Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/lRJP557P-ah_9W8ZheSmqCwj9zE.roa
File: lRJP557P-ah_9W8ZheSmqCwj9zE.roa (raw, json)
Hash identifier: gieMZm91HbwHzADRLU0Wb4pj7bnfrsU9RpRwfF79zX4=
Subject key identifier: 95:12:4F:E7:9E:CF:F9:A8:7F:F5:6F:19:85:E4:A6:A8:2C:23:F7:31
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 019425221DAA56C38D66FA1EE695FDC3FB87
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/lRJP557P-ah_9W8ZheSmqCwj9zE.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60161
IP address blocks: 212.138.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1d:aa:56:c3:8d:66:fa:1e:e6:95:fd:c3:fb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95124fe79ecff9a87ff56f1985e4a6a82c23f731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:51:75:37:43:e3:a6:26:dc:15:35:f7:dc:
1e:55:08:66:33:67:ac:b9:5a:69:48:96:0e:4c:f4:
56:63:bb:98:9d:12:07:10:29:73:0e:92:ec:f1:0b:
89:10:ae:c5:3f:8d:c1:e6:c6:82:77:e8:1b:03:96:
34:33:78:22:07:b7:2a:42:06:9f:36:7f:34:44:cf:
69:14:62:38:3f:13:0e:50:da:fe:e8:56:a8:64:34:
5d:03:0f:aa:8e:7a:a7:75:d3:eb:92:37:9a:40:df:
d2:9d:79:29:a6:61:fb:ff:33:6d:87:be:e6:e0:e1:
2b:8a:ef:14:f2:86:aa:52:bf:8e:10:8d:a8:8a:03:
40:ca:72:f0:ff:f3:ec:c2:29:32:35:e5:3a:f0:0f:
ac:f4:15:34:90:6e:aa:7d:50:12:86:ce:2e:3e:55:
24:fe:09:8e:b4:8c:67:bc:63:89:21:36:70:10:c0:
4f:f5:d0:62:ad:b3:c2:a1:bf:dc:d3:4d:32:ac:28:
3b:73:c1:2d:9b:f2:2f:f2:9c:d4:c5:db:df:8f:c5:
ba:a6:48:8f:5b:65:f8:5e:0c:7a:05:7e:66:1d:5b:
45:6b:df:67:13:2a:5d:6e:35:17:fe:3a:14:3c:ea:
ad:ce:a8:d4:62:41:81:f2:55:ff:6c:09:42:a2:d4:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:4F:E7:9E:CF:F9:A8:7F:F5:6F:19:85:E4:A6:A8:2C:23:F7:31
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/lRJP557P-ah_9W8ZheSmqCwj9zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.192.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f8:dc:12:4b:fa:f3:dc:96:63:9d:c1:20:50:aa:c5:83:2c:
12:f0:b1:66:41:b9:23:bf:0c:96:2c:7f:43:74:8c:8d:c1:f5:
cb:9b:2f:57:66:bc:21:d6:97:64:8e:f0:3c:89:8e:8d:aa:7d:
a6:da:78:78:e0:d3:6c:53:34:a8:eb:29:77:0f:84:69:ae:45:
5f:15:64:8a:06:25:9f:a2:20:ae:04:fd:ae:de:2d:c5:86:0f:
da:7b:60:9a:ca:09:52:46:81:38:51:0c:1a:56:d5:de:0a:51:
e1:55:88:bb:01:82:94:5b:a3:15:fd:88:a8:e6:77:08:02:5e:
cb:34:96:65:a5:7a:17:28:10:68:6e:35:95:7d:ec:07:a1:03:
56:1c:6e:81:1d:6d:85:bb:3e:1d:e4:0e:e1:82:86:7d:f5:fa:
e0:5e:f8:84:5e:10:67:24:38:c0:4e:69:81:c0:cb:c3:53:bb:
af:64:25:5b:a6:c9:16:74:e7:16:c1:a2:05:1a:fa:41:a4:0d:
4c:b0:35:17:26:43:17:03:b5:be:81:cf:7d:fe:a4:61:dd:8a:
b7:7c:eb:e0:c7:18:4b:b9:fe:93:5b:b6:51:59:87:84:1c:9f:
1f:43:27:8f:2f:e0:e8:b0:5a:cd:18:87:b7:aa:5c:c4:ed:4a:
68:68:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:46:04 2025 by rpki-client