Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/lvN2WOPvV5KHC8ZyAeDe5V2H9oc.roa
File: lvN2WOPvV5KHC8ZyAeDe5V2H9oc.roa (raw, json)
Hash identifier: Nh7UeQS8f90rjPYbwZZwjcnHax4rlbcgMRh3GqnO0aQ=
Subject key identifier: 96:F3:76:58:E3:EF:57:92:87:0B:C6:72:01:E0:DE:E5:5D:87:F6:87
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0194236A1048825D431E39A69374C2D2FCA6
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/lvN2WOPvV5KHC8ZyAeDe5V2H9oc.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 89.184.10.0/23 maxlen: 23
89.184.12.0/23 maxlen: 23
89.184.16.0/22 maxlen: 24
193.223.103.0/24 maxlen: 24
193.223.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:48:82:5d:43:1e:39:a6:93:74:c2:d2:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f37658e3ef5792870bc67201e0dee55d87f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:ed:fd:60:ec:6d:b1:fb:d8:4c:2a:23:08:
0f:00:e6:94:4e:79:74:cf:d5:20:9b:36:ee:c2:28:
64:65:2c:3d:69:19:96:94:d3:8f:e1:f8:2b:83:a1:
7d:ee:a8:fb:4f:ea:8d:5b:31:07:88:11:0f:81:3e:
cc:c8:53:67:c9:ce:e8:41:a8:81:c7:18:8e:46:4a:
b7:4b:63:80:12:a0:95:fc:b2:af:d4:36:f7:64:47:
85:67:0c:1d:0f:6a:c7:01:5b:e8:69:64:4b:d7:29:
b9:8a:17:d7:ef:9b:87:bd:45:95:02:58:38:35:24:
78:56:83:38:e2:70:b2:c0:bd:eb:45:95:5c:b1:e1:
ff:40:1b:17:71:64:ec:12:51:1a:eb:e8:e7:f8:85:
e9:f6:42:a0:5a:63:12:c8:53:77:54:4c:d3:44:39:
6d:7c:6c:db:95:11:ee:d6:26:2e:78:96:25:b8:da:
77:50:c5:64:ff:9b:97:04:5c:63:f1:05:c2:4c:50:
37:b1:1f:82:a5:f9:0c:00:80:31:0a:49:06:3b:b1:
a8:8b:ef:67:92:66:a5:7a:1d:27:a9:a5:e5:91:f4:
dc:d8:c9:2d:50:53:35:bd:f3:46:1f:9b:17:e6:a1:
95:0f:b7:3a:74:6c:42:45:f1:f7:7d:ac:73:37:66:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:76:58:E3:EF:57:92:87:0B:C6:72:01:E0:DE:E5:5D:87:F6:87
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/lvN2WOPvV5KHC8ZyAeDe5V2H9oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.10.0-89.184.13.255
89.184.16.0/22
193.223.103.0/24
193.223.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:56:e4:a2:6e:0c:4c:aa:77:55:bd:4b:17:90:7f:a3:52:84:
ab:ef:20:1f:6a:d4:5a:a9:fd:f9:ed:95:60:a0:f4:13:5c:11:
5b:75:10:57:98:4e:2b:b5:e0:99:84:4a:f3:89:78:0b:cf:88:
75:bc:b3:f9:af:56:0b:f7:0a:f9:12:aa:42:be:0a:a4:73:8a:
e9:a5:93:37:5b:f7:2c:10:4b:e9:9d:09:19:60:1b:09:24:c7:
e2:57:bf:23:21:80:17:57:7d:7b:bf:94:0a:70:0c:3f:c7:f7:
7c:47:e3:77:5a:34:10:16:48:0c:c9:83:a8:28:a1:9e:54:8f:
b1:00:ae:99:2b:a5:dd:e8:99:18:4d:2f:f7:d8:d0:81:61:bb:
a8:b9:88:73:59:08:12:9a:bb:75:81:99:9a:31:cc:87:17:c4:
bf:5b:73:c1:a7:1b:8f:83:ed:03:b7:c8:3e:4c:c5:d3:70:4c:
dd:2a:fc:9b:6c:9c:f5:d6:dd:c0:ac:56:2f:7a:32:0a:5b:86:
f6:4c:82:56:7b:47:bc:29:97:6e:99:44:e6:11:fe:1e:a0:05:
71:8c:f9:f7:0c:fc:3a:de:0a:bb:4a:dd:79:82:59:49:39:19:
aa:5d:e4:14:a7:7e:4b:d8:49:5b:9b:3f:a4:80:7b:2c:e8:9c:
66:e1:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:02 2025 by rpki-client