Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LNQgU6GRKV3inBq8LVLzWgetsLo.roa
File: LNQgU6GRKV3inBq8LVLzWgetsLo.roa (raw, json)
Hash identifier: AtOifK+1Rbg9tLD5JCxbPHBbZCv402rWIdF3x8XyKU0=
Subject key identifier: 2C:D4:20:53:A1:91:29:5D:E2:9C:1A:BC:2D:52:F3:5A:07:AD:B0:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01951757779137C218D9071F5E27BAE04403
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LNQgU6GRKV3inBq8LVLzWgetsLo.roa
Signing time: Tue 18 Feb 2025 04:36:03 +0000
ROA not before: Tue 18 Feb 2025 04:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213430
IP address blocks: 151.243.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:17:57:77:91:37:c2:18:d9:07:1f:5e:27:ba:e0:44:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 18 04:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cd42053a191295de29c1abc2d52f35a07adb0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:0c:95:4b:8a:b2:0a:bc:9e:14:c9:54:76:
94:2b:07:fd:7b:4d:ab:d6:01:fa:60:18:ce:c3:d6:
ce:fa:c9:94:fb:fa:76:d0:88:8d:c5:9a:dc:2b:8a:
24:b6:7d:82:f8:44:71:2d:2e:78:06:9e:a2:f6:48:
99:01:3d:ad:b6:03:e5:42:00:1d:0f:2f:8d:5f:32:
52:26:4c:8a:64:1d:69:dd:ed:c0:ee:3f:4f:ff:22:
fd:a7:20:ed:3a:ab:40:78:a3:af:d6:bf:3d:fe:7c:
a3:c6:66:de:44:f0:d0:fd:66:ad:64:48:f9:b0:3e:
3d:2e:d7:c1:b0:bc:cc:fb:7b:72:3a:e5:ca:08:e6:
f8:8d:3e:12:3f:86:81:b9:93:1a:7b:29:3a:f1:f0:
5d:0f:b5:be:14:5a:66:25:ca:64:fd:8c:b4:3d:31:
89:42:c3:58:cc:80:64:7c:3b:10:0e:fd:5a:58:7e:
f1:d7:8b:10:b1:c3:b2:e1:af:03:3a:b9:1f:68:b4:
d0:ca:d9:f7:e5:76:d6:b1:a1:07:63:93:dd:60:98:
a7:7e:3c:b0:4a:68:32:fa:f2:07:64:d0:2a:cf:ff:
e7:cf:e1:a4:58:2b:3e:f6:75:2f:21:55:51:ba:0f:
42:0b:f2:f6:71:49:84:02:83:95:9d:78:78:76:82:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D4:20:53:A1:91:29:5D:E2:9C:1A:BC:2D:52:F3:5A:07:AD:B0:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LNQgU6GRKV3inBq8LVLzWgetsLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.34.0/24
Signature Algorithm: sha256WithRSAEncryption
18:82:8a:ec:a4:de:08:f2:3d:c9:fa:27:3e:5c:89:e4:71:b2:
e1:95:4c:1b:5f:f9:cd:61:6b:3a:c1:3f:af:7e:b8:d4:6b:93:
35:70:1b:ec:78:fa:2e:0b:d8:6c:68:50:5b:4a:30:18:2f:2e:
40:ca:83:68:6b:8e:5a:20:3b:49:5a:6c:e8:8e:1e:ee:37:5e:
0f:b2:10:f0:6c:76:4a:20:3d:5a:87:5f:da:18:95:2d:c3:39:
f3:17:27:b0:4e:ac:37:04:e6:7c:8e:1d:aa:7b:c3:b7:06:e0:
2a:a7:c5:c2:35:da:fd:9c:6c:cb:fe:a6:89:41:1b:dc:b9:1a:
91:55:e3:c9:67:60:1e:5f:35:c9:45:52:25:05:f9:08:06:cc:
4c:bd:1e:53:6e:23:c8:4b:40:56:4e:67:c5:7f:6b:49:8a:a9:
fc:8f:45:de:7f:57:ed:47:3d:f4:8b:f2:4d:5f:ea:0c:25:70:
dc:23:bd:02:9d:89:a8:67:fd:55:3a:52:65:53:8a:85:07:82:
51:ca:3d:6c:80:5c:63:5b:38:bd:c3:70:22:4e:93:5c:65:6f:
40:e7:8e:d3:a3:90:c9:0c:43:57:2b:7c:04:da:23:a0:5e:b7:
37:68:65:18:31:40:ed:06:b2:47:cf:b2:ee:41:99:7f:2b:27:
94:af:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:11 2025 by rpki-client