:a4:5d:4b:b6:7a:35:
08:fa:72:15:5f:6c:7f:79:1c:71:1a:1d:f3:a7:08:fd:54:1e:
2e:e4:7d:b9:0c:07:99:c1:4a:e7:2e:7a:2b:ff:f6:79:f0:6c:
e7:07:68:84:8b:09:9c:4c:d3:8a:1e:a8:4e:63:92:67:e5:43:
55:8e:9a:31:3b:20:22:62:14:19:aa:f1:a6:b0:a6:34:cc:b9:
77:10:1d:70:50:dc:f5:08:3c:38:fb:de:e0:d3:e0:75:84:ce:
0d:c3:f4:92:74:9b:b2:05:ad:15:9b:ae:80:75:ee:37:e6:27:
e3:56:e7:77:f0:96:46:0f:09:f9:c3:90:47:a1:3e:30:0e:79:
fc:be:13:0b:6a:4e:b0:86:1a:63:0f:7c:2c:4d:b9:7d:19:24:
52:2a:3f:46:a5:33:33:09:2d:ae:a7:0e:c2:89:93:eb:65:b8:
2f:4b:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:02:32 2025 by rpki-client