Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa
File: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (raw, json)
Hash identifier: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=
Subject key identifier: 95:C4:22:E4:19:BD:78:54:9F:4C:6A:EF:99:5F:1C:89:0A:42:AE:69
Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Certificate serial: 01967C6E1407C24F1A4C145B64FF8F940B9F
Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa
Signing time: Mon 28 Apr 2025 12:45:10 +0000
ROA not before: Mon 28 Apr 2025 12:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212641
IP address blocks: 46.231.226.0/24 maxlen: 24
185.179.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:6e:14:07:c2:4f:1a:4c:14:5b:64:ff:8f:94:0b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Validity
Not Before: Apr 28 12:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95c422e419bd78549f4c6aef995f1c890a42ae69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:4d:79:cf:54:05:a0:d4:93:b9:d2:a6:e7:
4d:64:c0:17:7b:cb:35:0c:81:a3:51:e4:c7:13:18:
d5:1f:6c:17:78:4d:c6:d0:f0:4f:72:bc:db:a9:9e:
1b:9d:6b:3d:60:31:2b:96:ca:38:73:a7:24:fb:f0:
0f:61:9d:01:02:76:7e:4a:59:9d:15:7c:5a:e9:b2:
2a:ff:a1:4f:8e:89:56:91:03:8d:12:6f:88:6e:59:
41:e9:18:6b:54:8a:1a:7f:5e:23:d8:42:a4:63:03:
4a:43:78:07:6a:eb:9b:69:f2:89:22:4a:52:54:11:
8f:8f:b1:02:0c:af:e1:76:0b:91:7d:c1:c5:73:ce:
f0:19:50:8a:48:6a:c6:5d:cf:5e:65:30:91:de:ce:
21:d1:0c:b0:86:eb:7c:2c:58:53:8b:10:8a:91:09:
0c:7e:45:ee:af:12:eb:18:f8:33:e3:7f:af:ce:0d:
df:a3:a2:70:41:42:6a:1d:8b:e9:b2:2a:6d:e8:32:
9c:7a:8c:38:29:ef:d1:93:3a:c8:d6:f3:ce:c1:20:
5e:dd:c6:b0:92:35:d5:93:5e:a0:4c:bc:a9:4f:e5:
fa:be:d4:15:8a:a7:50:80:29:43:4d:9f:4e:01:dc:
c9:da:10:24:e1:4a:62:09:6a:64:8f:37:64:6f:f1:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:22:E4:19:BD:78:54:9F:4C:6A:EF:99:5F:1C:89:0A:42:AE:69
X509v3 Authority Key Identifier:
keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.226.0/24
185.179.214.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:11:79:60:99:19:2d:68:09:ca:0b:ad:bc:45:e0:90:18:1a:
68:99:47:5b:f4:95:60:98:c9:ce:b8:1a:e1:20:ca:aa:78:7c:
5f:7c:40:c7:26:a7:78:f0:0a:6f:62:d6:cb:80:b6:eb:5d:5a:
bb:9d:9f:f9:b8:ef:b9:48:c8:eb:d2:93:ac:38:56:ca:50:16:
2e:8c:24:3d:61:be:36:ee:13:15:db:15:72:35:a3:ff:e7:c7:
50:77:86:f4:5d:73:24:64:aa:91:0b:42:b1:9d:89:9b:37:57:
86:70:fb:52:d0:0b:b3:78:57:1e:06:49:09:3c:08:61:17:8b:
5c:56:b7:c6:eb:81:31:20:ec:52:b5:e3:38:6d:ef:fe:79:c9:
28:e7:4b:9e:3e:6d:a5:cc:42:1d:c3:ed:cc:92:57:48:5c:2f:
fa:86:12:3b:62:9f:39:37:17:3a:5a:59:aa:a0:fc:41:d5:78:
57:f8:9c:72:06:3a:8f:6e:75:0a:31:ef:33:46:5d:86:5b:ac:
1e:d7:40:37:c7:9f:ed:3b:34:96:ab:da:0c:cb:e0:3c:9d:8d:
2a:88:81:04:3e:75:55:c9:50:12:f5:b4:61:a4:13:d8:cf:46:
ff:86:eb:f3:9d:1e:a0:0f:43:0c:2c:ee:c6:3b:ab:9c:26:ab:
ab:d0:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:29:35 2025 by rpki-client