Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/li6EOX-FGf3c-oOCqBpKv79mkaM.roa
File: li6EOX-FGf3c-oOCqBpKv79mkaM.roa (raw, json)
Hash identifier: xaHho81zT1YRg1xd9w2yG7jCepIsSXFmop1/GMvnuFw=
Subject key identifier: 96:2E:84:39:7F:85:19:FD:DC:FA:83:82:A8:1A:4A:BF:BF:66:91:A3
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 0194FB1B5F763C5F6A4F5C376C07B01A090A
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/li6EOX-FGf3c-oOCqBpKv79mkaM.roa
Signing time: Wed 12 Feb 2025 17:01:02 +0000
ROA not before: Wed 12 Feb 2025 17:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202
IP address blocks: 159.101.128.0/21 maxlen: 21
159.101.236.0/22 maxlen: 22
159.101.240.0/22 maxlen: 22
159.101.252.0/23 maxlen: 23
159.101.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:1b:5f:76:3c:5f:6a:4f:5c:37:6c:07:b0:1a:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Feb 12 17:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962e84397f8519fddcfa8382a81a4abfbf6691a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:10:fd:0c:b5:ab:55:4b:08:a0:5b:4b:8a:
98:e7:14:44:d5:be:4f:21:fa:b1:5e:29:9d:44:17:
1b:b3:2b:43:89:9e:f1:bf:e2:38:44:1e:ca:5a:7c:
04:7c:96:7b:7f:79:54:32:a5:68:0c:28:5a:94:08:
a7:cc:69:95:4b:70:da:1b:43:b8:37:77:66:c8:3b:
ff:6d:45:a9:ec:7b:64:4c:6d:53:20:b1:4d:60:e0:
4e:ef:d7:82:32:07:3b:9f:56:2b:13:8f:7d:63:7c:
72:fe:63:d1:07:98:5c:b5:ff:5c:7a:d9:a4:ff:89:
d6:ec:21:d8:d0:dd:1a:0e:fd:54:5c:91:d2:73:32:
07:8b:cc:48:b1:4e:55:d7:f6:af:a4:3e:34:26:86:
e6:61:08:a0:35:9a:93:9c:98:3b:05:0e:04:46:c4:
38:6a:79:ff:4c:62:95:5f:1a:b8:ae:04:f4:93:29:
19:77:7a:30:4f:3f:7e:60:4d:8a:57:fb:f6:77:20:
02:ab:03:bd:b7:c2:31:15:b2:9e:58:2e:12:ba:77:
a4:79:c9:99:cd:4a:28:1d:40:1c:20:a0:4f:76:2b:
e5:ab:ae:d6:68:44:97:bc:d6:4b:42:29:15:34:c0:
df:7d:16:aa:8f:00:82:e2:71:ef:6d:0b:18:da:ff:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:84:39:7F:85:19:FD:DC:FA:83:82:A8:1A:4A:BF:BF:66:91:A3
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/li6EOX-FGf3c-oOCqBpKv79mkaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.128.0/21
159.101.236.0-159.101.243.255
159.101.252.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ae:14:47:46:73:0d:0c:58:44:cd:fa:a8:c2:41:7f:5b:b9:
46:1d:45:d9:f7:17:8a:0a:24:e1:4a:58:a9:cc:c8:ef:f7:5a:
b3:7f:0e:f0:66:a9:6d:2e:ec:af:f7:e3:4f:5e:1b:d2:f7:6b:
23:62:4b:7d:b0:93:0b:84:fc:43:3a:c5:85:09:6a:a7:cd:cc:
e3:da:5c:91:c9:83:fb:4c:23:bc:ae:4e:89:e1:27:0b:5f:2d:
69:5f:31:c2:08:0f:bf:84:db:f0:26:95:b7:10:9c:0e:72:4e:
66:f5:d6:73:d9:f2:d7:a0:87:5a:bd:dc:e3:59:c7:9b:f4:b7:
8a:34:36:2e:d9:06:15:42:11:63:97:82:56:2f:24:c5:bd:c2:
db:04:8d:1b:00:11:a4:e4:07:f5:91:33:92:cf:98:85:aa:5f:
92:bb:b8:31:d9:b8:b4:e5:ff:97:5f:24:da:9d:c7:aa:ef:49:
7d:b3:aa:8a:bd:01:6e:c8:7b:77:d3:8f:d3:4e:a9:d2:8a:3d:
b5:68:6c:69:47:b6:2e:f2:58:19:9a:2e:c6:df:d1:16:e7:a7:
70:8f:00:b5:8d:e1:36:f9:f9:bd:b2:72:e5:6a:66:a1:55:3a:
42:67:35:7e:4a:be:a3:3b:ec:36:fb:41:6a:10:c5:16:ec:61:
64:8a:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:29 2025 by rpki-client