Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa
File: LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa (raw, json)
Hash identifier: 8CqH09siYzyZJ5O1vmsPNnnOW14dzrYfcCdsDYcxu10=
Subject key identifier: 2C:9E:E1:A0:2A:90:9F:07:C7:0A:1A:9E:53:D5:3C:4A:42:9D:7A:A2
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 0194266C3512CE96127499F8A57DF9DFFD2E
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:35:12:ce:96:12:74:99:f8:a5:7d:f9:df:fd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c9ee1a02a909f07c70a1a9e53d53c4a429d7aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:2a:85:75:63:5b:39:63:3a:03:1d:72:25:
3f:62:9f:12:81:bf:7c:a4:88:af:fd:51:5b:72:f0:
23:ae:cc:28:93:cb:11:2a:f3:74:0a:f2:c3:0f:d7:
a6:24:76:09:d9:e2:57:17:b4:30:1e:ff:99:90:35:
81:f7:85:f8:2a:0d:da:00:e4:03:24:a6:c9:90:b4:
35:07:cc:02:15:b9:ca:a6:76:35:29:5d:5a:d2:22:
6c:3c:6e:8b:82:2b:20:9c:67:d9:a8:e1:e8:09:f2:
ca:82:2d:75:84:59:8b:76:be:85:69:96:55:cd:cf:
e6:e4:a4:31:70:0c:d9:d5:c9:f5:78:ce:c0:9c:da:
4b:52:c5:83:bd:b8:87:0e:f4:ae:2d:dd:38:8b:bf:
08:d5:48:83:7d:51:ff:ec:5f:31:62:31:fd:37:b1:
e6:0c:5c:f7:93:aa:f1:db:18:ea:cc:b6:e0:21:64:
6b:c5:4a:ee:4f:05:b8:75:3a:e7:52:ef:fe:b9:d4:
40:e0:c3:8d:b8:a6:8a:1a:3c:0e:59:a4:32:b0:ed:
ac:9b:3e:7b:91:f8:42:62:c3:88:03:df:30:93:63:
f8:da:46:a5:e3:01:39:4c:62:c1:d7:cd:fe:59:ba:
33:71:f8:69:b2:a6:83:2b:9c:c4:81:bf:6d:c7:81:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:E1:A0:2A:90:9F:07:C7:0A:1A:9E:53:D5:3C:4A:42:9D:7A:A2
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2f:5b:ea:a3:7f:d0:b5:b1:c3:4b:3b:0f:9d:54:e5:fd:34:
52:8f:9e:ad:38:02:7e:b7:23:cf:3b:36:16:b5:5a:67:d3:8e:
92:57:63:15:1f:5c:e2:1d:66:0b:d6:25:f8:29:fa:ff:bd:81:
de:7e:a4:69:71:c3:b3:12:c7:b9:28:9e:6c:00:8d:02:6d:08:
bf:7e:13:15:fd:35:18:ec:3d:13:79:f8:c3:f8:02:1c:7a:1b:
c3:51:8a:96:ca:f3:b8:b4:04:3c:48:e9:e1:f5:84:66:e4:ea:
51:50:03:45:1c:9e:b3:d5:59:34:fe:75:98:8c:bb:93:36:6a:
26:10:4f:f9:a4:61:40:02:8a:6a:16:d4:d0:10:d1:d8:25:85:
1f:6f:f9:02:1b:44:4d:48:1c:8b:31:48:fe:5b:67:6f:9d:1b:
e8:26:5e:c8:4d:5a:11:cc:d1:e1:8d:a7:b2:d7:61:c6:bd:45:
d4:e9:04:17:4e:bb:b4:20:09:d2:f2:33:e8:54:8a:1a:aa:81:
4f:39:1e:7e:3c:af:e4:0b:6a:9e:06:1b:30:57:2d:bc:86:bb:
9e:cb:51:37:5d:0d:4a:b5:26:df:99:ba:a2:82:81:31:80:5d:
28:75:6e:2e:80:77:f6:b7:ab:fc:cc:9d:80:c9:c7:ac:77:99:
bb:4f:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:22:01 2025 by rpki-client