Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa
File: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (raw, json)
Hash identifier: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=
Subject key identifier: 2C:02:BA:8C:84:09:F8:2B:C6:7C:1E:32:C4:95:0B:A6:AB:72:96:B4
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019421B1C06D6A1C28A7958485E184AE51AB
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 193.53.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c0:6d:6a:1c:28:a7:95:84:85:e1:84:ae:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c02ba8c8409f82bc67c1e32c4950ba6ab7296b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:5f:93:b4:9f:9c:f5:46:61:d0:4e:16:e4:
86:e7:47:ce:a6:47:73:55:52:9b:9c:5a:c4:67:e6:
88:e6:10:bc:50:e0:31:86:dd:7a:49:7c:12:86:8b:
46:f6:02:03:48:a3:1f:8a:85:02:3c:95:80:c5:ab:
62:58:4b:db:c0:1b:b6:66:3c:ff:2d:25:80:ed:2b:
4a:fc:22:ce:63:26:de:10:4d:ce:19:a0:9d:92:c2:
1b:f4:85:e7:b2:b5:ae:3e:00:30:b7:fc:5d:54:d5:
ba:39:be:95:38:2f:49:28:0d:51:7b:66:24:84:0d:
3b:29:d7:d4:28:84:8f:6f:93:b9:04:74:a0:cf:2c:
b8:bf:ef:1d:4f:c9:18:bf:e7:83:f9:cf:2b:2a:ec:
3f:a7:f1:7a:a8:6f:34:4c:ff:32:a6:53:0b:69:aa:
58:23:d3:d5:28:e0:56:c4:56:6c:a7:cf:70:9f:2f:
e6:b2:40:18:ec:e0:aa:ff:c8:9e:a3:7a:2f:e2:5a:
a7:c0:b4:c9:1b:90:d8:4e:8c:df:b6:d6:b4:bf:10:
bd:da:27:73:3c:fc:b7:26:b1:3b:53:4a:30:77:65:
39:08:ab:7b:14:fc:5a:77:10:4e:57:6b:c4:f0:a9:
b1:4f:44:3e:00:77:31:92:e1:c4:1a:31:b9:41:19:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:BA:8C:84:09:F8:2B:C6:7C:1E:32:C4:95:0B:A6:AB:72:96:B4
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.88.0/24
Signature Algorithm: sha256WithRSAEncryption
73:44:ae:9e:6c:c5:01:82:de:99:23:bc:84:5a:97:1e:23:c5:
65:29:a7:ab:5e:57:ea:ad:8e:47:06:b1:e1:3a:b1:a8:e7:45:
af:a4:d3:79:db:dc:01:13:82:38:63:2e:28:cb:77:da:28:b6:
47:c3:30:11:a2:61:1e:7a:43:71:5c:5f:5f:64:2d:36:13:fd:
e8:28:8c:8b:0b:13:92:c4:e5:3b:5d:f7:a0:bd:f8:45:aa:c2:
79:21:f8:1b:08:c1:9d:17:b7:52:ab:6e:00:75:60:40:53:48:
8e:c6:9e:4c:d2:39:fe:34:00:b1:60:7f:4d:3e:19:4d:16:ab:
6f:77:28:cd:75:39:47:e2:85:98:11:36:f8:94:78:fc:ef:f8:
3a:9f:b7:d8:20:9c:02:36:78:a4:03:71:82:7a:2a:92:01:5e:
aa:28:64:45:f7:46:5e:04:0a:de:1c:66:98:2c:ee:9b:10:9d:
14:e5:e9:60:e1:1b:9c:60:08:46:ca:20:e2:a8:e6:ec:7f:ef:
11:9b:8e:98:34:c5:2c:67:04:ed:b9:d0:ef:67:ed:f8:bf:66:
17:13:11:62:0f:a2:bc:66:f6:71:08:e4:62:b0:65:69:de:73:
d4:13:2f:0d:ec:c9:86:f9:63:a8:2e:30:40:00:0e:68:1b:29:
f3:6e:c7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:50 2025 by rpki-client