Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/l65724QI29Rvj8Dehw-WDE4zXrs.roa
File: l65724QI29Rvj8Dehw-WDE4zXrs.roa (raw, json)
Hash identifier: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=
Subject key identifier: 97:AE:7B:DB:84:08:DB:D4:6F:8F:C0:DE:87:0F:96:0C:4E:33:5E:BB
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01961B49F0C476CB4F92D341F8156AE060FD
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/l65724QI29Rvj8Dehw-WDE4zXrs.roa
Signing time: Wed 09 Apr 2025 16:02:32 +0000
ROA not before: Wed 09 Apr 2025 16:02:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 109.71.240.0/24 maxlen: 24
109.71.241.0/24 maxlen: 24
109.71.244.0/24 maxlen: 24
109.71.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:49:f0:c4:76:cb:4f:92:d3:41:f8:15:6a:e0:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Apr 9 16:02:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97ae7bdb8408dbd46f8fc0de870f960c4e335ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:65:30:4e:70:0b:0f:1c:cf:5b:01:83:18:
8e:08:54:de:e7:c2:c1:6d:b9:16:b3:4c:54:db:26:
90:22:0a:18:f4:36:bc:36:30:4f:f5:f2:c5:66:e3:
57:d6:ef:95:36:e8:a8:0e:ef:56:d0:5f:12:8e:81:
9e:4b:2a:9a:82:a4:65:64:a7:bc:d7:1e:31:75:c4:
1b:10:90:f4:b6:62:86:e5:52:af:9e:55:2c:85:2f:
56:0f:03:ae:11:2b:74:f3:eb:db:5e:05:c3:3f:a4:
fb:29:9b:9a:65:a0:4b:94:9d:cf:5d:76:1b:a8:ab:
71:e5:f7:06:c5:2e:a1:c7:de:98:97:d7:d6:be:42:
19:50:f5:bf:ab:80:4d:57:55:9e:55:4a:01:ec:6d:
e3:52:95:de:a4:86:f8:76:86:8d:73:1a:fb:fa:e5:
b9:0a:4a:bd:ec:86:8b:79:0c:a0:16:c2:ee:2a:a7:
01:b4:dc:ef:ff:43:a9:7a:26:e7:c9:42:db:7d:cb:
d6:61:94:f2:44:85:d5:8e:e5:fe:f1:57:d3:8c:94:
5b:c6:77:33:c6:21:94:02:b1:df:1d:4a:6b:66:8b:
1d:73:e2:2e:3a:4f:1c:c8:c0:49:25:5e:eb:9a:be:
dd:90:3c:a2:d5:67:6d:fc:12:72:b3:ab:6c:5c:06:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:7B:DB:84:08:DB:D4:6F:8F:C0:DE:87:0F:96:0C:4E:33:5E:BB
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/l65724QI29Rvj8Dehw-WDE4zXrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.240.0/23
109.71.244.0/24
109.71.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:31:0c:b9:0e:cf:4f:e5:71:c1:51:cb:20:7f:e7:22:96:fb:
e7:a0:ee:fc:a3:66:12:f3:fb:bf:28:3a:83:d9:98:dc:10:51:
50:69:38:e0:34:21:b7:54:1b:59:6f:80:3d:ce:b8:d4:45:77:
4e:a9:80:1a:39:a6:a9:5d:9b:53:56:70:19:e2:d0:ad:23:b4:
3d:65:6f:84:84:cb:72:73:a0:4f:53:3e:ff:2a:5e:89:88:0c:
90:c2:3e:71:f2:11:5e:db:fd:1c:9e:c1:84:bc:5f:74:a4:9c:
7b:28:70:d5:5d:25:ed:62:18:6c:67:75:fc:57:56:fc:a8:72:
26:0c:9f:5e:d8:b7:8b:e1:b9:10:22:38:9b:37:9a:fc:12:c9:
ae:b2:38:6c:15:c7:b7:9d:51:fe:64:02:75:23:e7:b5:e3:c3:
ee:89:a8:06:c4:34:6c:b5:8e:77:3e:e2:3e:f1:f3:b8:2a:74:
07:28:83:e2:62:fc:60:50:17:c2:18:14:eb:2f:16:c2:4e:57:
8e:83:8f:d8:fc:19:63:e9:e1:b5:ab:fe:a6:8e:48:8b:cd:f9:
9c:02:0b:1f:a6:68:61:d1:18:5a:1f:55:d9:8b:92:d8:ac:a5:
9f:a1:58:22:18:ed:4f:18:5e:45:fc:c6:b6:0e:e9:f4:70:cc:
72:cd:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:05 2025 by rpki-client