Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/LhfwTdWFWStLfcssza7_4OeUEq0.roa
File: LhfwTdWFWStLfcssza7_4OeUEq0.roa (raw, json)
Hash identifier: 733IJ4DXj92/axm7cq0je/9e/z1H6N96iBs0WMeqrVk=
Subject key identifier: 2E:17:F0:4D:D5:85:59:2B:4B:7D:CB:2C:CD:AE:FF:E0:E7:94:12:AD
Certificate issuer: /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial: 0194244598FAE7FE2038AF2F50E682A14A15
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/LhfwTdWFWStLfcssza7_4OeUEq0.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8896
IP address blocks: 91.201.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:98:fa:e7:fe:20:38:af:2f:50:e6:82:a1:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e17f04dd585592b4b7dcb2ccdaeffe0e79412ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:ef:78:91:c4:20:6d:17:fc:7d:49:34:1a:
8b:c4:38:90:46:95:a7:ea:26:85:81:ab:15:a3:c8:
13:74:85:e1:1b:32:ba:19:63:9f:a9:0e:6d:c5:84:
cb:ad:28:db:4c:a8:65:37:8d:45:e0:43:21:0d:48:
44:85:c0:7b:8b:83:c1:05:3c:61:63:c9:fc:b3:47:
e2:c5:6f:7b:da:12:0b:f0:32:e9:f9:e6:15:1f:af:
a9:fd:08:b5:b9:e7:5c:43:8d:85:df:fa:bc:3a:48:
19:3b:ae:9c:f1:d4:05:77:36:43:b6:47:d1:31:81:
42:f1:70:c2:cf:72:3b:86:d6:be:ca:e6:d3:45:c3:
36:ba:5a:87:38:56:f0:35:29:44:fe:51:ba:a8:4a:
a2:dd:69:fe:20:74:17:5f:70:8f:9b:64:19:8a:00:
20:f8:9a:63:87:e2:67:79:13:49:08:da:a8:67:01:
67:c4:7b:f1:a3:c2:d8:0b:19:5a:4c:93:6a:a0:9b:
cd:ba:80:f2:c9:74:59:31:c3:88:f8:24:b8:ac:e1:
09:e9:c8:d9:de:ee:14:4c:d0:d5:47:6c:a1:63:79:
e2:cf:63:4f:e6:fe:f8:92:7e:75:03:32:fc:47:bd:
c2:ff:36:e3:d4:52:8d:3b:a0:1a:47:62:7a:10:70:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:F0:4D:D5:85:59:2B:4B:7D:CB:2C:CD:AE:FF:E0:E7:94:12:AD
X509v3 Authority Key Identifier:
keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/LhfwTdWFWStLfcssza7_4OeUEq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.201.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2d:b1:23:65:63:97:c5:7e:c9:87:0b:c9:68:0b:9c:12:01:
52:eb:29:ae:c4:a5:f5:b2:96:52:b3:3b:24:c6:f3:96:87:58:
f0:cd:5e:e8:d4:67:24:22:27:57:fc:6a:66:b9:bb:dd:a8:8e:
34:59:76:e1:ba:f6:3b:0f:53:b4:2a:34:7c:c1:ba:c5:33:6f:
9e:8c:f0:e1:66:f7:b2:31:08:60:2b:17:54:22:8d:aa:c3:87:
ac:32:c4:10:42:fc:c0:61:75:87:6b:3e:af:ba:56:3a:b9:7d:
07:bc:a9:49:47:61:2e:9a:e0:90:7c:03:7f:9c:bd:7b:0e:b4:
22:9b:0b:af:e7:7f:34:82:21:88:92:d7:cc:ba:45:3f:a2:cf:
26:ac:10:7b:6e:15:5a:4c:79:ef:7d:01:d6:ed:5b:d3:34:cb:
0b:f6:f5:c1:93:c5:38:4c:96:66:c1:0c:b6:03:71:22:b1:e9:
c2:b4:cd:11:a7:5d:fd:65:5a:de:f8:13:89:d5:80:9f:12:94:
4c:1e:be:75:b0:d9:87:9c:03:b2:a7:73:80:3b:67:0b:64:c6:
ca:c2:7f:c4:3e:7c:ef:08:c1:a1:c3:9e:81:f2:8d:fe:0c:66:
78:8a:f2:1e:83:70:7d:7e:cb:cd:84:c9:7f:6f:b7:22:8d:bd:
ff:8d:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:21 2025 by rpki-client