Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/L6GWTTrHxO-JZ51LcuLOYdMiEbM.roa
File: L6GWTTrHxO-JZ51LcuLOYdMiEbM.roa (raw, json)
Hash identifier: UxDEXdh5d2jh46Fk+YwOMskZJl46OqzJeR6dl0YZpLc=
Subject key identifier: 2F:A1:96:4D:3A:C7:C4:EF:89:67:9D:4B:72:E2:CE:61:D3:22:11:B3
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB6704FF04E2AD994B35B32BBE438D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/L6GWTTrHxO-JZ51LcuLOYdMiEbM.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210837
IP address blocks: 109.107.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:67:04:ff:04:e2:ad:99:4b:35:b3:2b:be:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fa1964d3ac7c4ef89679d4b72e2ce61d32211b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:82:87:e8:44:d2:37:a7:6d:ef:4a:67:47:
f1:02:70:b8:b4:1a:2d:a7:0a:77:19:5b:50:91:a9:
82:18:1c:79:54:9f:32:6e:76:fe:05:a6:89:93:da:
29:a5:bd:cb:0f:d4:49:5a:73:9e:2b:3f:fd:ec:d9:
16:75:4c:b5:b9:0f:1b:3b:d2:67:c8:b8:74:41:19:
e9:72:57:5d:cb:3b:53:c4:39:0d:53:1d:38:0a:cb:
1f:a8:eb:20:cc:20:55:7a:08:83:e8:6e:c6:3a:7d:
36:6e:1d:f8:c0:2f:f1:8c:f3:79:7a:4f:3a:88:c6:
8a:12:84:f6:7b:91:db:a3:b1:e7:d7:7d:a7:d7:10:
77:78:10:cc:d5:ba:c6:5c:50:a1:63:49:72:c0:f5:
66:b7:ba:33:81:01:2c:03:f2:ae:7d:0c:22:43:9a:
3d:dc:be:f4:81:6a:f8:a4:9c:4c:64:44:a1:c3:e9:
04:a4:0a:08:c3:19:5f:22:7d:65:b1:a0:b6:2e:43:
25:bd:26:b5:62:b7:f8:7f:f4:b7:fa:46:08:c3:2e:
ad:b3:6b:cf:89:30:ef:43:cb:d4:c2:fc:a0:c8:6b:
e6:65:2d:b8:9d:3f:39:3f:dc:51:3c:cb:52:19:96:
07:75:b8:f4:cf:00:04:01:71:65:aa:52:eb:cb:6b:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:96:4D:3A:C7:C4:EF:89:67:9D:4B:72:E2:CE:61:D3:22:11:B3
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/L6GWTTrHxO-JZ51LcuLOYdMiEbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:cf:bc:e0:64:2c:87:ca:8f:9d:ed:ba:f6:62:9a:2f:5f:bf:
ef:76:e4:05:77:9a:0d:df:33:df:4f:69:f1:db:b0:35:f4:6e:
52:f2:c3:36:73:33:53:4f:ed:d8:d7:cd:39:10:c7:ab:ab:e0:
82:95:58:38:a9:96:a2:6c:45:bd:49:e8:b3:15:13:d9:d0:62:
ba:96:1a:95:28:60:bf:91:5d:0c:87:ca:a6:69:0f:f8:9a:8d:
cd:fc:66:ff:63:d2:b9:2a:ff:67:f4:93:f0:42:1c:1d:50:9f:
d7:f8:15:fc:70:14:06:8c:39:b5:5f:16:ef:f6:04:59:e4:62:
12:ac:fa:e0:83:fb:3b:a5:85:fb:7b:22:d1:4a:72:b0:b9:31:
53:99:64:8e:09:9c:00:4f:cb:9d:3b:1b:8f:49:ae:72:be:c8:
55:62:db:22:75:1b:9d:9c:80:8d:6a:b7:9a:1c:4f:0d:91:e8:
7d:18:05:cd:d3:f0:69:7a:0b:cf:5a:b4:c0:2e:92:a6:f0:f3:
9c:0c:59:f8:79:f1:95:c4:51:bc:e1:bb:a3:68:01:cc:b9:19:
a3:7a:ca:b9:5f:8f:46:e2:fb:e8:8a:aa:14:6b:51:df:d9:63:
37:f0:d2:7d:bf:db:64:1a:dd:ef:42:34:0e:cd:29:c4:05:30:
5b:41:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:24 2025 by rpki-client