Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/lh0r2c2rRWOg01uWo5CM03GyM1s.roa
File: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (raw, json)
Hash identifier: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=
Subject key identifier: 96:1D:2B:D9:CD:AB:45:63:A0:D3:5B:96:A3:90:8C:D3:71:B2:33:5B
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 01942143CCBC0ADD85C014851CF412B05CE0
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/lh0r2c2rRWOg01uWo5CM03GyM1s.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 193.3.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cc:bc:0a:dd:85:c0:14:85:1c:f4:12:b0:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=961d2bd9cdab4563a0d35b96a3908cd371b2335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:e6:e7:da:75:ea:11:47:3a:c5:18:77:69:
20:af:7a:12:e3:bb:d5:1c:39:a6:3d:75:70:06:1c:
b0:65:0d:55:60:f7:52:c0:77:de:e2:73:44:c3:d1:
28:cd:d4:1f:6a:4b:72:25:5a:48:06:c0:c1:36:7e:
03:42:25:26:58:4e:d1:df:b1:eb:57:cc:d4:e8:47:
cb:85:bf:4e:84:0d:da:eb:2c:35:45:3a:bc:c2:78:
ea:9c:56:0a:fb:05:6c:67:13:cf:6a:a9:3d:f0:5a:
e7:71:53:a6:0d:bc:39:22:60:76:f5:a4:6e:bb:99:
42:6c:92:06:84:1d:1d:3a:d4:46:17:17:a0:ca:bd:
86:66:3a:13:32:fa:26:6e:74:86:a4:96:66:c7:c4:
23:92:33:64:5c:dd:d5:56:1a:eb:19:4c:75:8b:60:
97:5f:e5:66:65:fd:b0:73:74:dc:df:3f:12:b8:8e:
cd:bf:be:2b:8b:d4:a5:e0:23:5a:e0:7f:f5:09:17:
7c:f2:41:5a:19:4c:55:96:6a:f5:2b:e5:c3:2e:67:
6b:cc:8f:25:f3:47:da:9c:bb:af:e0:02:6c:7b:d2:
e6:4d:3f:ae:fa:1f:f5:61:54:c3:c1:93:40:58:90:
c8:0c:37:38:17:5f:6d:5f:dd:13:b4:77:52:58:ae:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1D:2B:D9:CD:AB:45:63:A0:D3:5B:96:A3:90:8C:D3:71:B2:33:5B
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/lh0r2c2rRWOg01uWo5CM03GyM1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8b:07:c4:be:62:62:3a:2c:c1:6a:44:56:bd:04:af:b9:1e:
9f:a5:6f:0a:2b:7a:1f:da:fc:29:ed:28:73:61:d9:2e:8d:75:
95:1d:cc:03:1d:16:e0:11:9c:b2:3a:b6:98:6f:cf:0f:9c:e8:
53:6d:2b:3d:f0:c1:10:e9:91:ef:ad:ca:7f:ef:18:7f:e0:87:
3c:c5:e6:ee:f0:d3:5d:87:ea:fa:55:f6:f9:72:9c:d1:11:06:
73:e8:c4:5c:d1:29:f4:0f:76:46:1f:fd:08:27:03:c2:c8:53:
ee:87:20:07:67:91:95:b8:0d:4c:13:2d:54:4b:19:5c:51:74:
90:6b:e3:bb:6c:7f:fb:4c:16:46:14:27:a5:f3:9f:66:d4:0c:
74:dd:d5:3a:68:6e:49:53:f6:e2:e7:fc:4f:c8:0a:19:c9:5d:
7b:50:e6:69:cb:80:02:49:53:6c:8e:ac:7b:95:5d:de:e6:aa:
80:ad:7d:7f:35:49:d3:b1:03:2f:cb:0e:e5:fc:bd:e6:a6:de:
80:99:f2:ef:54:ce:35:87:26:a6:84:f7:a6:bd:8d:70:99:2b:
b8:eb:0e:01:a9:05:80:3a:c7:13:64:2c:14:8d:d9:c5:69:7b:
8f:5a:39:28:d9:48:9a:ed:e5:b1:72:88:e1:9f:75:ac:c8:d5:
31:4a:4e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:04 2025 by rpki-client