Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LsNdeWlR3nqsIG4MkTOMO_SMQlc.roa
File: LsNdeWlR3nqsIG4MkTOMO_SMQlc.roa (raw, json)
Hash identifier: 0f0qCSGak27Ip3Ek5d2PWQavo+hV2Z0RYfOQfhOxs0g=
Subject key identifier: 2E:C3:5D:79:69:51:DE:7A:AC:20:6E:0C:91:33:8C:3B:F4:8C:42:57
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0B54AB3D037A3578895C3D9B0581
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LsNdeWlR3nqsIG4MkTOMO_SMQlc.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209142
IP address blocks: 185.72.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0b:54:ab:3d:03:7a:35:78:89:5c:3d:9b:05:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ec35d796951de7aac206e0c91338c3bf48c4257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:dc:f3:94:71:42:b2:30:76:5b:a0:36:0e:
b9:49:6e:3d:37:c0:65:7d:18:6b:7d:7b:1c:2e:07:
0f:d3:41:51:1f:7d:4d:00:e1:e6:90:56:50:ef:42:
0f:43:ef:d9:cc:2e:ae:fd:c1:19:25:d0:78:59:05:
35:64:1c:e6:72:6a:c1:ad:34:4b:50:0c:31:03:d8:
b1:0b:dd:fc:de:47:a9:c4:45:b4:3b:3b:18:95:0a:
65:02:f2:e4:5c:14:c8:9e:8c:d3:8d:e5:48:a1:9e:
9c:26:ac:11:c9:99:2e:58:7b:91:b7:7f:89:87:f2:
a4:13:5b:48:db:01:ba:88:9f:03:69:08:a5:36:47:
1a:60:23:46:ed:4a:09:d4:d0:55:1a:aa:c5:90:1b:
f6:78:f4:81:19:8b:8a:c6:9b:65:8a:10:bc:5b:f8:
78:3c:16:42:89:64:29:bc:77:b9:aa:62:dd:f3:57:
de:ec:8f:94:13:e2:2b:89:0a:2d:57:ff:52:b9:7d:
cb:28:e3:9f:aa:99:38:7d:c4:41:6d:0f:3d:ee:a4:
5b:60:72:e3:a0:7e:70:47:e2:66:b9:79:d0:4f:8e:
ca:0e:0b:d9:87:28:a4:e7:4c:d9:b8:f7:fe:4c:a3:
b3:f2:ba:9d:fa:34:48:eb:60:ad:c6:99:6a:8a:ab:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:5D:79:69:51:DE:7A:AC:20:6E:0C:91:33:8C:3B:F4:8C:42:57
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LsNdeWlR3nqsIG4MkTOMO_SMQlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:37:5f:f0:e4:10:31:62:19:df:a1:f6:cb:2c:1a:85:31:82:
62:75:57:3e:04:65:2b:db:71:ae:77:27:9d:85:54:4f:4e:b5:
cd:58:de:f8:e3:bc:bc:7d:27:fd:ec:19:7e:ec:30:75:25:7b:
fa:0f:ff:4b:c8:ec:98:4d:9d:2f:ab:e2:42:b4:99:c2:8f:e2:
25:9c:3d:be:23:5b:d3:58:79:d0:3c:6f:bf:d1:ef:bc:ea:5c:
71:f5:91:9c:c3:2f:c8:40:09:c7:35:6c:c3:7e:b6:d9:41:74:
21:91:f3:54:51:79:30:e9:f3:0f:2a:18:ce:cb:8d:9c:fc:c7:
05:db:37:b3:18:59:0d:d0:09:5a:5a:6d:fa:8c:76:8e:37:f9:
5e:a2:cf:fb:71:89:2e:13:d8:d0:e6:e1:40:26:f9:5f:bf:fc:
09:75:2c:da:e1:01:fc:0a:1a:a3:31:da:ca:1d:3f:e6:e1:08:
1b:cb:9b:87:a2:7a:a5:c8:de:74:75:0e:cb:57:59:95:47:44:
b6:6a:d9:01:25:de:60:01:71:62:a5:e4:4f:25:4a:de:07:d7:
4c:1e:f8:96:d4:f0:35:b1:9e:32:a8:d1:6a:d3:63:85:b2:46:
32:d1:a0:00:a3:86:ef:03:31:79:39:1b:d2:0d:ea:57:25:27:
e4:6e:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:33:30 2025 by rpki-client