Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/lxoRTf-wo4YOlgiYkmNsq_STsOo.roa
File: lxoRTf-wo4YOlgiYkmNsq_STsOo.roa (raw, json)
Hash identifier: TqDSPnCDTrr4iXHUBYL0fqJjIVOuIkCFrz5kt7VpmEQ=
Subject key identifier: 97:1A:11:4D:FF:B0:A3:86:0E:96:08:98:92:63:6C:AB:F4:93:B0:EA
Certificate issuer: /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial: 0194214460328C807E059F8AC5A5DD49968C
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/lxoRTf-wo4YOlgiYkmNsq_STsOo.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 64.253.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:60:32:8c:80:7e:05:9f:8a:c5:a5:dd:49:96:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=971a114dffb0a3860e96089892636cabf493b0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:90:8a:45:88:b7:23:16:74:f7:45:d2:ac:59:
da:1e:ec:42:39:04:f8:68:1a:33:bf:4a:3e:27:36:
e0:3e:a2:8f:50:53:e5:1c:48:e2:1c:14:27:75:bc:
e9:13:61:83:4d:16:50:79:57:68:ac:f6:7e:13:f9:
3c:83:6f:da:36:6f:b5:ea:69:97:8b:da:f4:ac:56:
87:43:bc:cf:2d:34:0f:8e:01:0a:63:6f:d1:5a:f3:
cd:3f:89:e7:84:be:ee:32:ce:c0:f8:8d:18:4b:b7:
19:1e:d7:64:1b:b5:23:6b:b4:bf:c6:4d:97:03:de:
7d:63:10:15:54:80:5e:34:07:be:82:28:c8:5d:b8:
e5:f0:2a:be:fd:b6:dc:15:be:d3:d8:28:85:eb:93:
ff:b9:da:fc:7f:38:5d:19:74:31:2f:fe:45:de:83:
a5:89:e4:5b:b4:b8:b9:c3:57:e3:05:6a:e6:39:21:
08:57:87:9b:d7:43:1a:a8:4c:59:b8:43:52:21:c1:
4a:df:85:9a:89:3a:f2:37:aa:11:fe:cd:88:e1:50:
19:41:10:68:07:aa:66:b7:6e:69:8f:84:71:d5:76:
e7:c2:e3:0a:fe:5e:f3:a4:13:24:d9:1c:91:3c:f5:
69:9d:41:a1:c4:13:04:e0:bb:33:a5:26:3f:e5:65:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:11:4D:FF:B0:A3:86:0E:96:08:98:92:63:6C:AB:F4:93:B0:EA
X509v3 Authority Key Identifier:
keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/lxoRTf-wo4YOlgiYkmNsq_STsOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.32.0/19
Signature Algorithm: sha256WithRSAEncryption
93:32:8f:73:95:eb:5a:7c:49:57:01:75:fb:6b:05:66:0b:f0:
f9:8a:a6:62:8d:d7:d4:e9:49:8e:62:26:e7:44:2f:48:65:63:
75:89:43:ae:c0:92:06:90:96:65:51:8b:90:23:41:20:f1:a9:
24:e2:b4:42:b4:33:d1:a6:a7:1f:34:c2:1b:a7:77:58:11:cc:
53:4a:c1:7c:c6:d3:3e:ca:c9:bc:82:36:71:04:33:05:92:78:
c9:2e:3d:94:32:52:90:42:8c:9a:cc:60:4f:35:f7:d9:b9:61:
59:60:6b:c6:f1:69:1f:92:7e:98:f9:47:51:32:f7:8b:69:54:
a0:6d:e7:03:fa:9a:3a:c8:95:29:17:3d:0b:cf:e7:d9:be:ba:
f2:3b:c0:cf:54:e7:50:19:f6:d3:bc:36:52:28:ec:d9:e9:43:
f0:55:e8:e4:08:e5:64:2c:29:31:48:ff:59:0e:64:64:aa:a9:
b8:61:d1:1d:ab:ad:51:57:03:5a:b8:71:09:7f:f0:db:b7:dc:
c7:73:84:d4:8d:a3:1e:f6:d4:73:9e:d8:d2:99:a5:0c:20:9c:
1f:1f:de:f9:bb:59:0e:33:49:47:b2:c2:c5:82:6c:b4:78:1d:
4c:ae:78:3d:c0:44:94:26:51:07:75:da:77:7f:01:2e:2a:7c:
86:dc:b1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:58 2025 by rpki-client