Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/LM0g69HtGp_batQfV5x1NEUMmOk.roa
File: LM0g69HtGp_batQfV5x1NEUMmOk.roa (raw, json)
Hash identifier: 7VtBpd+wuDX24L0fq4Y7fsMl9oygXrzXXYzNLlqhtLg=
Subject key identifier: 2C:CD:20:EB:D1:ED:1A:9F:DB:6A:D4:1F:57:9C:75:34:45:0C:98:E9
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 019422FB7C12434D3FC9236FCF33E815299B
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/LM0g69HtGp_batQfV5x1NEUMmOk.roa
Signing time: Wed 01 Jan 2025 17:48:14 +0000
ROA not before: Wed 01 Jan 2025 17:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212777
IP address blocks: 91.194.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7c:12:43:4d:3f:c9:23:6f:cf:33:e8:15:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Jan 1 17:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ccd20ebd1ed1a9fdb6ad41f579c7534450c98e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:b5:41:6b:a5:c4:00:24:43:49:0a:89:99:
27:f0:bb:7f:e3:0b:fb:23:0d:6f:b7:b8:cf:fe:12:
b9:4f:36:2f:65:20:bb:72:cd:55:31:97:61:86:e8:
97:9b:37:9d:d0:17:6e:6e:7f:dd:d8:a2:7a:ec:ff:
ad:5a:cf:e9:13:34:45:51:11:41:8b:39:31:f4:7c:
f7:2d:6d:b0:67:34:6e:01:e7:7a:56:bc:7a:30:e2:
01:f5:a6:f0:0b:66:ac:17:e0:b1:89:ba:48:fd:19:
48:97:dd:58:7f:77:82:fb:09:af:c0:ef:31:3a:32:
67:4b:89:4a:7d:55:94:fe:63:47:18:c6:86:26:49:
95:ae:c5:81:ff:ee:0c:c2:ed:d8:62:73:75:85:a3:
80:55:cf:4f:b4:30:fd:28:34:44:7d:13:85:92:af:
bd:31:0c:68:5b:8b:f2:86:d8:76:d0:33:44:0c:08:
fd:9b:94:87:a1:e6:60:62:c2:af:27:6f:3b:d4:c9:
4c:d7:9d:c5:d3:af:e5:2d:ac:2d:87:5f:13:e7:fe:
ab:d4:c2:2e:03:f5:77:44:35:64:ae:c3:95:9f:34:
7d:d7:b0:b2:aa:9c:b6:a1:56:23:22:d1:f2:da:94:
b5:e8:25:c2:e3:71:6c:80:24:90:f7:19:5e:9e:e1:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:20:EB:D1:ED:1A:9F:DB:6A:D4:1F:57:9C:75:34:45:0C:98:E9
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/LM0g69HtGp_batQfV5x1NEUMmOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f5:91:ee:75:5c:7e:ad:57:02:af:47:59:5d:9a:04:c6:c2:
05:96:bf:7c:20:4d:ff:a6:4a:7c:e0:4b:f4:ef:3e:f5:9f:6f:
48:98:bb:78:44:a8:8e:f5:eb:3e:30:5c:2f:8d:82:af:67:9b:
ba:20:14:54:e2:25:78:67:da:30:20:80:76:c0:b9:d9:be:74:
90:2a:20:fe:03:d4:b8:4f:e4:0c:9e:4d:59:23:c6:b6:ea:75:
09:e3:88:ee:7f:86:aa:ad:17:8d:5f:56:ca:46:09:04:06:25:
3c:8a:e4:43:57:9e:fa:9f:42:9b:c0:c5:f7:f6:1c:b9:1a:82:
d7:30:02:71:d5:4b:a8:bc:43:c2:1f:39:f9:ee:d1:b7:53:95:
cf:24:a1:dd:a8:7b:b8:af:af:8a:9f:7f:7e:09:42:fb:ec:cc:
01:6e:6d:bb:27:2b:2b:71:59:47:5d:84:4d:02:05:3c:cd:26:
c9:02:d4:ee:89:7d:f0:01:1c:cb:ce:01:00:b5:40:dd:2c:07:
d4:40:60:94:b1:82:1d:30:cc:7b:70:6a:3d:84:fb:09:28:52:
da:45:e2:77:a5:30:e3:ab:09:c9:5f:5e:4b:0e:08:da:5d:1b:
1e:bb:a0:95:f6:83:7a:e8:6b:7d:c6:e7:94:56:5a:f1:e8:b7:
3c:f8:33:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:22 2025 by rpki-client