Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/lVizdiQgX20fzcRSA4GIK4wJrtQ.roa
File: lVizdiQgX20fzcRSA4GIK4wJrtQ.roa (raw, json)
Hash identifier: XzPZ+5jYbipWydPDPeCQpQP8Pnh6Ui1fyKGQoWrzSvw=
Subject key identifier: 95:58:B3:76:24:20:5F:6D:1F:CD:C4:52:03:81:88:2B:8C:09:AE:D4
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 019424B288727D4E786542F99CAE65DD836E
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/lVizdiQgX20fzcRSA4GIK4wJrtQ.roa
Signing time: Thu 02 Jan 2025 01:47:47 +0000
ROA not before: Thu 02 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202651
IP address blocks: 193.219.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:88:72:7d:4e:78:65:42:f9:9c:ae:65:dd:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Jan 2 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9558b37624205f6d1fcdc4520381882b8c09aed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:a5:48:70:c9:17:4e:25:ab:38:12:5a:19:
97:83:68:8f:a1:f3:00:c1:1a:e0:d2:96:1e:a1:b1:
61:7d:68:84:7e:0c:4f:36:9c:53:8b:28:5e:02:05:
56:3c:94:46:06:e5:77:c6:66:5f:56:89:d3:61:b4:
aa:24:62:c3:49:8c:a4:31:45:3c:31:94:fd:73:ac:
56:b2:00:08:27:06:81:75:5e:d5:f2:9c:42:d5:25:
99:c2:86:32:21:9a:2b:a1:1e:cc:4b:4c:ea:63:f7:
98:37:2f:aa:8b:4b:ed:ab:2c:23:a8:5c:9b:08:3f:
15:45:f7:2e:59:63:17:98:97:c8:bf:35:84:d1:28:
76:bc:05:ba:fb:97:d1:86:f4:ab:2c:f2:44:88:64:
f4:04:2c:8e:ca:e1:1c:c5:f4:ef:b2:0c:9d:c6:71:
0e:ed:a6:d2:0f:f6:14:19:d9:f9:54:e2:2c:a0:53:
66:8c:66:5b:53:e7:47:6e:ac:8c:f1:3c:57:86:08:
91:5b:ca:2a:d6:af:4e:c3:7d:83:2b:80:f5:5e:55:
3d:a4:50:25:a5:92:9f:e5:4a:19:11:77:8f:c3:d2:
85:39:4d:2f:28:e4:f6:38:f9:b9:ee:8f:ad:f0:bf:
54:11:a9:eb:74:2c:82:21:87:8f:d3:4d:65:63:14:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:B3:76:24:20:5F:6D:1F:CD:C4:52:03:81:88:2B:8C:09:AE:D4
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/lVizdiQgX20fzcRSA4GIK4wJrtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.112.0/24
Signature Algorithm: sha256WithRSAEncryption
37:43:a7:61:35:29:8f:f1:01:fc:98:ec:20:8c:51:3e:42:59:
4d:46:c4:53:45:33:ed:14:0c:ba:e9:bf:b7:8f:16:52:f4:14:
1d:94:bb:08:9d:64:8b:19:3c:fe:52:c3:4b:2c:51:6f:f2:b2:
71:58:ea:69:9b:2d:3b:2e:69:20:0d:c6:42:95:5c:48:65:42:
a3:27:f8:7a:79:30:5e:42:d6:0e:65:c8:b1:1f:07:69:b9:de:
44:21:9e:60:25:d8:3b:11:dd:bb:3f:5f:cd:13:72:0f:0a:f5:
d5:b6:08:92:e3:8e:5f:ef:87:9b:37:96:9d:f1:0a:84:fe:de:
d0:9e:33:1f:c7:9d:25:86:95:6a:72:e4:36:e2:43:7b:af:d2:
b3:c1:99:b4:a4:bf:ef:a9:af:60:46:df:4d:9c:46:db:5f:08:
c6:b8:cc:bd:24:02:e5:33:9f:bd:b1:b3:b8:94:fc:56:1d:4e:
58:c1:59:dd:8f:96:e5:cc:aa:af:92:2a:b8:fc:73:9d:d1:27:
16:62:30:fd:6b:ce:8e:8e:9b:bb:9c:ae:46:81:79:c2:cb:8a:
37:52:9a:69:9c:9c:2f:39:ce:e1:f7:5a:f0:7a:da:64:76:fa:
1e:8e:fa:94:0f:c6:82:54:ba:f2:46:e4:98:03:09:80:c6:ed:
be:65:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:21:33 2025 by rpki-client