Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LqrTgRcnRJhPvY4WF3fnUhX8oyM.roa
File: LqrTgRcnRJhPvY4WF3fnUhX8oyM.roa (raw, json)
Hash identifier: FRJreAFc/XECpaDi+tX0aZon5IsMkB5N2H5L6G9xflA=
Subject key identifier: 2E:AA:D3:81:17:27:44:98:4F:BD:8E:16:17:77:E7:52:15:FC:A3:23
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486564296F2C153967118A9B8D0B4B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LqrTgRcnRJhPvY4WF3fnUhX8oyM.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61162
IP address blocks: 192.71.254.0/23 maxlen: 24
192.176.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:65:64:29:6f:2c:15:39:67:11:8a:9b:8d:0b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eaad381172744984fbd8e161777e75215fca323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:3d:4e:54:b1:e8:b8:34:70:2e:de:a8:03:
34:9e:7d:3f:a2:49:f3:03:7e:66:16:81:c6:5a:a1:
17:f5:2a:79:10:c2:3e:12:ff:3c:2e:83:12:87:8a:
0f:89:80:22:48:45:2e:25:ec:1d:33:16:96:1f:74:
87:36:7c:85:ea:65:9d:96:73:88:fb:b0:df:e9:0d:
bd:ab:f3:06:cc:e3:3c:99:ee:1e:58:96:7a:5a:d6:
2e:29:5e:ce:a0:55:f6:ef:73:8a:dc:fe:aa:b9:41:
ea:fd:6d:7e:b8:0d:74:bb:d7:37:d8:6d:17:93:d4:
f9:21:ab:2a:49:06:76:52:9e:29:38:4d:20:c7:15:
7e:3f:a8:bf:5c:b0:ad:56:91:10:0b:65:a2:db:8a:
f3:61:6e:b6:40:4e:b1:61:e0:46:8c:48:cc:a5:04:
3b:2d:b3:85:14:bc:87:4a:73:70:b0:ba:36:41:fa:
36:b2:e4:5d:00:8c:8b:41:40:6d:dd:3c:b9:4b:0d:
08:74:91:03:bb:33:37:13:1e:fb:3c:69:5c:88:ba:
3a:b0:30:b5:b4:ea:a1:66:36:41:b8:74:6d:b9:0d:
03:a6:9e:a8:9c:5f:f1:0a:5e:c7:30:24:ba:e9:31:
06:4a:f9:5a:4a:02:6f:7c:69:45:09:8c:84:0c:25:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:D3:81:17:27:44:98:4F:BD:8E:16:17:77:E7:52:15:FC:A3:23
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LqrTgRcnRJhPvY4WF3fnUhX8oyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.254.0/23
192.176.43.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f4:2c:27:0e:4c:6e:3e:84:a7:42:76:fb:de:9d:8b:fd:97:
92:d6:0b:f6:b5:0f:20:f3:82:77:fd:1f:7c:e5:49:ab:ab:21:
9b:43:4c:5a:d2:46:01:fd:9e:c0:a6:e3:8d:0d:b0:1e:0b:40:
82:c1:56:42:1a:16:87:e9:a2:ea:c0:b1:98:51:b9:c8:47:1c:
a1:22:32:50:26:67:b2:47:80:ae:c8:b6:86:dc:fd:e7:88:51:
1e:2c:73:91:32:14:1d:b0:f3:c2:90:a4:70:a5:a8:21:c1:d1:
c8:b9:87:13:45:4d:7b:98:a2:7c:cd:13:8e:21:ca:a2:2f:6f:
36:5b:7d:29:aa:42:05:31:34:49:f4:d0:c1:cf:1c:e2:ba:61:
7d:bc:3a:13:1a:8b:2f:f7:ff:77:cc:3b:25:45:91:ee:f2:20:
7e:c8:c1:3c:bb:83:6e:ae:2e:11:e8:35:ad:47:bc:72:0a:1a:
e2:a2:79:f8:6c:ab:fb:a5:ca:4e:3c:22:fb:2a:73:2b:97:52:
32:9f:88:78:c1:05:8b:5d:13:44:56:5d:e7:e0:ea:db:90:14:
9d:9f:c7:43:76:1e:48:2a:67:0c:13:e2:ae:bd:62:9f:7c:72:
1b:04:86:a9:11:f2:1e:0c:cf:00:3f:45:47:6d:42:40:45:2b:
f4:cf:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:34 2025 by rpki-client