Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/LZy1osNQUhfVUq7phinZnPKl6sg.roa
File: LZy1osNQUhfVUq7phinZnPKl6sg.roa (raw, json)
Hash identifier: reyk0Zvn/J6AzXb7QQ8ewqifkrvY/15JT8YFCCBaMEM=
Subject key identifier: 2D:9C:B5:A2:C3:50:52:17:D5:52:AE:E9:86:29:D9:9C:F2:A5:EA:C8
Certificate issuer: /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial: 0194258FB7AD79E57D0862917BDF22B13643
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/LZy1osNQUhfVUq7phinZnPKl6sg.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 193.34.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b7:ad:79:e5:7d:08:62:91:7b:df:22:b1:36:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9cb5a2c3505217d552aee98629d99cf2a5eac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c2:d8:27:eb:ad:68:b4:04:b7:fa:df:6a:c3:
d9:46:dc:ba:76:b3:7a:a2:77:d6:dc:19:66:c5:2e:
b3:92:25:7e:47:8a:1c:ea:0c:64:83:7f:34:3c:d8:
e0:f4:6a:3a:c5:be:a2:d5:11:b8:85:a5:0c:f7:5e:
42:02:58:ca:e6:a5:f7:05:b5:87:60:47:53:89:1a:
45:b2:11:e8:1f:84:e6:60:a7:cc:b4:fd:08:d6:90:
76:cb:f6:91:11:26:6c:bf:60:05:ee:dc:53:40:79:
a4:34:13:40:a2:ad:47:a0:62:e3:b7:63:65:21:61:
00:6d:cd:37:f4:d9:82:d8:26:44:66:8c:69:90:ed:
f0:bf:55:f7:6a:86:f2:72:c5:ff:99:f4:ed:2f:05:
1b:29:b8:bc:e8:58:99:63:a8:12:11:e0:ed:e5:4c:
dc:15:e8:7a:50:fd:0a:2b:fc:02:2c:32:bd:4a:93:
3b:d4:c0:64:5e:f5:68:2d:5f:c0:5d:c8:d4:7b:2b:
56:5e:55:73:92:b9:3a:05:8a:6d:99:8d:e8:58:40:
54:52:24:d5:b7:50:a5:f4:af:46:3b:10:76:0b:bd:
f3:cf:3e:e5:b3:73:1c:e7:36:34:c5:5c:eb:46:06:
fd:32:ec:54:74:c0:bb:ff:8a:e1:5c:03:2a:52:07:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9C:B5:A2:C3:50:52:17:D5:52:AE:E9:86:29:D9:9C:F2:A5:EA:C8
X509v3 Authority Key Identifier:
keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/LZy1osNQUhfVUq7phinZnPKl6sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0a:23:07:2d:24:5c:20:1f:53:31:4b:99:e5:32:02:0d:1d:
b3:f8:95:d1:f6:85:6d:07:3b:1e:df:23:85:c4:8d:89:63:8e:
66:88:e6:8e:52:bb:67:f6:6a:bc:22:35:cf:c4:dc:a2:0e:1e:
61:f0:70:7a:74:2d:d5:30:fd:28:be:c6:f3:cd:89:8d:c0:1c:
4d:63:5d:e0:22:79:bf:f2:f4:32:75:cb:fa:fe:e8:d1:85:8d:
fe:9f:fc:f6:b9:21:e1:56:b0:16:b5:af:e1:1d:7b:d5:78:7c:
3e:41:c4:f1:ab:81:19:cd:6a:5b:5e:b4:65:9a:33:83:6c:ec:
4c:b7:85:f5:f7:11:f4:f8:26:c0:8f:2e:11:9c:a3:46:42:85:
66:1a:26:0f:78:49:a9:8f:d9:03:cd:97:b6:63:ee:61:b8:ef:
a2:3e:aa:88:4d:f6:c0:d4:bb:45:89:6c:c9:af:23:f0:9c:ec:
7e:83:a0:6f:2d:13:e4:71:1c:fa:31:4a:e5:7c:33:6d:f9:31:
c8:f8:67:9d:c2:91:96:b6:98:f7:55:0f:61:7a:f3:55:be:01:
05:a8:7d:fa:ac:97:b3:35:51:49:77:c4:93:92:67:6e:cb:b3:
ba:ec:d2:5e:8d:71:3a:a9:1a:0e:7d:7e:94:de:7d:54:d7:db:
cc:a3:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:13 2025 by rpki-client