Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/lKv_MpftntPeWIBfQDo4EvQnOCE.roa
File: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (raw, json)
Hash identifier: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=
Subject key identifier: 94:AB:FF:32:97:ED:9E:D3:DE:58:80:5F:40:3A:38:12:F4:27:38:21
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 0194236A19910FD1A858ADE2B11F114CA879
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/lKv_MpftntPeWIBfQDo4EvQnOCE.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212296
IP address blocks: 88.135.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:19:91:0f:d1:a8:58:ad:e2:b1:1f:11:4c:a8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94abff3297ed9ed3de58805f403a3812f4273821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:8b:c1:8a:c5:38:54:7c:c8:3f:67:ac:ee:
c3:b4:f5:03:8a:54:ad:5e:fe:c7:fc:e4:6f:9c:7a:
b9:62:35:f3:1f:fe:b0:c8:91:43:a9:85:fe:2d:4a:
7f:08:ce:a2:40:bb:99:52:88:59:21:1d:ee:a6:0e:
1f:db:92:f9:73:e5:b2:eb:46:63:c2:e5:52:85:c9:
4b:6c:bb:db:99:4d:62:6c:ec:3e:b6:ff:2e:53:65:
8c:7b:2d:d8:ca:84:e5:f5:e3:ee:1a:5b:46:22:96:
cb:fd:30:20:26:52:b0:f4:64:6b:70:f0:db:83:17:
3f:28:8d:d3:68:08:13:5f:d6:7e:32:af:cd:67:d3:
5a:2f:f2:82:cd:6b:01:12:ae:67:c8:72:7d:3b:55:
9e:8b:db:d5:a6:ad:9e:41:d7:c8:53:c4:42:9d:9d:
2c:2f:7b:41:9f:be:08:e0:cb:b5:8c:77:a5:ae:2b:
db:f5:5b:42:72:2b:44:02:09:10:94:b8:86:44:0a:
76:81:12:5b:3c:c9:a1:d6:d5:21:36:28:18:00:7d:
50:66:3d:34:20:85:40:ba:b4:2f:94:f6:d5:8c:ab:
e9:52:d6:0d:c6:a1:aa:6f:5d:0a:29:18:ce:31:fc:
46:d6:10:5e:02:b7:de:27:6c:cb:95:2e:ca:23:d4:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:FF:32:97:ED:9E:D3:DE:58:80:5F:40:3A:38:12:F4:27:38:21
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/lKv_MpftntPeWIBfQDo4EvQnOCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.68.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bd:ff:09:50:be:c4:ce:84:49:17:54:65:41:f6:ab:63:1d:
70:d1:45:50:95:ab:c5:a5:f8:4e:25:38:51:46:ea:38:7c:c8:
cd:c8:9a:29:74:76:37:2f:82:28:14:c3:9a:79:96:35:e0:06:
b7:c8:93:aa:ba:ae:8e:24:49:2c:30:f3:39:f3:5b:b4:1d:50:
f2:57:5d:54:f5:39:e6:90:a2:93:b6:ae:d5:f8:0c:30:8a:88:
b8:e0:2b:37:e5:9b:3d:02:10:66:0f:43:e0:09:9a:67:95:8b:
91:bf:a5:e8:6e:b2:d8:50:35:03:43:6c:4b:4d:35:34:4c:80:
97:fc:02:6b:21:b8:6a:4a:d9:6a:83:70:fb:2b:16:fe:ea:ad:
1f:b4:84:85:04:fc:8d:d7:84:dd:71:5b:1e:ea:13:39:95:cc:
2d:c2:94:4c:e6:2a:4f:10:6b:d7:19:b6:5d:15:57:bc:27:ab:
ec:46:cc:f8:e5:85:82:cb:99:87:60:38:7f:75:fa:2a:8c:6e:
af:a3:a5:0a:04:ee:99:2e:c7:2a:eb:2f:63:85:84:7a:8f:b0:
d5:5c:5d:1f:86:31:80:d5:2b:9b:00:8d:e1:79:00:53:5f:29:
ff:5e:4f:f2:5a:cb:f2:5a:1e:fd:d2:c6:6b:d3:0b:59:df:46:
b9:e4:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:24 2025 by rpki-client