Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/LMMZZ3U_VXbcFd48owkZmwcU1hE.roa
File: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (raw, json)
Hash identifier: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=
Subject key identifier: 2C:C3:19:67:75:3F:55:76:DC:15:DE:3C:A3:09:19:9B:07:14:D6:11
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0196C496AB4051732A72EDCE4ADFDA8C4BC2
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/LMMZZ3U_VXbcFd48owkZmwcU1hE.roa
Signing time: Mon 12 May 2025 13:02:10 +0000
ROA not before: Mon 12 May 2025 13:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62610
IP address blocks: 109.122.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:96:ab:40:51:73:2a:72:ed:ce:4a:df:da:8c:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 12 13:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc31967753f5576dc15de3ca309199b0714d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:ea:c5:53:8d:15:e6:d7:d4:0c:c1:3f:7e:
dc:ac:d8:df:0e:c1:e7:c5:73:13:f7:93:6e:8a:fb:
07:55:e6:4a:6d:63:de:56:35:f3:cc:29:f0:dd:ec:
72:67:ab:bf:dd:65:bf:29:84:c4:c0:18:8d:0b:2a:
20:50:d2:3d:19:43:cf:65:f1:6b:a8:92:5b:79:c4:
f8:08:94:94:0d:9e:b7:ab:c5:d4:1f:b7:05:e9:1a:
81:9c:b7:03:0a:6d:ab:bf:28:38:b4:b2:94:b6:10:
25:bf:22:f4:f4:45:c9:29:56:d1:2a:c8:a3:cc:91:
ba:a9:ae:fe:ee:bf:d9:dd:d2:73:07:bf:ef:e1:dc:
d4:bc:ab:80:ba:95:6e:17:ad:a0:5d:23:d9:5c:c5:
c6:ce:43:55:f6:40:81:27:4a:4a:39:f2:9f:e9:35:
40:fb:22:db:53:11:4f:31:2c:18:45:55:e6:9c:ea:
b0:42:8b:7a:3a:16:cd:37:1b:bf:79:e6:8d:44:2f:
9f:f8:10:24:5d:b7:db:c9:bd:37:d7:41:05:de:f0:
75:3a:c1:86:9f:58:7b:17:03:12:4d:ef:6b:1f:b0:
ab:77:e7:20:d0:96:5f:ad:20:92:19:4d:c5:2c:40:
78:a2:b3:03:f6:28:ae:f5:5d:b6:9f:3d:f6:8a:5b:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:19:67:75:3F:55:76:DC:15:DE:3C:A3:09:19:9B:07:14:D6:11
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/LMMZZ3U_VXbcFd48owkZmwcU1hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.59.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f7:22:48:0c:29:b6:91:7c:8a:da:f5:1a:91:2f:97:1c:07:
53:10:c6:1d:0c:89:26:79:40:17:0f:fa:e3:97:50:38:e9:68:
71:2d:ca:06:27:dd:8c:9f:66:2b:ed:14:4e:98:35:9e:71:30:
88:83:7a:6b:d6:70:72:40:56:19:a7:f8:57:f5:8d:2a:e5:99:
eb:84:50:e5:73:81:4d:77:00:09:01:37:e3:d6:4d:dc:1f:9f:
ea:be:2d:aa:8d:ca:63:76:d8:f1:35:e2:51:18:ce:ad:af:bf:
51:e9:5a:c1:14:79:d4:09:f6:90:23:b1:26:bc:8a:a7:9c:85:
e2:0d:2f:e9:97:5c:61:62:54:73:de:b4:d9:12:51:26:8d:10:
d1:9c:1c:fc:83:8a:e7:82:e5:58:76:9a:e7:42:d4:35:73:2d:
c6:ec:b4:b6:a3:22:87:96:14:c4:3b:df:58:93:b0:b6:be:15:
e8:b2:78:a0:8a:a9:9b:14:cf:6b:26:31:20:45:05:ba:89:ff:
75:98:cb:f0:d8:97:9e:cc:fc:1f:b9:d7:21:23:f3:5c:82:82:
f4:07:df:9f:5c:cd:26:cd:eb:f1:f9:b3:08:ec:fe:5f:f9:fc:
5c:37:4f:4c:0c:3f:9d:a8:14:db:05:42:ee:f2:be:75:44:a7:
4e:e3:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:38 2025 by rpki-client