Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/lUZIxGhzOYxZGWoE_bPIsAcvBns.roa
File: lUZIxGhzOYxZGWoE_bPIsAcvBns.roa (raw, json)
Hash identifier: 181xs0vbEO2Q9NjKNLp5nMH7XagJ9a8i0PdC3k4WAwQ=
Subject key identifier: 95:46:48:C4:68:73:39:8C:59:19:6A:04:FD:B3:C8:B0:07:2F:06:7B
Certificate issuer: /CN=628bb92536c20f42b05be532c0dbaab98b755f35
Certificate serial: 01975988E3154D6C43AD03E0954B4EC06775
Authority key identifier: 62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/lUZIxGhzOYxZGWoE_bPIsAcvBns.roa
Signing time: Tue 10 Jun 2025 11:10:32 +0000
ROA not before: Tue 10 Jun 2025 11:10:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35596
IP address blocks: 194.126.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:88:e3:15:4d:6c:43:ad:03:e0:95:4b:4e:c0:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628bb92536c20f42b05be532c0dbaab98b755f35
Validity
Not Before: Jun 10 11:10:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=954648c46873398c59196a04fdb3c8b0072f067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:9f:9c:2d:d1:70:df:5f:66:63:13:f2:45:
73:06:f2:83:d5:76:5e:09:d3:6b:72:3b:47:46:17:
58:c0:02:03:54:35:16:9c:b3:1c:a9:07:4b:fb:41:
64:73:b8:cd:34:ee:b5:4a:61:b4:1d:0c:41:fd:b8:
a3:e5:38:1a:3a:f5:0a:0c:35:42:91:44:81:b0:90:
20:c4:d3:d1:47:af:7d:26:d6:0e:db:4a:58:97:87:
22:7f:16:b8:90:2d:18:8e:e2:9f:08:cb:53:d4:30:
a0:e7:be:1c:d1:b2:69:5e:8e:17:45:7a:64:3c:f8:
38:95:09:ab:0a:42:ef:26:bd:e0:20:d3:f6:49:cb:
de:4e:4f:da:b1:0f:62:ee:ab:25:aa:08:68:0a:96:
be:ff:35:8e:2c:36:86:bc:1c:61:c0:1d:c0:65:0e:
e7:1e:0e:6e:17:bc:8e:2a:6d:8b:61:b6:88:d3:68:
0b:1d:c8:ae:34:b9:81:90:a0:e1:a8:9c:ac:46:36:
29:76:23:be:60:91:aa:70:94:b7:33:b2:e2:a4:3d:
4d:44:26:cf:bb:93:e3:de:63:32:07:54:9a:78:7d:
f5:4e:a5:31:68:6c:ff:b9:a7:cf:73:2d:9d:cd:7c:
a3:9a:20:33:14:e2:87:f5:54:37:62:5b:59:b8:43:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:48:C4:68:73:39:8C:59:19:6A:04:FD:B3:C8:B0:07:2F:06:7B
X509v3 Authority Key Identifier:
keyid:62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/lUZIxGhzOYxZGWoE_bPIsAcvBns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:97:19:3b:88:7d:64:b3:fa:db:25:65:2d:fd:ca:40:0e:fb:
9c:b7:b2:bc:b9:f9:55:91:70:cd:7a:1f:94:d5:e6:fa:e7:8d:
2a:78:34:b6:9a:29:19:05:58:35:24:ca:09:0f:4e:a4:50:31:
f2:c1:fe:cd:bb:4b:46:ac:ce:62:41:8e:4b:36:7f:88:b0:36:
87:5a:d4:fc:31:0c:50:ca:ba:a2:b1:d7:99:a3:ef:aa:d4:02:
af:59:d8:8f:ef:49:3f:42:39:10:be:64:bd:d6:6d:0e:68:c0:
dc:34:58:15:6e:3b:5c:a8:51:5b:a2:e7:5f:69:7f:f0:4f:e3:
0c:31:48:40:c4:08:83:db:6b:bc:db:dd:32:ed:2a:ef:c4:fe:
80:f0:d9:ae:fb:df:62:0a:30:ea:c7:02:55:b1:82:b3:bc:4e:
ab:88:f9:30:ba:a8:a7:87:37:55:9d:7e:13:96:c2:34:ac:45:
ee:ae:7a:9d:1f:3d:a9:0a:f9:66:5f:49:30:46:28:23:7f:d2:
4c:b7:5e:ab:c2:cd:e2:45:7d:24:06:08:5e:c9:43:ac:d1:67:
35:f9:54:24:22:17:00:ca:de:db:db:6f:78:be:6d:db:86:7c:
53:0d:ea:15:b2:db:e8:86:85:19:18:ee:2a:7d:c6:00:4c:14:
a9:73:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:53:47 2025 by rpki-client