Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/LuPOINyFzX9xpTNNLpVMhkc3RGs.roa
File: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (raw, json)
Hash identifier: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=
Subject key identifier: 2E:E3:CE:20:DC:85:CD:7F:71:A5:33:4D:2E:95:4C:86:47:37:44:6B
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0194258F83C24AA1148D0B047160314846F3
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/LuPOINyFzX9xpTNNLpVMhkc3RGs.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35106
IP address blocks: 194.69.104.0/23 maxlen: 24
2a01:110:9008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:83:c2:4a:a1:14:8d:0b:04:71:60:31:48:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ee3ce20dc85cd7f71a5334d2e954c864737446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:39:a5:01:e4:57:45:ac:19:29:89:3f:95:
d5:44:c0:20:b1:c0:e6:e1:41:cf:8a:7f:14:42:ee:
2b:ba:17:f9:6a:47:57:32:47:60:21:60:93:3d:8b:
f1:44:09:4c:26:f8:5e:06:49:2c:6f:c5:a4:2a:1b:
06:91:db:b2:c9:49:63:9c:b2:47:8a:64:b7:4f:b6:
5d:d2:80:3b:53:c8:90:c3:c9:bf:f2:54:67:d5:f0:
47:74:51:49:5c:f2:3e:6e:df:1c:1c:d6:a7:5b:43:
7b:8e:ae:51:c4:5d:3b:c4:a6:23:e5:49:e0:99:0b:
24:45:02:d1:bc:7e:92:7a:61:9b:7c:3e:8d:ec:d1:
a3:06:0a:1c:a2:72:18:2b:ff:7e:55:a7:37:85:77:
6c:0f:06:31:36:8d:09:76:77:24:e0:29:2a:7a:1d:
50:a7:81:a6:ba:46:ee:06:3c:74:74:95:b9:81:7d:
c0:ae:03:4b:98:8e:53:30:ee:77:aa:0e:a0:b8:ad:
f2:54:2d:53:6f:59:3b:d4:23:06:52:b0:6d:d3:91:
13:ea:da:b7:ad:01:f5:ce:3f:97:8a:69:12:02:ac:
2a:76:3c:18:48:a8:8d:54:1d:bd:f3:b4:b4:34:53:
5a:b4:47:cb:8f:37:7c:02:4c:6a:3d:b7:e6:ec:4b:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E3:CE:20:DC:85:CD:7F:71:A5:33:4D:2E:95:4C:86:47:37:44:6B
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/LuPOINyFzX9xpTNNLpVMhkc3RGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.104.0/23
IPv6:
2a01:110:9008::/48
Signature Algorithm: sha256WithRSAEncryption
55:24:5d:b2:af:85:83:0c:19:84:f5:12:33:46:52:11:2b:3b:
94:3c:65:46:4d:0f:b3:9d:c1:7a:58:38:63:d6:c6:59:db:42:
df:0c:20:43:e7:9c:19:31:26:1e:63:05:ba:e8:57:75:af:1d:
df:3e:58:fa:e1:37:ea:16:d6:5e:69:06:ab:6a:48:e0:f2:3e:
d3:49:49:36:bc:c4:cc:4b:a5:c1:bb:5b:77:81:0a:5f:d8:22:
37:72:80:aa:7f:7c:dd:9f:9b:fd:71:7a:d8:1b:0a:0a:cc:5d:
8f:d1:fb:19:54:a7:a5:80:54:1f:af:63:1e:82:7e:e6:6a:08:
37:0d:1c:58:7b:b8:b3:a4:94:47:d9:af:54:d1:3f:4b:88:64:
c1:c0:a2:92:82:f2:63:9f:8e:af:fe:44:1c:88:72:58:f8:f5:
d4:fd:93:7d:1f:1d:88:6b:b5:89:e7:f1:71:a7:3a:3d:3a:73:
2d:27:2d:e3:41:2e:40:75:e3:c8:8e:79:e4:01:b5:1a:70:a5:
48:da:76:37:35:32:97:b9:5d:d5:c6:75:d5:ee:0e:fe:19:b8:
b3:b2:95:72:a9:6a:08:dd:83:41:98:39:09:b6:92:05:0f:2f:
61:24:c1:a0:dd:f9:e7:88:f0:87:58:1c:42:15:1f:c8:09:f9:
8c:23:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:28 2025 by rpki-client