Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/Luq1AGm-0yiU8GrI6ZL8kYwyd3I.roa
File: Luq1AGm-0yiU8GrI6ZL8kYwyd3I.roa (raw, json)
Hash identifier: 35d7vaos91aXg7eDTyQtgIWe7y3Nm+JQYfuUr0WlJf4=
Subject key identifier: 2E:EA:B5:00:69:BE:D3:28:94:F0:6A:C8:E9:92:FC:91:8C:32:77:72
Certificate issuer: /CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Certificate serial: 019427482A97DCE1EF5137C2063A1FF31CD5
Authority key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/Luq1AGm-0yiU8GrI6ZL8kYwyd3I.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205718
IP address blocks: 185.231.116.0/22 maxlen: 22
2a09:c740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:97:dc:e1:ef:51:37:c2:06:3a:1f:f3:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eeab50069bed32894f06ac8e992fc918c327772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:d5:9e:a4:da:f3:4a:fa:c0:e8:dd:cd:a7:
4d:75:ec:4c:f9:9d:ff:20:67:fa:c8:c2:1f:3f:39:
7e:cb:af:31:fe:f6:bc:03:5c:b1:17:c9:a6:ae:62:
fb:ec:e7:fd:b8:c5:67:23:49:fc:b7:12:e1:f0:6b:
68:2a:ac:c6:7c:ce:60:2a:c4:77:b5:c6:1f:b7:de:
22:bd:00:72:df:f4:64:34:68:a6:6e:09:7e:94:5a:
03:db:a8:16:67:a8:da:36:16:08:26:40:22:6d:df:
c7:a6:38:8d:f4:8c:70:bc:5f:9b:0a:7d:91:4f:83:
3f:84:a4:58:ab:f1:39:a3:bd:6b:09:80:75:9c:25:
48:15:29:76:73:38:54:b5:40:a5:a7:0c:fa:c9:b6:
25:e3:98:ea:3f:6e:69:84:9a:3c:cb:e0:25:63:aa:
57:ea:3b:f3:0c:ff:de:41:88:6a:b2:40:b4:d6:6c:
40:dd:9b:bd:bd:23:b4:17:a2:4a:97:c2:d3:a9:fc:
5b:5c:c3:dc:7c:33:cb:d5:28:cb:52:fc:08:34:ff:
d9:25:29:9c:21:12:86:c6:05:58:87:de:5f:9e:ed:
b8:cc:ae:7a:4e:77:2d:5b:5a:02:41:8f:1c:4d:3a:
e8:08:29:28:94:21:0e:39:06:17:bf:86:26:8f:ac:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:B5:00:69:BE:D3:28:94:F0:6A:C8:E9:92:FC:91:8C:32:77:72
X509v3 Authority Key Identifier:
keyid:4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/Luq1AGm-0yiU8GrI6ZL8kYwyd3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.116.0/22
IPv6:
2a09:c740::/32
Signature Algorithm: sha256WithRSAEncryption
ae:84:63:60:15:0f:1d:f1:ed:a0:97:87:14:6d:11:5a:f4:d4:
29:e0:62:89:e2:da:a4:72:2c:76:16:35:f5:49:90:50:df:63:
4f:be:37:b4:24:f5:6a:c0:ed:82:24:00:93:49:b3:b1:fc:35:
1b:d4:40:c5:25:8d:e9:24:c8:4e:5d:bd:2e:ab:e9:4c:de:88:
9e:11:86:84:76:11:9d:15:a2:90:cc:73:42:25:32:61:d8:5b:
07:7d:89:6d:e0:f2:72:d7:02:47:4c:da:cb:1c:ec:3b:cb:9d:
82:86:e7:9f:b6:4c:6b:d8:dd:01:5f:dc:d5:30:8f:04:db:0f:
8e:d5:3b:e7:13:b2:68:5d:66:03:dc:1b:35:cd:b6:ca:30:85:
60:b4:3e:00:cd:21:4a:1a:e7:d1:62:a4:7d:75:6f:f1:30:b5:
86:fd:b9:8f:d7:a1:b5:0f:be:bb:2a:ae:8a:50:ba:16:ef:6a:
92:42:0f:c2:7b:fe:39:fc:bb:3f:4d:97:25:b7:59:b1:8a:26:
9b:42:fc:eb:99:c8:e2:71:a0:bf:78:21:f5:42:03:49:56:a0:
9b:e1:62:5a:ae:fc:ac:76:ea:81:c8:73:06:d4:93:98:cc:8e:
1c:04:78:d7:23:59:d9:e7:8f:f4:cf:38:0a:c2:6c:ed:5f:74:
3d:b6:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:38:58 2025 by rpki-client