Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ls3R7on7JIepLbiaekfxdJdXd2U.roa
File: ls3R7on7JIepLbiaekfxdJdXd2U.roa (raw, json)
Hash identifier: Vn4/dA8gyRgDccPfceYEXiQgzMk0CB1sI1OXw6sj8Tw=
Subject key identifier: 96:CD:D1:EE:89:FB:24:87:A9:2D:B8:9A:7A:47:F1:74:97:57:77:65
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0195F6E974C658314A6859A762F98AB626EA
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ls3R7on7JIepLbiaekfxdJdXd2U.roa
Signing time: Wed 02 Apr 2025 14:30:49 +0000
ROA not before: Wed 02 Apr 2025 14:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:e9:74:c6:58:31:4a:68:59:a7:62:f9:8a:b6:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 2 14:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96cdd1ee89fb2487a92db89a7a47f17497577765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:a9:79:c0:1b:a5:8f:ea:36:c5:89:ae:89:
d0:62:01:9a:95:8a:7c:27:d3:d0:dc:68:6d:4e:31:
26:49:36:b2:d4:89:24:9c:3c:0d:b4:cb:17:e1:e8:
bb:8e:06:5f:b3:4e:1e:01:f7:a4:c0:0c:af:70:7b:
5f:f7:b3:4d:1e:e3:9d:bf:26:3d:ba:6d:11:33:fc:
82:c7:ff:6b:bc:b1:04:21:4f:2a:04:7c:f8:64:af:
ab:7e:a2:4b:34:d0:61:8e:ab:49:9d:3b:54:04:dc:
7d:e8:67:6c:7b:40:d0:f4:20:05:0c:ea:c9:60:a4:
ac:fa:ae:a5:77:1f:52:dd:ea:6d:ca:d3:56:57:7e:
93:d4:64:62:14:f1:59:de:60:ff:9c:dd:eb:a3:fd:
cf:aa:34:8e:00:1a:ef:73:66:8e:3a:b9:74:27:32:
bf:33:c2:49:42:cf:db:2e:06:31:ab:f7:35:38:2a:
b5:75:04:dd:e5:9f:66:eb:18:d9:00:a0:cd:ef:cf:
e3:a4:ee:fe:e9:9b:8f:07:4d:e8:67:9a:0e:8d:72:
dd:1b:4b:9a:50:3e:48:6c:17:1f:f2:83:a2:08:3d:
b8:37:27:f7:28:35:f1:17:13:9e:0c:27:3c:07:ad:
36:f0:e6:56:8b:8e:94:25:c8:85:d4:fb:af:c9:f8:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CD:D1:EE:89:FB:24:87:A9:2D:B8:9A:7A:47:F1:74:97:57:77:65
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ls3R7on7JIepLbiaekfxdJdXd2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
54:96:88:9d:ca:d6:c3:01:e9:a3:cf:03:fd:0a:46:db:23:68:
85:95:94:c0:9c:3f:38:68:4e:9c:52:20:c3:2e:f2:d6:3c:9e:
fc:e8:ce:17:8b:e2:73:d6:7b:0b:02:3c:35:49:e4:5a:92:65:
93:75:19:da:ab:1c:9a:d2:06:7f:72:04:3f:d1:c2:56:a3:1c:
50:03:a1:1e:dd:d1:60:b0:82:4b:ad:ae:a1:ce:77:8c:ad:03:
e1:26:22:1b:16:37:50:09:19:45:d2:e9:27:a8:e7:66:c9:85:
60:e3:41:31:26:67:67:13:d6:15:c6:c6:81:4c:31:80:f9:18:
23:b2:43:c4:23:21:71:73:14:6c:05:c1:34:b6:38:e1:b4:9c:
c0:5b:1e:c1:73:67:01:a8:ee:dd:31:31:92:99:d4:a0:05:fb:
5b:c9:54:7d:1c:ec:e7:17:62:93:77:5c:69:63:8c:4a:f3:5d:
40:fe:5d:06:a2:90:65:7f:18:28:c5:01:f1:87:18:de:fa:13:
b0:76:a0:94:fb:08:85:de:35:70:77:4a:14:8b:09:bd:75:54:
fa:17:22:da:cb:c6:e5:a8:6c:7f:83:1b:78:d3:39:9f:b7:ef:
51:3d:c9:e9:32:33:ad:d2:be:99:6c:5f:10:d7:06:3e:03:eb:
0f:92:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:11 2025 by rpki-client