Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa
File: LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa (raw, json)
Hash identifier: 0hquK8SkvqQbNfKEbYjZG0icP/g4QwK+sH8IO5xeaXI=
Subject key identifier: 2C:78:82:6D:B5:10:DD:92:7F:0A:7D:ED:45:09:65:24:E7:1D:E1:B5
Certificate issuer: /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial: 01941F8C90051D39806B408BCA96CA850398
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62119
IP address blocks: 91.193.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:90:05:1d:39:80:6b:40:8b:ca:96:ca:85:03:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c78826db510dd927f0a7ded45096524e71de1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:66:60:ed:b6:3e:bd:8c:5b:42:02:7f:18:
28:0b:f4:f8:7b:13:f2:02:37:d4:e5:e1:d4:9d:65:
f2:08:af:b5:6e:c4:57:49:f5:5f:3c:a2:3b:cd:d0:
c5:48:b3:18:0e:9d:ba:29:bf:8a:63:8e:c3:f4:a9:
d4:c5:fa:03:be:8d:32:09:4c:46:a5:3a:6f:3f:19:
32:f2:60:79:37:98:2d:5d:92:19:2f:28:74:87:9a:
86:a0:36:4d:bd:3d:de:7e:79:82:bf:7b:be:c4:7d:
07:45:bf:0d:82:02:02:cb:f5:82:0e:4d:59:45:88:
a4:6f:93:62:43:53:49:34:01:e8:11:47:da:67:20:
1a:41:09:23:e6:02:82:ea:a3:7a:3a:51:04:a1:67:
49:38:02:9d:ed:a8:1f:da:5a:40:2f:8c:d6:c5:7b:
fe:eb:80:dd:f1:75:58:73:2e:2a:e1:a9:66:3d:72:
3f:09:e4:fc:c3:3d:0f:c0:cd:3e:87:ec:95:4d:02:
0b:9f:e4:e7:64:db:e0:88:d6:e0:d9:6e:87:75:1a:
43:16:d7:f2:05:3a:c3:39:ae:0d:b1:93:e6:3e:97:
a4:fe:b3:fc:d9:2c:bc:61:0a:55:61:e1:36:da:ca:
c7:26:92:ba:0b:1d:b2:98:ff:a2:e0:2e:d4:f6:2a:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:82:6D:B5:10:DD:92:7F:0A:7D:ED:45:09:65:24:E7:1D:E1:B5
X509v3 Authority Key Identifier:
keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.91.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b1:6e:60:a7:42:35:03:d7:14:35:1b:0e:ea:64:7a:b7:c1:
f2:f5:55:13:ae:66:18:48:ff:3b:1e:cc:56:10:91:84:27:b3:
91:ee:9e:73:e6:3b:78:e8:81:22:27:64:2d:fd:d2:5d:85:28:
46:bc:41:8a:22:32:a4:14:e3:b8:14:a4:47:b2:df:a9:c8:62:
0a:97:ff:22:9c:5e:63:13:98:45:cd:e7:7a:41:52:65:82:cf:
0d:f1:e1:52:4b:b7:a0:02:7a:30:d5:93:08:7c:5b:f8:4c:ca:
12:2f:d0:1b:8e:4b:70:d9:74:3c:13:20:f0:f6:78:1e:0c:06:
bf:14:19:64:9e:70:31:77:f5:96:6a:92:15:6b:37:ca:67:16:
83:d2:52:db:a3:74:8d:7d:1b:62:db:a7:cc:00:6b:bf:99:7a:
88:f9:da:28:8e:9c:1c:e7:8b:cc:0f:46:46:61:eb:c5:12:4b:
f7:ef:35:3a:54:2f:5e:07:36:e7:fe:7b:c9:5f:84:40:ef:b8:
01:10:2a:95:c7:1c:44:3b:fe:ed:71:a7:59:d4:06:ec:0e:4c:
0d:67:4b:55:04:b1:79:85:c1:10:63:23:fc:da:c1:e1:af:0d:
02:65:8a:26:9b:de:d6:6d:7c:07:60:a7:e3:f9:24:4a:97:8a:
e3:63:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:28:20 2025 by rpki-client