Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/LktV6JWikoIF232VjBQrp6HksI4.roa
File: LktV6JWikoIF232VjBQrp6HksI4.roa (raw, json)
Hash identifier: KgS7FsPzBvy4Emf2JVBB8x2vPupCGQ56pl16OI2UqbY=
Subject key identifier: 2E:4B:55:E8:95:A2:92:82:05:DB:7D:95:8C:14:2B:A7:A1:E4:B0:8E
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0196D838E88E37C86F032AD2FB364F0FFBE1
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/LktV6JWikoIF232VjBQrp6HksI4.roa
Signing time: Fri 16 May 2025 08:32:10 +0000
ROA not before: Fri 16 May 2025 08:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 212.82.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:38:e8:8e:37:c8:6f:03:2a:d2:fb:36:4f:0f:fb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: May 16 08:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e4b55e895a2928205db7d958c142ba7a1e4b08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0d:de:eb:25:52:57:5d:09:51:a6:35:69:8c:
a6:30:75:fa:40:11:f5:9c:74:38:4a:25:fe:28:58:
08:ce:e5:2b:5c:d9:e0:f2:ca:34:e4:25:9e:f8:b6:
d1:c6:ac:a8:4a:ef:24:ea:77:f0:67:97:21:a1:6e:
e6:b8:74:bc:92:34:aa:98:50:e9:42:9d:20:58:58:
26:99:73:f5:e4:ef:7f:79:f3:6d:00:9e:59:19:c7:
cb:e7:96:ee:13:4e:24:b5:9c:f8:92:7c:02:e8:2b:
f9:a9:4b:3c:1e:98:78:da:26:eb:e1:09:a1:e6:49:
f3:9e:1c:fc:93:b7:14:d4:e4:2f:98:d8:2a:ba:c5:
dd:d8:9a:3f:e9:ac:6c:f7:9f:13:bd:b6:23:d1:27:
c8:f0:82:f6:b4:b9:da:ba:eb:9a:4a:9a:50:a0:31:
e6:85:2c:2d:68:b5:9c:1f:87:4d:0e:90:ab:cb:46:
8e:39:7b:4c:77:9c:f8:c5:5c:e2:2e:45:fb:e5:e8:
b2:ae:2a:66:23:78:9f:0a:9c:bd:0e:bf:cc:a3:dd:
07:75:1d:31:c1:c4:81:dc:58:64:be:5f:cd:3b:8f:
ef:ff:22:d4:e2:26:d8:11:df:46:49:77:0d:95:89:
dc:0a:a0:da:10:fa:56:b4:4f:88:b3:86:40:b4:a1:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:55:E8:95:A2:92:82:05:DB:7D:95:8C:14:2B:A7:A1:E4:B0:8E
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/LktV6JWikoIF232VjBQrp6HksI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.82.44.0/22
Signature Algorithm: sha256WithRSAEncryption
37:86:4e:6d:9d:bb:11:13:a1:9a:8f:d0:1b:de:95:22:80:18:
2e:88:30:e2:65:d8:a6:98:1d:b6:b8:55:ab:64:f8:ea:91:e3:
d6:ac:fe:e7:0b:91:ce:07:0c:f7:4d:4e:e5:21:fb:09:de:48:
57:73:97:03:d4:9b:85:7a:8b:43:70:5e:02:c4:73:1d:74:73:
89:2d:db:45:39:d0:03:ad:d6:52:5b:01:fa:92:c2:0e:97:22:
44:b5:17:11:93:cb:d4:43:c4:11:74:93:28:94:42:d4:cd:bb:
9a:a5:44:02:dc:72:eb:b6:77:05:4a:79:9f:ec:92:df:44:7a:
e7:6b:80:74:6a:e8:04:ef:2e:75:4d:b5:b1:bc:ae:62:c7:9e:
05:18:16:9d:3c:d1:27:57:39:d7:ec:de:e7:0d:f9:28:c9:aa:
bc:1c:5e:6f:56:2c:fe:0e:c0:76:57:a4:61:d6:d1:1d:47:a0:
44:bc:1f:e6:ad:92:25:e1:5e:a9:de:8e:64:d4:f0:06:8e:ba:
65:19:92:85:42:f4:aa:9e:0c:04:7f:f3:80:49:e7:2c:ba:72:
d6:81:37:70:bb:4b:65:58:0d:2d:a4:6d:16:4e:93:bc:19:45:
77:7e:05:48:c9:7e:65:f5:ae:ac:4a:df:08:73:12:86:e5:0a:
e4:13:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:06:30 2025 by rpki-client