Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/LJxVZiUixLD-53taCYTeHpz1Qxo.roa
File: LJxVZiUixLD-53taCYTeHpz1Qxo.roa (raw, json)
Hash identifier: 0J/nc4NcQHmTykQt3YoAW1Bys+edw+D023ftiwp2qWk=
Subject key identifier: 2C:9C:55:66:25:22:C4:B0:FE:E7:7B:5A:09:84:DE:1E:9C:F5:43:1A
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0196A07D54F099CC13C98E29AE63D4C9BFFC
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/LJxVZiUixLD-53taCYTeHpz1Qxo.roa
Signing time: Mon 05 May 2025 12:48:10 +0000
ROA not before: Mon 05 May 2025 12:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.133.39.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:7d:54:f0:99:cc:13:c9:8e:29:ae:63:d4:c9:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: May 5 12:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c9c55662522c4b0fee77b5a0984de1e9cf5431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:17:ff:7a:74:07:e0:66:04:68:5e:a6:65:35:
48:bc:b1:35:26:17:a8:ca:56:1a:f2:db:66:89:dd:
06:a9:12:cf:4f:de:3e:84:a5:eb:f4:59:6e:ec:e0:
63:81:32:23:d4:bf:6e:08:da:07:40:a6:3f:d5:5c:
8a:b3:55:79:97:12:26:60:b8:f3:d5:98:0d:ef:a5:
82:5b:5c:46:1b:fb:79:97:9c:7f:64:93:00:2c:df:
10:32:b2:26:2b:09:03:86:7c:f8:ce:89:b1:5e:df:
79:69:af:44:86:61:35:5b:c7:76:42:6c:0e:57:7c:
a3:6d:f5:83:e1:05:c7:1b:33:6b:0e:d8:7c:01:ff:
4d:7b:61:0f:6b:66:36:0f:c7:3e:57:ae:ec:93:0b:
90:4a:d4:f9:a2:e0:48:3c:b4:82:54:af:4f:34:22:
10:fb:aa:b7:22:71:85:b5:6c:4c:6e:cc:5e:01:a4:
a2:b0:72:27:2e:96:83:7a:85:36:74:53:98:00:28:
54:02:e5:d2:d4:71:58:e5:11:a8:d6:a7:8a:9a:2c:
cf:aa:79:74:6e:84:eb:50:59:b3:33:c4:d9:4b:5d:
41:e2:1d:9a:f7:69:fc:54:c9:46:e6:89:a8:19:a7:
e7:62:52:3c:4a:3f:5a:b8:e0:f0:98:e4:5b:10:92:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:55:66:25:22:C4:B0:FE:E7:7B:5A:09:84:DE:1E:9C:F5:43:1A
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/LJxVZiUixLD-53taCYTeHpz1Qxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.39.0/24
185.148.243.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2a:0b:00:b3:d0:43:12:f3:49:d5:99:c9:6a:57:d1:e8:f8:
b7:9a:f1:32:e1:f4:27:96:05:d4:22:36:da:c8:81:79:81:ab:
2d:80:51:2a:c5:b5:2d:47:b0:99:cd:a8:6d:17:ca:b6:46:23:
64:a3:aa:22:44:a0:35:14:9c:df:6a:a8:7f:44:c2:8f:74:0e:
42:43:72:17:0a:7c:dd:46:f1:69:60:18:9b:40:bd:ca:c1:bd:
9f:6d:cc:ab:8b:3d:0c:27:11:95:dc:8c:71:67:97:f0:a7:a3:
d6:00:7d:33:f9:a1:90:de:ce:b8:d5:70:3d:63:1b:11:28:b4:
bd:10:c0:25:38:b9:7b:f1:b1:6a:b5:96:e8:8f:75:ee:6c:07:
70:ee:c6:7a:98:03:36:6b:f7:0a:b4:20:b2:dc:ca:db:09:87:
96:17:2c:b1:a3:68:58:b5:7a:a4:96:54:ac:a8:ac:0b:de:bd:
7c:38:7f:6b:2f:0c:e1:99:2d:aa:f3:3e:cc:e8:fe:f0:9c:8c:
d6:bf:c6:5c:42:06:38:84:e2:6a:17:02:77:3d:72:42:3c:9b:
0a:5d:76:97:f3:43:dc:26:1a:fa:87:c2:2d:4e:57:29:7b:8c:
99:f8:75:de:4c:70:fb:16:a2:b3:1c:05:10:b0:20:af:92:51:
bb:21:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:16:54 2025 by rpki-client