Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LGFAazBBdLZYkcpdEXoB99ym1Q8.roa
File: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (raw, json)
Hash identifier: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=
Subject key identifier: 2C:61:40:6B:30:41:74:B6:58:91:CA:5D:11:7A:01:F7:DC:A6:D5:0F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9B5790816BA20C1B1F54864313DC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LGFAazBBdLZYkcpdEXoB99ym1Q8.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 83.137.155.0/24 maxlen: 24
88.209.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9b:57:90:81:6b:a2:0c:1b:1f:54:86:43:13:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c61406b304174b65891ca5d117a01f7dca6d50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:d1:64:67:d9:d9:a7:a9:ef:19:a8:d5:2b:
3f:64:0c:be:06:ea:35:11:37:97:fc:89:da:1b:3d:
98:0c:40:27:7b:e7:c3:80:63:57:59:be:53:71:cd:
26:36:b1:bb:fe:cb:52:b1:ed:75:73:52:40:e5:84:
65:f7:43:7c:13:32:55:75:ea:b3:cf:14:3c:f4:b2:
1c:22:96:cf:3d:9b:2d:40:7f:0a:d8:f1:12:c1:ff:
15:c5:d3:63:4a:2b:83:57:47:1a:19:21:cb:03:eb:
f5:87:ca:e5:01:63:5f:4c:73:56:18:0f:dd:d0:1f:
99:2a:c8:56:5f:0d:d7:7b:35:20:48:82:79:4a:6c:
3d:73:8d:9b:6f:d5:79:5b:cd:72:d1:5d:1f:26:f3:
0d:2d:5e:e7:11:78:d8:24:7d:61:b3:15:c9:2d:10:
ca:5e:a8:ef:ee:e2:2e:8b:6b:d3:97:ea:72:89:07:
2a:41:52:7a:bd:f3:af:ce:6a:58:f3:83:8a:6f:dc:
26:72:ce:41:2b:7a:f6:00:9e:be:13:08:c9:d2:ff:
8b:ac:5f:91:0b:94:6d:bf:15:1c:29:1f:d7:be:e2:
96:74:59:1f:9d:b5:b6:d6:58:f0:ac:08:31:28:7f:
7d:04:5b:4d:e2:d0:7c:e8:02:b4:21:c9:52:76:19:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:61:40:6B:30:41:74:B6:58:91:CA:5D:11:7A:01:F7:DC:A6:D5:0F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LGFAazBBdLZYkcpdEXoB99ym1Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.155.0/24
88.209.202.0/24
Signature Algorithm: sha256WithRSAEncryption
60:58:d0:c4:6d:ec:94:53:3e:73:76:a3:98:28:bd:6b:df:b2:
06:ac:e5:c3:1b:f6:2c:42:90:c1:09:70:ed:c7:ae:ff:62:36:
8b:96:74:39:79:45:19:d5:25:42:8a:1b:62:1b:f5:aa:64:f9:
75:23:0a:43:fb:e6:d3:7f:3e:f2:10:99:1f:ab:ce:14:e3:a4:
31:69:ff:37:53:b6:c7:01:30:e1:58:d1:f2:99:0f:de:20:78:
bc:e4:b9:d4:a0:1e:77:91:12:f4:b3:88:0e:9b:d3:46:59:11:
41:a3:c2:5e:9b:52:c6:b0:9e:4a:84:e8:78:fb:34:65:f0:7d:
74:8e:2d:1f:3c:36:ee:b2:8a:86:7b:b7:a8:79:21:c7:58:6c:
da:2f:68:ca:df:7f:0c:01:26:f3:4d:4c:87:b1:23:05:b1:e4:
b2:7d:62:88:8e:d1:79:d6:4b:c8:bb:b4:11:a9:70:1d:e6:d4:
61:9f:24:d4:60:e8:44:a6:34:8c:66:0c:fa:da:5a:e9:94:14:
dc:e6:7c:75:d0:2f:48:97:56:c0:d7:52:d1:b6:fc:d2:be:63:
45:20:8c:e3:5a:a8:28:aa:bd:84:95:2a:af:76:5b:35:ab:fa:
19:f3:c5:41:8e:a2:86:71:77:45:fb:d0:33:4f:21:14:a3:63:
41:7a:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:15 2025 by rpki-client