Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/lZoUgcddrDnXe4fT6Iyd3y19EFw.roa
File: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (raw, json)
Hash identifier: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=
Subject key identifier: 95:9A:14:81:C7:5D:AC:39:D7:7B:87:D3:E8:8C:9D:DF:2D:7D:10:5C
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 01942823A24C99ECC155188DF5B79D13D5AC
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/lZoUgcddrDnXe4fT6Iyd3y19EFw.roa
Signing time: Thu 02 Jan 2025 17:50:11 +0000
ROA not before: Thu 02 Jan 2025 17:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20847
IP address blocks: 195.62.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a2:4c:99:ec:c1:55:18:8d:f5:b7:9d:13:d5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Jan 2 17:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=959a1481c75dac39d77b87d3e88c9ddf2d7d105c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7e:de:93:d5:61:77:06:94:e6:d2:6b:f0:89:
32:12:37:43:27:0d:90:1c:00:26:b7:7c:f5:c3:1d:
f2:13:f4:97:aa:25:60:67:00:e5:db:ff:a4:c9:d1:
d5:7c:1b:10:a7:db:b5:c4:0d:38:4d:c6:5d:4c:6f:
62:9a:5a:dd:0f:b7:df:58:70:43:29:a2:22:e6:53:
7a:30:cb:27:d2:ba:13:1f:ca:d6:cb:2a:2c:f2:07:
4f:32:8b:f2:d9:df:a2:07:4b:33:c1:56:3a:cc:5a:
4a:67:d8:5f:ea:f2:d2:c8:7a:a0:96:c1:5c:a4:d7:
85:4f:1c:34:27:28:cd:67:0a:11:48:40:27:24:6c:
7b:4c:99:d7:65:4a:c8:00:71:4c:63:50:36:8c:d1:
f1:ec:46:7b:24:83:8b:b2:5b:6b:45:51:a7:4e:7b:
4e:49:56:a5:f0:c9:e4:a3:1d:ce:44:88:c6:d8:e5:
40:e0:fa:d9:58:31:41:9c:72:a9:fc:a2:7b:ed:fc:
69:4c:0d:9c:d5:73:13:48:c3:50:64:40:aa:57:e6:
af:bb:1e:78:04:00:01:1c:86:74:e6:e3:89:cd:5d:
26:06:c8:7f:f8:42:64:cb:2c:3b:bc:b3:9a:89:b7:
b3:ce:ee:ed:1a:ee:2d:0a:bf:7a:d2:e3:f6:ab:0d:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:14:81:C7:5D:AC:39:D7:7B:87:D3:E8:8C:9D:DF:2D:7D:10:5C
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/lZoUgcddrDnXe4fT6Iyd3y19EFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.82.0/23
Signature Algorithm: sha256WithRSAEncryption
01:bc:db:ec:e3:9e:bc:2b:c9:a0:d1:cc:98:7f:9f:ce:27:8c:
f6:27:fb:ef:4a:ed:f1:82:35:1c:fd:21:7e:30:1e:3f:e0:fd:
53:2d:42:bf:1e:78:15:f5:54:cf:29:c3:9b:dc:7e:95:e0:c4:
b8:51:c7:a3:9e:ea:4e:6d:3f:3a:f8:9a:49:cf:52:65:25:99:
50:fc:47:46:de:25:08:2f:e3:67:15:38:8a:22:48:c3:e5:f6:
e7:ab:0d:a3:62:a1:93:de:f0:7b:3a:00:b9:e8:ed:b3:e5:d4:
b5:5d:31:3f:12:54:4a:07:14:64:d1:0e:41:8c:eb:1a:c0:02:
fc:78:2e:37:2f:d3:96:2a:e1:c6:7f:84:67:0e:b0:6c:50:f3:
cd:bf:59:71:50:a6:e8:30:ca:11:80:c3:7d:8f:89:82:3d:ae:
ea:6d:be:4c:21:49:ba:ca:59:2b:6e:3d:48:8c:52:de:d1:d2:
b6:ad:e8:c0:e4:ba:8e:dd:15:4f:5d:9c:0f:7e:16:e9:e3:3f:
4c:3d:20:05:7d:77:64:82:50:60:44:37:77:fb:87:54:7f:c2:
ce:df:76:f0:be:54:18:3a:f2:87:8a:a2:a5:66:08:45:19:65:
5a:3a:fb:05:00:19:4d:e7:a3:5e:e1:05:8b:d9:f3:bf:b8:7a:
63:45:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:53:21 2025 by rpki-client