Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/lrunxs8EBQWo1LhIzQdrw-3rbsE.roa
File: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (raw, json)
Hash identifier: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=
Subject key identifier: 96:BB:A7:C6:CF:04:05:05:A8:D4:B8:48:CD:07:6B:C3:ED:EB:6E:C1
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA5081607DD06080538BB317E0688
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/lrunxs8EBQWo1LhIzQdrw-3rbsE.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35478
IP address blocks: 194.50.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:08:16:07:dd:06:08:05:38:bb:31:7e:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96bba7c6cf040505a8d4b848cd076bc3edeb6ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:4d:ce:40:a1:52:01:21:82:f6:0f:58:fd:
fc:f3:17:0c:10:f1:44:f1:5c:9e:3d:30:7d:85:cd:
ce:eb:58:f5:34:11:46:39:83:f5:37:2f:34:d9:c9:
7a:3c:9e:a9:71:f5:41:50:a5:dc:3b:f9:4c:4d:f1:
0f:e0:5e:bd:b6:dd:8f:d5:6c:df:5e:81:95:4a:18:
a7:30:7b:20:94:5f:30:8e:1d:3f:78:7e:97:0c:22:
aa:04:f0:2e:1e:d9:a8:bd:e6:a0:7c:69:b2:22:6e:
35:f7:d4:1b:48:0a:63:ac:43:76:8b:ef:57:3d:3e:
68:7b:e1:e4:d8:60:1e:7f:ad:eb:35:4c:94:95:40:
28:77:b8:c0:fc:66:91:30:51:17:da:e8:87:c5:13:
17:1b:0b:0c:ea:95:d0:c8:99:96:1f:6b:20:76:cf:
46:6f:45:40:ab:fa:c7:98:1f:b8:3b:f9:2b:31:ec:
42:be:e9:5e:cc:08:a5:42:f1:eb:ac:37:bb:a8:3d:
fc:e9:d7:63:23:f0:42:3e:e0:fa:27:44:ac:6c:37:
b7:39:1b:b3:38:8b:d3:61:96:1f:db:d8:9b:25:48:
53:43:ca:31:2e:e3:1b:28:96:74:18:a8:50:8d:71:
6c:87:ef:b6:09:bb:df:4f:76:de:82:12:7a:eb:fc:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:A7:C6:CF:04:05:05:A8:D4:B8:48:CD:07:6B:C3:ED:EB:6E:C1
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/lrunxs8EBQWo1LhIzQdrw-3rbsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.82.0/24
Signature Algorithm: sha256WithRSAEncryption
54:07:84:6f:06:72:02:20:db:0e:e3:bd:18:e1:35:d5:d9:bf:
cc:dd:c9:e9:83:70:af:bc:c5:36:55:11:a4:71:82:35:db:da:
c6:72:a5:f4:d1:54:6b:06:ca:be:30:12:20:3c:6a:c9:37:8f:
4d:61:9d:59:88:e1:ae:f5:4d:be:35:a6:75:8c:2e:2e:b4:31:
c9:d2:04:7e:02:88:6a:38:10:24:d8:d9:1e:e7:ea:25:24:7a:
c2:7b:cf:3d:1f:b1:9e:5e:48:dd:cf:ef:cd:e7:bc:a3:30:25:
48:c8:bf:1a:e5:bd:21:67:96:a0:6e:7c:8f:84:1d:d5:1e:ba:
f5:7d:bf:a9:24:29:1f:e3:d0:ee:25:e5:4e:c8:5b:a9:dd:7f:
8f:d6:41:27:11:1d:b4:d2:bd:cd:3d:99:95:3a:de:fa:af:a9:
9c:e2:7e:ea:5f:aa:b2:d1:06:7b:00:f6:54:af:e2:90:28:c8:
d0:06:77:94:e3:8e:bc:65:93:99:46:b1:4c:74:87:26:12:0c:
d3:78:f6:11:ab:30:d1:05:39:9b:3f:e6:69:39:fe:6f:c7:e8:
88:9a:88:01:ed:95:bd:57:fd:7f:7e:6e:49:2a:ca:2a:c4:56:
7a:f1:2e:e0:26:98:27:64:95:13:05:7b:2e:1c:62:32:7a:2c:
0e:41:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:03:38 2025 by rpki-client