Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa
File: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (raw, json)
Hash identifier: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=
Subject key identifier: 2D:8C:DC:E8:EB:5A:4B:C2:95:E9:07:06:E6:11:E6:62:34:4C:93:46
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 019427B47DE19B2C772F76CF14BD9B4C89B6
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa
Signing time: Thu 02 Jan 2025 15:48:47 +0000
ROA not before: Thu 02 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57559
IP address blocks: 93.180.88.0/24 maxlen: 24
93.180.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:7d:e1:9b:2c:77:2f:76:cf:14:bd:9b:4c:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Jan 2 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d8cdce8eb5a4bc295e90706e611e662344c9346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:92:4a:e9:79:d0:9a:c3:2a:06:19:26:4c:
8c:f1:72:e0:0d:b5:cb:38:49:ff:35:91:f5:62:6d:
18:af:b3:bc:3f:47:a5:0a:da:5f:b1:ac:c8:50:a9:
09:12:7a:89:5f:5b:0f:f1:f5:26:5c:6e:b4:3f:21:
28:ff:b5:1b:aa:1c:51:70:2a:ba:5a:01:f7:09:63:
1c:89:9d:8c:d7:21:21:ec:7d:b6:04:e7:a0:19:6f:
ea:04:00:6a:c9:e2:ba:50:9b:19:a3:09:13:f0:c1:
de:9a:3d:d6:80:79:c3:49:15:84:04:5f:94:2c:8f:
67:70:0c:22:8c:c8:54:a3:dd:e4:c3:d9:74:02:ba:
22:86:c6:4f:ca:40:fd:a7:c2:99:5b:9b:72:12:fb:
4d:0f:5f:da:90:9b:a0:67:3f:1e:1d:27:3e:ee:c7:
4e:f0:2d:e2:2a:f1:e4:c5:15:1b:c6:86:be:77:67:
3e:94:27:f4:19:3c:67:fc:07:4b:62:a7:1a:46:e3:
f6:dc:4b:35:3b:ef:42:0c:cc:a0:80:5b:72:70:37:
ac:59:13:31:7b:2c:95:87:07:4b:d8:94:3f:0b:c3:
98:27:5f:38:d6:49:97:55:32:bb:32:b9:3e:fa:3d:
80:55:5f:0f:9e:44:bd:57:2b:d1:ab:f0:4d:88:52:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:DC:E8:EB:5A:4B:C2:95:E9:07:06:E6:11:E6:62:34:4C:93:46
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.88.0/24
93.180.94.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0e:3d:c5:91:70:11:2a:03:85:3f:35:48:53:75:46:fa:36:
4e:81:5b:32:e8:0b:39:21:be:ec:1f:90:87:47:f9:f8:0e:1c:
b8:f9:76:0b:a4:0d:0d:d0:47:37:61:7c:9b:e7:d6:e5:16:42:
d5:6f:a3:c0:af:05:87:57:a2:ca:ba:7d:cf:fb:48:ab:ec:6c:
98:95:67:5e:f6:3c:57:64:54:4f:16:ab:d9:be:e5:9f:6a:a9:
5e:40:85:4f:cd:d5:65:10:e7:0f:e1:d5:68:78:20:be:0c:c5:
63:22:db:63:6b:3f:4e:fd:1f:19:6f:bb:9c:53:c6:71:28:29:
67:ce:9f:c7:47:81:f3:48:13:ac:10:b3:a8:d5:76:1c:ba:94:
91:6b:8a:70:cb:7f:a9:da:77:28:2f:b1:2e:23:5b:c8:5d:3b:
1a:16:58:fc:ec:a6:0e:de:a9:db:8d:5a:73:4b:1c:49:4a:68:
11:df:24:85:e7:6b:09:3d:0a:43:83:8c:d6:19:e3:3a:cd:2d:
9a:1c:f4:f7:fc:be:f8:ee:cc:37:40:bf:68:b5:3d:31:09:09:
28:bb:db:4f:7e:af:fd:42:53:f6:6d:8f:db:c6:92:f8:fb:cd:
f4:e3:ad:d3:32:2e:6a:63:06:b1:eb:fc:a2:9a:6f:ff:07:96:
db:17:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:43:52 2025 by rpki-client