Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa
File: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (raw, json)
Hash identifier: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=
Subject key identifier: 2C:24:B1:B3:3F:85:43:81:B3:C1:9C:3C:39:D9:F3:83:8F:F0:CF:8B
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0194228E00D659A93703BE4C1E8B3FB25CF9
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 185.203.232.0/24 maxlen: 24
185.203.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:00:d6:59:a9:37:03:be:4c:1e:8b:3f:b2:5c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c24b1b33f854381b3c19c3c39d9f3838ff0cf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:60:9c:90:43:36:61:dc:84:7e:b1:27:a2:
d1:ed:52:89:2c:63:d8:67:18:d3:2e:16:12:73:6d:
1e:22:29:db:c0:1d:e2:49:88:5a:cd:c5:ea:1d:3e:
2e:31:55:81:c6:a8:97:55:7b:a9:5c:a7:9f:11:7d:
c0:3c:f8:44:0e:56:b4:4c:03:da:8a:a1:7f:26:d3:
d3:ce:96:80:84:0e:cb:21:52:ad:b1:ec:ad:50:42:
e8:2c:7e:b7:68:72:1d:f8:6b:b3:0f:eb:2d:be:c1:
1c:b2:e5:aa:19:ae:9b:51:15:46:de:66:dc:a9:12:
2f:a2:7d:8c:71:3c:3a:31:5b:da:9b:6c:77:db:18:
a1:b7:96:f7:6f:bf:04:1c:4d:ad:d6:43:02:b8:ec:
3f:0c:c1:70:19:1c:5a:74:63:22:19:f3:6b:a5:41:
1f:0a:ec:d8:ff:79:0a:57:70:c9:8d:dd:c1:b9:42:
90:bb:6e:ef:7a:e6:d6:13:f5:ad:d8:9e:fa:ec:a3:
c3:74:20:d2:32:b0:d8:78:30:27:bb:b6:07:e3:9a:
6c:3c:b2:c6:45:a4:6b:82:1e:0a:a4:6d:3b:1c:88:
40:47:bc:24:f5:03:dc:11:78:14:52:0f:99:09:f7:
fc:22:03:08:30:ba:ba:c4:8b:d3:d9:e2:ce:4b:ad:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:24:B1:B3:3F:85:43:81:B3:C1:9C:3C:39:D9:F3:83:8F:F0:CF:8B
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.232.0/24
185.203.235.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:81:b4:54:40:03:5d:ed:da:55:eb:4e:19:4e:e4:0a:ff:69:
6a:5d:f7:dd:c9:09:21:68:a1:eb:13:08:d7:49:7e:0b:ff:b1:
99:68:8c:c6:04:97:de:bc:ef:5e:91:c4:f3:5b:f0:b9:41:48:
ec:ec:2b:dd:03:61:58:a7:56:c6:a7:5d:9b:2b:7b:7a:b6:6e:
1d:02:16:83:81:29:e0:12:a0:ec:60:3a:1e:7d:59:61:1d:25:
3e:9a:12:51:7a:f3:ea:6e:6e:a9:8e:68:fa:9b:0d:04:dd:9d:
33:8c:c8:e9:1b:ac:fd:12:5e:3f:31:8d:8b:50:b2:da:9a:a5:
de:c8:15:5e:eb:a9:e0:71:70:01:64:5c:b0:24:20:0e:0b:9d:
c6:f1:bc:1c:57:d5:ef:40:3c:b3:34:87:fb:39:35:1a:89:6d:
f3:e1:31:2e:53:94:9d:26:24:54:d1:6a:80:19:72:3c:65:c2:
a6:d6:c3:11:05:22:91:fc:8d:4b:4b:8d:af:85:12:92:26:28:
6c:64:89:bd:1d:d7:b2:98:5b:06:45:bd:24:12:f3:0e:94:06:
38:6b:0d:33:72:85:97:8b:b8:46:04:fc:ca:62:c6:f2:32:c7:
2c:44:22:45:5a:a9:a7:7a:6a:1e:8c:c5:d3:73:c5:7a:ec:01:
a1:0f:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:02 2025 by rpki-client