Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LfdrGEplyVvc1kqFhId5WDDb4VU.roa
File: LfdrGEplyVvc1kqFhId5WDDb4VU.roa (raw, json)
Hash identifier: PE0xXwHA3oE2Bp0YgdLG9ph25iLrAH/oGMwSZ7oV+Uk=
Subject key identifier: 2D:F7:6B:18:4A:65:C9:5B:DC:D6:4A:85:84:87:79:58:30:DB:E1:55
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485EF4EE6CF89439DA317E5C508005
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LfdrGEplyVvc1kqFhId5WDDb4VU.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50613
IP address blocks: 192.36.57.0/24 maxlen: 24
192.71.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5e:f4:ee:6c:f8:94:39:da:31:7e:5c:50:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2df76b184a65c95bdcd64a858487795830dbe155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:6c:d7:68:e3:28:64:37:3a:fb:1c:f7:eb:
1c:5c:a5:7c:2a:c0:a9:b9:d6:a2:33:77:36:09:7d:
73:78:e0:81:51:bb:f9:7d:c3:62:ad:fc:9d:d5:14:
d3:f0:40:eb:5c:f3:ba:90:3e:16:df:4b:dd:00:b0:
e8:1c:b2:53:20:ac:5d:9d:7f:1d:e1:a1:16:b8:77:
cb:33:7c:3a:97:e1:01:cf:d4:5a:32:c5:e4:c8:cf:
6c:b6:8f:da:77:99:11:c3:23:ed:15:33:36:61:d5:
9f:36:96:60:85:7b:5f:39:94:f9:5a:b0:c3:ae:5b:
e1:f2:a8:52:27:7a:bb:7a:01:23:2c:f5:d9:ae:9e:
17:ab:eb:40:67:3d:c6:01:94:7c:8b:c2:15:14:6d:
50:cf:e1:10:2a:5c:56:f1:d7:97:27:d4:74:2f:b3:
e0:62:56:b7:c8:40:55:16:ef:ad:35:68:32:2b:b9:
b8:9d:da:a3:e3:d9:fd:2b:06:27:be:c9:49:4e:da:
b3:ed:c8:9f:2b:ec:ca:c0:1a:12:58:9b:50:44:93:
ff:b9:0d:a3:36:10:d1:c3:f9:d3:4d:1e:46:51:91:
30:4b:bb:f8:78:a4:d0:6f:0a:be:5c:bf:ca:7a:dc:
05:c2:2f:83:d9:ee:2a:3f:24:9a:cc:74:c9:9c:7a:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:6B:18:4A:65:C9:5B:DC:D6:4A:85:84:87:79:58:30:DB:E1:55
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LfdrGEplyVvc1kqFhId5WDDb4VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.57.0/24
192.71.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:3b:3f:63:33:02:3c:f3:0d:90:42:b6:7a:a1:07:bf:3e:c2:
03:7c:ae:31:cf:1f:57:2a:99:09:da:e9:62:df:6c:f4:26:91:
de:34:cb:2a:e9:51:1c:47:a1:44:f7:c7:82:4d:aa:96:ec:b7:
a0:87:7c:e8:5d:1c:e8:29:50:a5:22:fa:2c:29:e6:fe:03:a4:
2f:d6:4e:3d:3f:5e:0f:38:85:ad:49:3b:84:4d:92:af:ee:8a:
b3:34:69:ec:8f:49:8c:4b:be:d4:1e:90:2d:df:75:e4:32:ca:
9b:87:c2:e2:1b:3e:c6:d3:56:8a:34:3a:9d:d3:77:48:bc:a8:
0d:64:a8:c7:20:0e:46:f7:40:40:d9:e7:73:f8:5b:3f:ea:fc:
6c:0d:c3:04:c0:aa:60:b3:94:0a:8f:52:44:8d:84:4e:03:ad:
70:82:4d:f2:5d:4b:d4:4b:fc:0d:11:0d:95:29:62:dd:f1:04:
0d:18:12:fa:36:87:1b:db:db:57:6a:5e:70:c6:35:80:17:89:
ea:ab:26:eb:1f:d8:2a:1e:3f:22:91:a2:83:cd:f3:2f:72:5a:
8e:28:06:34:49:6e:94:73:d3:2c:60:2a:9c:23:36:a6:53:24:
55:34:4d:6a:20:8d:42:f1:e2:f4:2f:40:3b:a1:17:57:a6:80:
0a:f1:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:22 2025 by rpki-client