Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/lpQpCVUUyuieF-my1hQ69F4PEZk.roa
File: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (raw, json)
Hash identifier: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=
Subject key identifier: 96:94:29:09:55:14:CA:E8:9E:17:E9:B2:D6:14:3A:F4:5E:0F:11:99
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019420682F3DD586193B3F6CE2C49571329D
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/lpQpCVUUyuieF-my1hQ69F4PEZk.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59494
IP address blocks: 185.145.140.0/22 maxlen: 22
185.145.140.0/23 maxlen: 23
185.145.142.0/23 maxlen: 23
193.187.80.0/23 maxlen: 23
2a07:4480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2f:3d:d5:86:19:3b:3f:6c:e2:c4:95:71:32:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=969429095514cae89e17e9b2d6143af45e0f1199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:e8:8a:c1:c3:08:94:0a:0b:bc:ef:f7:0c:
b8:3c:c6:1b:80:47:b8:83:f0:b9:ae:33:5c:a2:ba:
b1:2b:3c:cf:ba:1c:01:df:2a:30:89:4a:91:91:40:
c8:2c:e5:10:a1:6e:38:12:c8:1d:7d:ce:17:c9:68:
d9:34:b4:de:b7:c0:de:9e:41:4b:9e:5b:e1:46:4e:
5e:7b:3a:52:42:f4:ba:94:05:a6:85:6c:1a:18:13:
35:33:23:d0:af:38:f2:86:ba:f5:b7:83:f8:da:c0:
ff:8e:9d:f8:4a:dc:ee:03:a3:f0:d2:15:e1:4e:70:
65:e9:db:0d:3c:d3:e7:95:98:f7:99:49:b3:d0:b9:
9d:24:53:2e:4f:35:5f:65:29:37:d8:28:c7:d3:0e:
d4:98:31:10:43:60:28:0f:67:d0:8a:d3:4c:40:2c:
a9:3d:be:ff:f4:a8:f4:35:fa:3f:df:7f:35:44:87:
55:4f:c1:50:79:79:9e:f7:d3:35:65:9a:0f:28:0e:
53:2e:b3:80:94:4b:c3:51:c5:24:62:05:b0:63:8e:
c4:8f:a0:1a:96:51:88:51:50:0a:a9:92:55:b3:d3:
c2:b5:29:0a:14:a7:d8:b6:9f:8a:00:89:fa:6d:7f:
56:09:d3:89:12:c5:9c:02:b8:fe:e2:67:ac:e8:75:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:94:29:09:55:14:CA:E8:9E:17:E9:B2:D6:14:3A:F4:5E:0F:11:99
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/lpQpCVUUyuieF-my1hQ69F4PEZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.140.0/22
193.187.80.0/23
IPv6:
2a07:4480::/32
Signature Algorithm: sha256WithRSAEncryption
13:ac:b2:5c:de:d5:c1:82:a7:cf:1a:fb:c7:4a:ee:d9:07:bc:
d2:e3:85:7a:3e:35:97:ee:3d:b7:c5:87:41:8a:13:d0:d9:ed:
55:c2:12:bd:09:1c:a3:94:33:69:2b:9e:50:da:2d:fa:51:62:
c8:3b:b5:89:9a:6d:98:f0:70:86:b4:31:0a:29:12:70:7b:1d:
3c:a3:12:db:59:c4:be:18:6e:b9:a4:cd:8b:67:aa:27:37:8f:
da:2d:8c:11:a7:4a:7f:d7:17:32:a0:63:ab:f6:85:63:b9:ff:
f3:bc:10:f4:5c:b5:92:29:fa:6e:dc:20:f1:57:c0:0c:49:44:
3b:b5:f5:3c:c3:ae:39:68:ac:73:33:d6:6d:8a:e7:8f:d2:aa:
04:03:59:c7:73:9e:ff:a4:9c:85:f1:7c:ac:e7:00:67:eb:42:
94:53:a6:1e:4b:da:d1:74:3d:e7:ee:6f:b4:0c:46:61:24:41:
8c:28:8b:7c:c1:cf:a2:be:0c:ad:e8:9a:7a:3e:63:f9:51:cf:
34:55:12:36:45:98:de:c2:d6:03:f0:d9:d8:32:ff:05:de:3a:
df:21:2e:93:39:f4:37:61:ef:31:7e:af:74:0c:0c:37:c2:1b:
fe:15:5e:fa:90:42:d2:47:f9:80:78:af:43:87:80:b4:c4:ea:
40:c8:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:08 2025 by rpki-client