Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/LBBRl1_5PTCAndMsefaH2qIgsWI.roa
File: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (raw, json)
Hash identifier: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=
Subject key identifier: 2C:10:51:97:5F:F9:3D:30:80:9D:D3:2C:79:F6:87:DA:A2:20:B1:62
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01942067BACFCC886866F75846D44637C792
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/LBBRl1_5PTCAndMsefaH2qIgsWI.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 185.255.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ba:cf:cc:88:68:66:f7:58:46:d4:46:37:c7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c1051975ff93d30809dd32c79f687daa220b162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:a5:85:5b:98:77:fb:b0:6c:fd:d5:b5:fc:
cb:03:ad:7e:30:62:7d:3f:92:55:be:a5:9f:8d:d9:
ab:c0:0d:18:5e:46:31:13:bb:ee:f8:76:2b:5a:0a:
ad:b7:68:b8:66:6f:e9:7a:0b:82:81:22:46:0f:ff:
31:59:c4:7a:2e:eb:23:04:84:2f:47:15:13:ca:f0:
98:37:dd:af:e9:dc:5b:15:0d:f9:95:12:dd:dc:d5:
b9:2e:91:df:bb:85:78:a9:48:55:43:d8:6c:8e:bc:
14:00:56:01:a0:d7:3b:67:63:de:82:7b:6f:c6:6e:
fa:f0:6c:7c:1c:27:af:ba:41:19:1c:47:65:76:9a:
05:38:c5:32:a3:ac:a9:8c:e0:cb:42:94:87:6e:6f:
44:d5:56:0d:e9:b6:9c:7c:dd:57:07:f4:f1:e0:08:
c7:c6:58:8e:9b:e9:b3:94:fc:d0:35:41:85:96:ed:
1a:3b:1d:b8:ff:5e:8d:66:27:d2:4e:f0:a3:19:9b:
1d:11:c8:9e:e0:a1:c0:a1:3d:d8:c8:a4:d1:3e:20:
28:e3:ff:0b:c4:bf:b3:5a:e5:3a:3a:6c:9e:a1:d9:
2a:12:0e:28:38:99:d6:24:8c:24:fe:e3:b1:11:bc:
18:3c:37:93:88:96:3e:11:f0:16:c4:31:9d:b0:4e:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:51:97:5F:F9:3D:30:80:9D:D3:2C:79:F6:87:DA:A2:20:B1:62
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/LBBRl1_5PTCAndMsefaH2qIgsWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
59:fa:f6:c5:69:e0:59:10:34:bb:1c:45:dc:c3:5a:1e:cc:a7:
cf:aa:70:66:d8:c4:98:28:48:f0:62:6f:9b:40:9f:d7:6f:4a:
24:ee:f4:c6:c3:85:e0:de:96:20:74:0b:c8:a3:15:3b:f5:36:
68:5d:cf:e9:b2:b7:fa:2e:83:8f:a2:a3:8f:d1:ca:ff:65:e2:
bc:b3:1f:7f:cf:16:13:ee:83:5a:49:0f:59:ce:ce:81:ea:5c:
6b:d6:16:33:ec:53:c0:9e:aa:e3:e8:ea:f9:3c:54:54:37:15:
cb:c9:b3:de:e3:00:87:b0:9d:10:36:b0:7d:cc:2c:fb:49:46:
3f:e8:12:fb:3b:db:ff:02:5d:ff:85:ce:3e:3a:60:61:60:d3:
d8:41:6e:64:68:18:3a:c6:39:fb:ed:55:54:5d:d6:b2:cb:78:
43:d3:c6:b5:17:5f:09:c1:aa:65:cd:9d:ac:23:50:2d:fe:41:
59:82:5e:88:78:9c:dc:6e:33:af:7a:b1:5e:09:0f:bf:ec:f4:
71:e9:cc:0c:98:8d:29:57:3c:e8:0f:d7:31:43:63:c8:c3:cb:
a1:0b:4c:52:6c:c5:68:38:14:ac:b7:c8:e2:e9:2f:c9:6a:67:
47:11:fa:11:59:29:a8:7e:5d:c5:9a:86:91:32:57:05:3a:61:
37:6e:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:32 2025 by rpki-client