Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LntVXyaPLaMdP8m3X0P9FcxlbBQ.roa
File: LntVXyaPLaMdP8m3X0P9FcxlbBQ.roa (raw, json)
Hash identifier: pvtUE6SopupEP5UTq2Jd2balbdZ8Y9iC2nnRcYpnAOg=
Subject key identifier: 2E:7B:55:5F:26:8F:2D:A3:1D:3F:C9:B7:5F:43:FD:15:CC:65:6C:14
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0194CB4E7EB1DE3300CD40A14A5900DD107D
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LntVXyaPLaMdP8m3X0P9FcxlbBQ.roa
Signing time: Mon 03 Feb 2025 10:15:06 +0000
ROA not before: Mon 03 Feb 2025 10:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 212.8.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:4e:7e:b1:de:33:00:cd:40:a1:4a:59:00:dd:10:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Feb 3 10:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e7b555f268f2da31d3fc9b75f43fd15cc656c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:04:36:db:b5:0f:6d:9c:2b:9c:33:e1:df:
43:1b:1b:d8:5b:a7:d0:6a:ef:38:3d:02:06:53:af:
f0:f7:bb:8f:fd:8b:4e:d5:b0:77:90:0a:02:5b:0b:
da:a3:9b:73:3d:c5:c8:b2:a1:7a:96:72:8d:72:2e:
f4:a8:19:67:0f:c0:67:a8:77:cc:51:c8:7d:55:57:
2f:32:26:e2:16:97:63:21:73:f1:f1:eb:00:ae:b9:
33:a2:7e:70:a4:12:4f:af:f8:bf:86:8c:0e:93:2b:
43:a8:45:76:45:70:22:e7:6b:3f:06:d3:dc:b6:5f:
7e:4d:c2:a5:55:58:67:3b:92:65:9a:ca:d8:75:a0:
2a:3d:4d:e0:b9:15:da:28:92:47:f4:93:79:5c:8f:
cf:4b:fd:31:0e:56:50:da:27:ff:38:34:3b:c0:29:
6e:56:01:39:17:fa:be:c2:f6:81:0f:16:77:37:44:
77:30:ec:2c:82:3e:7b:89:ba:a0:c2:bd:37:ea:f0:
49:4c:85:32:1f:24:91:82:02:38:cb:fa:02:c6:d6:
71:f5:d6:b9:a3:8d:d2:e9:8c:6e:39:52:6f:a6:9d:
71:13:1e:42:72:3d:ec:05:04:1b:85:e1:a5:b2:a9:
3e:cf:66:47:15:35:e6:1b:ae:e0:49:87:5e:fc:11:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:55:5F:26:8F:2D:A3:1D:3F:C9:B7:5F:43:FD:15:CC:65:6C:14
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LntVXyaPLaMdP8m3X0P9FcxlbBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.229.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ff:80:fb:45:0d:0c:1c:82:0f:0d:da:a3:af:94:fe:fe:6e:
fd:25:69:dd:01:7d:a7:61:8a:38:67:e4:40:40:49:4f:d0:5f:
ee:1a:c8:5e:f9:b7:6c:ae:b1:cb:83:95:f2:ba:71:f5:84:48:
f1:72:00:4a:e2:38:ba:19:58:6b:5c:ac:b6:6f:a0:81:8a:1c:
d2:bc:ff:3d:7f:d8:07:d5:60:f0:20:74:e3:3a:2a:26:d0:92:
b1:6d:07:9e:34:70:42:8a:cd:15:f5:32:82:c2:02:5f:3e:40:
11:f0:31:a8:df:b3:00:15:e6:91:f0:2e:33:b8:fc:2b:cf:2f:
66:d6:2c:03:dc:50:6c:6e:02:60:09:8c:9b:d6:cf:4a:f3:7b:
b3:4d:a4:ed:f3:e6:34:f5:e3:62:00:eb:ef:f1:cc:09:b2:e4:
7c:df:57:6b:45:18:cd:15:91:0c:a9:c6:2a:4b:1b:4a:c4:c5:
fa:2d:7a:81:27:59:66:5e:72:66:41:2c:40:bf:a9:40:00:dd:
88:c4:44:1e:3b:2d:f3:db:63:bd:9e:c0:c8:23:64:f5:5d:7a:
27:5c:c5:ee:3d:6d:78:68:d1:91:1a:5c:ee:60:5a:42:7c:dd:
b7:60:0c:e8:d4:52:2d:66:39:7a:f8:b2:13:92:d9:c8:29:22:
3a:a1:f2:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTLTn6x3jMAzUChSlkA3RB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjUwMjAzMTAxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTdiNTU1ZjI2OGYyZGEzMWQzZmM5Yjc1ZjQzZmQxNWNjNjU2YzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDgENtu1D22cK5wz4d9DGxvYW6fQ
au84PQIGU6/w97uP/YtO1bB3kAoCWwvao5tzPcXIsqF6lnKNci70qBlnD8BnqHfM
Uch9VVcvMibiFpdjIXPx8esArrkzon5wpBJPr/i/howOkytDqEV2RXAi52s/BtPc
tl9+TcKlVVhnO5JlmsrYdaAqPU3guRXaKJJH9JN5XI/PS/0xDlZQ2if/ODQ7wClu
VgE5F/q+wvaBDxZ3N0R3MOwsgj57ibqgwr036vBJTIUyHySRggI4y/oCxtZx9da5
o43S6YxuOVJvpp1xEx5Ccj3sBQQbheGlsqk+z2ZHFTXmG67gSYde/BFuVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC57VV8mjy2jHT/Jt19D/RXMZWwUMB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEvTG50Vlh5YVBMYU1kUDhtM1gwUDlGY3hsYkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AjlMA0G
CSqGSIb3DQEBCwUAA4IBAQAr/4D7RQ0MHIIPDdqjr5T+/m79JWndAX2nYYo4Z+RA
QElP0F/uGshe+bdsrrHLg5XyunH1hEjxcgBK4ji6GVhrXKy2b6CBihzSvP89f9gH
1WDwIHTjOiom0JKxbQeeNHBCis0V9TKCwgJfPkAR8DGo37MAFeaR8C4zuPwrzy9m
1iwD3FBsbgJgCYyb1s9K83uzTaTt8+Y09eNiAOvv8cwJsuR831drRRjNFZEMqcYq
SxtKxMX6LXqBJ1lmXnJmQSxAv6lAAN2IxEQeOy3z22O9nsDII2T1XXonXMXuPW14
aNGRGlzuYFpCfN23YAzo1FItZjl6+LITktnIKSI6ofLY
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:23 2025 by rpki-client