Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/lPP1CTZE_I869rs5FvdeSS4FA3k.roa
File: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (raw, json)
Hash identifier: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=
Subject key identifier: 94:F3:F5:09:36:44:FC:8F:3A:F6:BB:39:16:F7:5E:49:2E:05:03:79
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0194236A171D4E781DBA44384465A7E43EB2
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/lPP1CTZE_I869rs5FvdeSS4FA3k.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60571
IP address blocks: 194.104.148.0/24 maxlen: 24
2a06:1c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:17:1d:4e:78:1d:ba:44:38:44:65:a7:e4:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f3f5093644fc8f3af6bb3916f75e492e050379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:f5:09:7d:1f:9b:f2:67:b4:f0:24:79:b1:
0e:36:a2:3c:ae:21:e9:3b:18:53:b7:32:e8:8d:70:
12:28:c8:17:4c:f8:00:dc:d0:42:c3:a5:88:1d:96:
18:cb:7c:57:42:f2:c6:16:a9:1e:2a:e2:40:6c:54:
db:b7:59:f7:ce:58:47:36:d5:d6:c3:79:35:4d:59:
6e:81:4c:5a:f1:83:0e:79:c7:78:f3:e7:51:84:03:
af:b7:a1:e3:fa:12:dd:d7:94:09:71:4c:8a:4e:0f:
ce:3a:66:24:c6:0b:85:1b:75:b4:3f:3e:d7:8c:f0:
ac:ae:93:1d:47:27:37:cc:9a:a0:ec:f0:45:de:2c:
12:56:57:a0:1c:8f:7b:1c:7a:44:6d:b4:a1:97:90:
a3:a9:c2:0a:5c:6b:19:6d:5c:1a:d5:f8:fc:61:f6:
24:89:a9:d1:a3:5c:62:1b:4b:6b:54:b6:a2:03:45:
d0:fc:73:e1:8b:b5:57:45:a2:65:d3:24:4d:34:3f:
6c:51:2d:a5:38:76:b2:67:e3:fb:cd:98:8b:43:30:
0c:68:5d:c0:11:51:2a:6a:7a:6b:dc:56:97:37:5e:
d9:32:db:37:57:53:7a:77:8d:5d:a6:1d:9b:06:d6:
be:c1:ee:8d:5b:8b:87:30:3c:1b:3b:e6:fa:07:1e:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:F5:09:36:44:FC:8F:3A:F6:BB:39:16:F7:5E:49:2E:05:03:79
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/lPP1CTZE_I869rs5FvdeSS4FA3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.148.0/24
IPv6:
2a06:1c4::/32
Signature Algorithm: sha256WithRSAEncryption
87:25:09:1b:d2:f3:ce:20:d3:e2:49:9a:fe:f8:83:cf:57:bb:
ec:58:4c:ee:fb:bc:b1:9f:e8:d8:9b:3c:86:8b:aa:90:9c:12:
ad:20:87:4e:90:1d:d7:8c:56:68:37:72:a2:76:f5:3d:24:19:
7f:f7:cf:74:a9:84:88:7d:e9:d0:ab:11:01:1b:24:ea:d0:c3:
2c:1c:19:f5:9f:44:81:ae:08:d9:af:83:a1:6f:16:bb:95:42:
e5:1a:77:2e:05:8a:66:60:c1:cb:ae:7b:a7:a5:ce:5f:75:e3:
a4:42:6d:cc:93:57:a9:9b:87:69:41:aa:b4:9e:a5:62:20:3f:
bc:20:87:97:a1:b8:76:74:23:35:77:d7:62:f9:d6:0e:77:07:
67:82:e4:1e:7e:b3:80:bb:be:ff:a0:9b:d0:e9:0e:49:21:f8:
e0:ee:22:13:f0:37:9f:69:41:53:a2:80:aa:bb:ad:39:27:94:
32:08:d2:99:30:fa:b2:14:f6:6f:d3:41:81:aa:9e:90:d3:bc:
50:70:dd:40:9a:08:03:f6:5b:64:cf:2c:cc:dc:b4:29:c6:d7:
da:d3:bb:15:10:d5:a5:f4:43:a9:29:e4:5c:cf:66:39:a4:0b:
a4:d6:a8:94:70:0b:61:8f:64:1b:56:37:a6:c8:18:38:fb:71:
3e:55:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:49:19 2025 by rpki-client