Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LZq0FUTMcxN4welp3NcIvrEYcYw.roa
File: LZq0FUTMcxN4welp3NcIvrEYcYw.roa (raw, json)
Hash identifier: HCRFlApUxilSWdrLbvTdJYldpokbEMHPwkoOwXJWdNI=
Subject key identifier: 2D:9A:B4:15:44:CC:73:13:78:C1:E9:69:DC:D7:08:BE:B1:18:71:8C
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D761BABB259001C03F3BB4498B1DD6
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LZq0FUTMcxN4welp3NcIvrEYcYw.roa
Signing time: Wed 01 Jan 2025 21:48:25 +0000
ROA not before: Wed 01 Jan 2025 21:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48646
IP address blocks: 94.247.45.0/24 maxlen: 24
178.251.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:61:ba:bb:25:90:01:c0:3f:3b:b4:49:8b:1d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9ab41544cc731378c1e969dcd708beb118718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1f:a1:f2:cc:63:fc:58:90:64:dd:50:aa:f9:
57:66:dd:3e:db:48:04:9e:c6:6c:e1:35:3f:c0:99:
db:42:2a:79:12:ba:59:0a:9e:c8:1f:09:2e:51:0f:
ec:34:48:3a:1a:d1:86:ac:5c:a1:a1:fa:d4:ad:58:
2c:a5:9d:1c:9a:5d:cc:4d:27:9f:51:fd:7d:53:dd:
97:c2:25:67:d0:e8:71:3d:25:e3:76:f5:60:4a:77:
a4:61:e0:4d:58:75:ac:7a:37:9a:c6:e8:81:4c:50:
cf:42:cf:4c:33:c7:32:1e:0c:09:9e:3e:f2:ed:2d:
91:82:e1:7b:e7:39:fb:4b:33:f2:ed:89:c1:fb:8d:
9b:7b:bf:c9:70:2f:5c:e2:7c:6f:45:14:41:df:c9:
5c:5a:e5:93:cf:06:91:62:cc:fd:d4:d6:05:f1:35:
65:ec:59:14:29:2a:6b:a8:50:98:99:73:55:a2:5f:
6f:5f:71:0f:78:2a:1d:0a:f3:4c:de:32:16:46:eb:
2b:dd:8a:bd:af:ab:08:64:d9:a0:0f:6f:7a:a5:5e:
d8:77:19:d2:69:2c:bf:3c:bc:c5:57:f4:b2:cc:c1:
13:80:90:04:2b:96:c8:fd:e7:8e:a5:b6:ae:96:c1:
f1:68:d6:a8:1e:e8:51:64:b8:19:a2:ad:b7:0d:a0:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:B4:15:44:CC:73:13:78:C1:E9:69:DC:D7:08:BE:B1:18:71:8C
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LZq0FUTMcxN4welp3NcIvrEYcYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.45.0/24
178.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:76:cd:04:09:5b:4f:5d:fe:28:31:59:9f:88:cb:50:c2:6d:
ef:a1:e0:a4:39:60:b1:be:8a:51:bc:ed:74:26:04:1f:8e:ed:
84:7b:ab:a5:44:95:34:26:84:41:45:55:8a:5f:81:ae:ff:4c:
c6:b8:97:ac:3f:31:12:c0:7e:e5:07:3c:e6:ae:e9:86:cc:43:
5c:57:20:a8:16:5e:00:01:b1:8c:9a:b0:4d:90:c7:75:40:5d:
64:06:07:1a:4a:17:5e:3b:40:c3:86:78:f2:cf:4a:a2:1c:15:
4b:a8:75:7e:8b:3f:cb:db:0d:c5:e6:ac:e5:a3:bc:35:0f:63:
73:57:79:ec:12:1c:5a:9f:cc:30:85:03:da:8b:9a:a2:c8:c6:
ab:45:30:e3:75:a4:73:05:40:7b:cd:56:8d:d3:94:f0:8c:2f:
88:19:65:0b:fa:b0:58:55:45:e6:f7:76:92:e4:43:1a:d2:01:
82:b6:46:42:b8:81:63:03:ce:7b:bd:f4:0e:52:02:44:74:db:
92:1d:be:20:99:09:da:c8:cd:38:44:bb:df:d9:38:7b:46:52:
c3:82:86:a5:c9:0c:34:68:9f:9f:33:91:57:e3:51:59:71:c4:
8e:77:14:02:f9:39:09:45:24:e7:08:da:5f:41:18:7d:1e:7e:
27:fd:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:06 2025 by rpki-client