Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa
File: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (raw, json)
Hash identifier: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=
Subject key identifier: 96:7F:8A:E4:EC:3D:4D:E8:E0:2D:DE:0F:CA:C5:92:A1:02:AA:89:9E
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019420D5EE08845EA6FCF893E26953E4B4EF
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212222
IP address blocks: 193.227.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ee:08:84:5e:a6:fc:f8:93:e2:69:53:e4:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=967f8ae4ec3d4de8e02dde0fcac592a102aa899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:f0:47:b6:36:06:6e:2c:03:4f:ae:d5:d2:
7e:52:5f:9e:fb:17:50:af:ae:7c:8e:a4:72:d1:32:
b5:67:55:44:f8:6b:78:af:7a:aa:0a:2a:eb:e6:56:
f7:f2:dc:fc:a1:4c:ca:a2:5d:b9:dd:9e:4a:06:57:
82:0e:42:02:55:b5:86:b3:ff:7b:fb:3d:ad:3e:7d:
61:5a:70:ac:6f:7f:cd:ee:34:8e:ab:3d:1b:72:d4:
50:23:90:fd:41:74:93:77:ae:e9:ce:d1:16:f5:71:
a1:67:2f:a8:6f:26:9e:87:21:61:77:aa:45:01:7f:
69:17:61:1a:2b:66:f7:71:4d:32:78:f1:db:ea:89:
08:11:8b:95:d1:e3:96:e1:78:06:26:4f:b9:34:56:
79:21:92:c5:da:65:31:8b:4b:69:c6:4c:32:44:df:
ee:ad:09:3e:f4:13:3a:c3:f5:e3:f3:94:14:e6:98:
4f:e0:d3:c1:ea:96:9f:b2:05:a0:c0:3e:a9:ec:c8:
59:ff:2a:27:cd:af:b3:2b:7e:d7:2a:da:0d:d3:ee:
7b:02:c0:0b:6b:66:1d:51:8b:b0:70:3e:34:0e:39:
c9:0a:57:8a:6c:e7:89:3e:7a:3e:ee:9e:a8:78:23:
47:a5:6a:3f:1f:25:17:26:9c:e4:4c:9c:19:c7:69:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:8A:E4:EC:3D:4D:E8:E0:2D:DE:0F:CA:C5:92:A1:02:AA:89:9E
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2c:34:03:cb:d1:08:28:4b:33:1d:1f:4a:75:dc:00:05:78:
5c:1d:00:85:97:14:d8:2f:c5:8c:d0:71:83:51:3d:bf:70:5b:
a4:ad:cc:56:7e:f9:16:28:27:fe:1d:48:a2:36:9e:99:6e:6d:
1d:68:e1:bc:9c:f3:ec:89:ee:55:15:df:6f:06:2c:77:2c:37:
f7:c7:f8:c2:f5:b5:c2:74:96:4f:57:d8:29:09:58:7c:c9:79:
da:b7:ab:75:b7:a5:34:c9:e7:83:20:0c:72:96:42:cb:31:de:
a2:5c:b3:11:c6:6d:c4:90:ef:5a:74:48:88:45:d3:f2:da:72:
6c:e6:7a:d3:ab:23:e4:47:39:6e:ce:6b:29:e6:2f:81:ed:98:
24:3a:df:4c:57:1c:e6:ed:c0:08:01:3a:f8:a1:d9:13:f1:bb:
9e:d6:42:80:48:49:ad:8c:d3:c2:89:be:40:a3:92:ed:8e:b7:
87:b1:79:08:21:27:78:64:d2:d5:78:64:b3:2c:4a:40:bb:f9:
eb:4e:59:7c:e7:f0:60:98:5b:a2:2a:ea:89:cc:7b:7c:45:85:
5c:6a:29:0b:31:ce:00:cf:7b:1f:cb:e8:b9:f5:f7:6c:a2:db:
b6:57:57:d4:f3:bd:5f:f0:07:74:44:15:2a:66:ee:88:08:1e:
fd:62:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:58:25 2025 by rpki-client