Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ll6uEXJT3I-rAiZ0V7hyjfq8Ovg.roa
File: Ll6uEXJT3I-rAiZ0V7hyjfq8Ovg.roa (raw, json)
Hash identifier: vDhtQKXVx75NLvEYN4ZuH8/qa4B0dt5lISj4YHBNtJ4=
Subject key identifier: 2E:5E:AE:11:72:53:DC:8F:AB:02:26:74:57:B8:72:8D:FA:BC:3A:F8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484FD9F60B935CAD68EE5320D50AA2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ll6uEXJT3I-rAiZ0V7hyjfq8Ovg.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35073
IP address blocks: 194.71.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4f:d9:f6:0b:93:5c:ad:68:ee:53:20:d5:0a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5eae117253dc8fab02267457b8728dfabc3af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:82:05:c6:0e:28:01:26:c9:50:66:dc:3a:
16:0d:00:63:e4:dd:6a:aa:06:e6:54:4e:58:33:2a:
4f:8f:ff:f9:06:56:97:46:20:6d:ef:9e:c2:36:e9:
7b:50:c0:b9:f5:d8:6d:64:6c:0a:c8:cd:52:1f:6a:
5f:e3:dd:2c:60:e0:fc:cb:c9:19:6b:af:56:ea:6c:
c8:84:8b:04:b7:a7:6d:6a:2b:13:de:92:7f:90:b5:
f6:6d:62:87:b9:0d:ac:2d:20:e3:6d:9e:4f:19:fe:
9a:4f:8e:70:5f:a9:86:c4:ea:1c:0d:d7:75:5e:da:
cc:0d:41:b6:ee:44:c7:2e:e7:63:61:94:82:c2:81:
de:fc:c1:9d:47:55:d0:79:88:fb:57:ed:92:78:79:
37:3e:d9:08:3f:d6:03:a2:43:b8:ed:41:c1:2e:62:
b4:1b:a1:a8:12:ad:53:66:a8:f2:99:91:5c:99:5f:
31:18:fd:80:cc:06:db:fb:c4:90:41:39:0b:7d:79:
2b:96:19:5a:3d:cf:7b:fc:e8:4f:22:c5:04:bb:b7:
af:c7:40:eb:df:f0:24:1c:9e:ce:b1:8b:19:b6:25:
1d:d6:4b:3f:a0:bc:b8:81:e4:0f:cd:8e:19:99:55:
c7:96:b5:c3:89:79:3a:3c:fc:7c:61:19:ce:93:37:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5E:AE:11:72:53:DC:8F:AB:02:26:74:57:B8:72:8D:FA:BC:3A:F8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ll6uEXJT3I-rAiZ0V7hyjfq8Ovg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:03:8f:82:c1:8d:8a:bc:e9:92:f4:ff:0b:51:f6:05:20:54:
c4:1b:50:3c:3b:ba:05:f3:d0:4e:74:7f:86:0d:0d:6e:6e:41:
26:ce:87:08:71:49:c1:08:98:a7:75:7c:86:51:f5:31:d0:46:
22:9a:68:08:56:4a:59:02:bf:e4:f4:01:f7:75:ee:bc:a6:72:
01:dc:52:b2:d5:0a:66:88:f0:fe:e7:ae:0e:02:02:52:61:de:
57:2f:55:41:3a:49:c0:ae:0e:86:21:7f:2a:67:d7:43:79:52:
13:63:87:f4:1a:d6:6a:82:a0:a7:73:c8:fb:12:4d:cc:be:4d:
f8:4a:cc:15:8a:e7:dd:bb:c2:73:ce:1a:97:31:2a:1e:65:3f:
e8:49:4f:9c:27:25:0b:bf:fe:b8:bf:49:83:2e:96:bb:e8:65:
48:82:68:cb:12:d3:e3:b1:69:e1:f7:ce:e8:4f:4b:a1:e3:62:
12:c0:81:b3:b2:e5:b1:c4:fc:4e:75:34:dc:fb:2f:bb:d3:2f:
da:8f:a3:c4:0c:a7:e2:e4:14:c1:ff:21:f1:63:a5:89:a0:14:
2b:84:c4:dd:5e:3d:f2:93:73:49:17:c5:05:c6:3c:48:c1:ab:
79:b3:e9:0a:e3:7a:86:2f:ee:28:c0:0f:57:35:26:a1:2e:73:
08:35:6a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:11 2025 by rpki-client