Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa
File: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (raw, json)
Hash identifier: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=
Subject key identifier: 2D:BE:3F:C3:7C:68:DD:BD:91:E4:D5:02:CA:7B:A1:61:57:DD:F0:5D
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 019425222E6FFF290A51F046B5A5D257A659
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60076
IP address blocks: 193.107.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2e:6f:ff:29:0a:51:f0:46:b5:a5:d2:57:a6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dbe3fc37c68ddbd91e4d502ca7ba16157ddf05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:19:f5:35:27:c0:97:49:a0:7e:70:c3:9e:
12:ef:ce:c7:39:ed:e0:c9:22:1a:95:85:d4:dd:76:
69:b9:d4:cf:fb:49:a2:b2:f4:e6:28:57:b6:46:5f:
48:ed:74:b8:a1:af:bf:da:b1:05:93:8f:51:b1:12:
55:24:fe:49:b1:91:b3:52:b2:0d:ad:6d:ea:89:1e:
3c:11:67:f2:95:7e:28:a1:9a:02:7e:48:c6:cf:d7:
1b:47:c6:89:71:73:ab:ba:c5:d0:7d:00:91:d8:06:
a9:17:54:22:89:30:27:d8:50:31:46:4c:5d:78:01:
d0:85:71:fb:db:c7:d3:1b:f1:6c:5e:86:32:20:b6:
14:77:29:2e:27:68:3f:49:36:f5:a1:23:82:07:37:
e2:f5:d8:bd:8a:85:fa:38:38:c4:56:a1:5d:e4:fa:
d1:ff:99:25:d1:66:ce:f9:bb:05:81:09:eb:8b:3e:
7e:92:56:96:1d:b2:91:a6:24:46:1b:0a:5c:c6:55:
41:f5:f2:94:0d:60:bf:02:76:ce:9c:25:db:61:9c:
03:57:48:81:44:03:33:ac:92:1c:25:ff:34:2f:37:
78:72:3c:57:31:24:67:66:78:50:89:3a:98:c3:34:
b0:a0:b8:6a:a8:f8:7f:85:0a:7e:ef:c9:ef:8c:b1:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:3F:C3:7C:68:DD:BD:91:E4:D5:02:CA:7B:A1:61:57:DD:F0:5D
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:71:ab:fe:34:ca:48:8c:04:0d:f9:ce:bb:a0:88:d8:78:38:
65:83:93:e4:4c:a4:30:c8:96:05:41:5b:50:a8:db:44:e4:f9:
4f:1b:91:7d:01:a8:e7:21:0f:b3:83:cc:2e:ff:22:f4:62:33:
ee:b2:86:1e:bc:99:7d:fe:a2:8e:2e:52:f9:c7:70:f8:48:21:
59:b1:95:74:32:d3:e2:54:a1:24:7a:c3:83:5b:af:0c:2e:dc:
05:d4:64:c0:fd:9e:2a:82:c2:f2:45:0f:21:e5:00:07:0b:27:
9d:e5:6f:89:99:bb:e8:1d:88:e7:02:94:84:f3:98:e9:27:6e:
d2:2c:35:18:99:ee:60:d4:ac:5c:84:6a:89:1d:8f:1d:73:af:
b2:28:01:43:01:72:09:e3:b8:6e:6e:27:92:61:b7:8e:58:d0:
ee:4c:54:95:b3:b8:d2:79:19:8a:94:a1:07:82:20:0b:7b:42:
ff:bb:a5:cc:95:00:e3:bb:bd:ea:11:ce:91:05:dc:f5:0c:50:
bb:7a:6d:7f:dc:d3:60:1d:8e:66:1c:7b:42:dd:9e:d6:34:d0:
b6:d3:e8:2b:9d:1a:0a:b8:21:a2:c2:34:4e:58:f8:47:ea:7b:
d7:58:e6:8c:83:a0:fb:79:ec:73:b1:b3:f0:78:f2:b9:39:14:
00:e8:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:07 2025 by rpki-client