Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/lhh7boh6PFtBNRSF33ryfDrDwcs.roa
File: lhh7boh6PFtBNRSF33ryfDrDwcs.roa (raw, json)
Hash identifier: /A+pg/gWbfPRqc4yCcnYK1YtLek/XAOCpZOAEljzlng=
Subject key identifier: 96:18:7B:6E:88:7A:3C:5B:41:35:14:85:DF:7A:F2:7C:3A:C3:C1:CB
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4FAB26EE73AFFF766A41FA2CB6AB
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/lhh7boh6PFtBNRSF33ryfDrDwcs.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 93.127.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4f:ab:26:ee:73:af:ff:76:6a:41:fa:2c:b6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96187b6e887a3c5b41351485df7af27c3ac3c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:4d:2e:e9:f4:b9:65:b4:16:a2:4e:40:c2:
b3:10:b7:17:22:97:d7:da:d1:74:52:f6:d8:84:d6:
8f:c6:57:9b:12:cf:70:2b:97:c4:8b:2b:69:28:9f:
cb:9d:8a:c7:6a:1f:7a:26:cb:49:e2:be:40:c0:c8:
d3:9a:2e:93:d3:90:6d:0b:cd:ea:28:4e:bd:c6:9c:
37:98:e7:48:60:3a:33:ce:4a:e2:04:49:c4:5a:1e:
b8:15:0f:f6:a0:84:ae:27:8c:3f:51:0d:a5:62:36:
7a:82:47:90:29:9b:44:c8:6c:4d:7c:b7:12:14:29:
82:3a:05:65:ec:dd:9c:2d:f3:3d:ec:f0:6b:b6:6f:
a4:e9:e0:e8:43:8a:a9:b2:89:77:d8:05:c3:0a:cd:
c0:9b:20:f9:01:c8:92:6f:29:a5:c5:43:1f:68:35:
96:5f:98:92:dd:b0:18:2c:c4:58:57:d1:db:a0:03:
ba:be:49:04:4e:4c:ac:a7:b9:a4:47:38:ac:29:d7:
c0:7f:a1:c8:1e:ca:81:11:0e:25:1e:29:5a:45:d4:
19:52:cb:30:85:65:24:3b:81:e4:a5:ee:88:91:db:
ff:b5:24:c3:ce:b3:42:be:60:2c:27:3b:ff:d8:93:
d4:ee:d9:1c:8b:d4:d2:71:8b:3f:66:2e:c4:82:f0:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:18:7B:6E:88:7A:3C:5B:41:35:14:85:DF:7A:F2:7C:3A:C3:C1:CB
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/lhh7boh6PFtBNRSF33ryfDrDwcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.150.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:e9:32:e8:26:6c:36:d2:ee:79:90:34:cd:60:87:80:99:80:
1d:ab:cd:59:12:fd:e7:6b:96:63:d7:aa:e9:bc:ed:86:c7:d1:
84:2d:d9:eb:cf:18:db:29:34:51:b6:09:cf:a0:a4:0a:fd:43:
e1:ff:45:a3:27:e2:70:ec:e5:ef:ee:30:e2:15:02:27:f3:20:
22:f1:ac:1a:53:b0:c0:2c:8a:3f:29:44:26:c8:82:cd:b3:66:
b3:77:e8:27:c7:dc:52:81:2f:18:dc:b9:56:32:b9:db:f4:a6:
c5:76:bb:1e:34:0f:36:77:d7:ed:6c:5e:0b:cb:be:25:61:30:
21:e8:56:b3:c6:89:76:31:bc:be:1e:c4:af:ab:d3:33:0d:d5:
02:cb:48:6d:c0:ae:32:a6:74:eb:04:67:cf:97:e5:80:26:ca:
2a:c6:20:63:ac:50:c7:18:ba:da:c2:33:78:0b:5b:9d:7f:3f:
ca:c7:ca:fb:5b:a4:7b:48:9a:0d:7d:02:5a:e2:a8:82:b3:e8:
1c:22:ff:e6:69:3c:7d:22:e0:30:a7:31:7f:2e:95:a4:cf:ef:
71:be:01:ba:c4:68:ba:75:28:2e:52:65:47:1d:27:20:88:54:
3b:7d:95:4b:28:38:a5:a5:76:e4:93:67:59:15:ff:66:25:cb:
20:1a:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:20 2025 by rpki-client