Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/LbbsmkI3GqawDuN3XH6acheMxPw.roa
File: LbbsmkI3GqawDuN3XH6acheMxPw.roa (raw, json)
Hash identifier: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=
Subject key identifier: 2D:B6:EC:9A:42:37:1A:A6:B0:0E:E3:77:5C:7E:9A:72:17:8C:C4:FC
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC0B436186790B7517A80BC244C698
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/LbbsmkI3GqawDuN3XH6acheMxPw.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 109.72.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0b:43:61:86:79:0b:75:17:a8:0b:c2:44:c6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2db6ec9a42371aa6b00ee3775c7e9a72178cc4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:00:c0:c9:86:51:c6:f2:ff:82:da:4f:90:
43:16:eb:9c:e2:be:0c:99:5e:f5:ba:fe:c7:a2:8c:
28:ea:d8:58:a0:ff:b6:fa:a9:41:8e:db:c8:0d:49:
51:2c:0e:37:88:8a:a7:47:73:13:e2:2d:5e:59:99:
9e:15:aa:76:05:fc:08:28:88:ea:b1:77:9a:8d:bf:
98:49:fb:8c:3a:26:ac:95:2b:d5:6e:23:91:ca:05:
11:71:6c:6e:d5:3a:58:73:4d:06:8e:3d:56:df:2d:
e9:f9:30:07:0e:f4:19:bf:99:37:76:50:2d:2b:7f:
58:93:7c:5d:4c:d3:77:a4:bb:23:85:44:a3:5f:cc:
e3:e5:b2:a5:db:64:0c:f0:f5:0c:3c:b6:b0:45:d0:
8a:d3:72:e3:f3:42:4d:b7:95:aa:2b:d7:48:6c:c4:
07:00:6a:30:c2:95:99:6f:ad:b3:72:ee:d1:06:4b:
2c:58:8b:98:71:68:a2:dc:35:5e:e6:39:1f:de:35:
b5:94:33:08:97:84:1b:29:e2:db:28:65:7a:4b:e7:
4f:91:2a:61:83:26:b3:57:45:a1:a4:1f:35:eb:95:
e7:b4:0d:54:14:ea:ae:de:3d:3c:3c:7c:cf:c3:28:
fb:fd:78:d5:83:09:15:8f:cb:d3:5a:ef:f4:c2:4f:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:EC:9A:42:37:1A:A6:B0:0E:E3:77:5C:7E:9A:72:17:8C:C4:FC
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/LbbsmkI3GqawDuN3XH6acheMxPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.113.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a9:8a:88:99:2e:48:d7:7a:28:87:74:c8:af:38:e3:da:9f:
98:7a:6c:51:27:56:1b:73:0e:ed:53:a7:93:47:32:0f:5e:41:
aa:22:8c:17:68:3e:b7:f1:44:a7:e7:bd:00:c7:c2:57:ed:27:
bf:b5:11:27:f2:81:ef:c2:7f:5d:e1:d8:b4:84:d4:07:da:f4:
1c:9f:68:15:2e:42:be:32:5f:50:f1:59:1a:b3:77:a4:2e:b8:
f6:34:8f:a8:7d:1f:d6:2d:02:08:5d:9a:45:67:48:5b:2c:22:
6d:d7:a2:0b:e2:3b:f1:77:00:4e:67:2d:9d:ab:74:0d:21:86:
ef:d4:da:51:89:1c:12:36:dc:6a:3b:3a:d2:1a:cc:52:78:d3:
84:f4:03:1f:79:52:90:cc:75:72:df:83:a4:30:56:83:a0:be:
84:33:93:eb:6f:47:03:22:d0:5a:99:d7:c9:c3:ba:c2:48:18:
91:e0:61:41:e4:b8:93:23:3c:a0:a1:55:e1:40:3e:6f:b3:01:
50:55:b4:c2:06:9a:62:71:84:dc:23:b9:eb:73:83:ba:8d:4a:
79:85:70:9f:f4:88:c0:6d:9e:df:e5:4e:2e:6c:73:84:ba:87:
5c:8e:f1:8a:51:0f:b7:09:6b:a5:29:94:6c:49:00:ec:8a:4e:
2e:ee:1c:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/AtDYYZ5C3UXqAvCRMaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUwMTAxMTc0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGI2ZWM5YTQyMzcxYWE2YjAwZWUzNzc1YzdlOWE3MjE3OGNjNGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42UAwMmGUcby/4LaT5BDFuuc4r4M
mV71uv7Hoowo6thYoP+2+qlBjtvIDUlRLA43iIqnR3MT4i1eWZmeFap2BfwIKIjq
sXeajb+YSfuMOiaslSvVbiORygURcWxu1TpYc00Gjj1W3y3p+TAHDvQZv5k3dlAt
K39Yk3xdTNN3pLsjhUSjX8zj5bKl22QM8PUMPLawRdCK03Lj80JNt5WqK9dIbMQH
AGowwpWZb62zcu7RBkssWIuYcWii3DVe5jkf3jW1lDMIl4QbKeLbKGV6S+dPkSph
gyazV0WhpB8165XntA1UFOqu3j08PHzPwyj7/XjVgwkVj8vTWu/0wk+hlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC227JpCNxqmsA7jd1x+mnIXjMT8MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvTGJic21rSTNHcWF3RHVOM1hINmFjaGVNeFB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUhxMA0G
CSqGSIb3DQEBCwUAA4IBAQA0qYqImS5I13ooh3TIrzjj2p+YemxRJ1Ybcw7tU6eT
RzIPXkGqIowXaD638USn570Ax8JX7Se/tREn8oHvwn9d4di0hNQH2vQcn2gVLkK+
Ml9Q8Vkas3ekLrj2NI+ofR/WLQIIXZpFZ0hbLCJt16IL4jvxdwBOZy2dq3QNIYbv
1NpRiRwSNtxqOzrSGsxSeNOE9AMfeVKQzHVy34OkMFaDoL6EM5Prb0cDItBamdfJ
w7rCSBiR4GFB5LiTIzygoVXhQD5vswFQVbTCBppicYTcI7nrc4O6jUp5hXCf9IjA
bZ7f5U4ubHOEuodcjvGKUQ+3CWulKZRsSQDsik4u7hyj
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:02 2025 by rpki-client