Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lc6-J-M0Ug8u55OV8BPW88L2DFk.roa
File: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (raw, json)
Hash identifier: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=
Subject key identifier: 95:CE:BE:27:E3:34:52:0F:2E:E7:93:95:F0:13:D6:F3:C2:F6:0C:59
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0196FCACE6BB975FAB51FD967AC367DD0D77
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lc6-J-M0Ug8u55OV8BPW88L2DFk.roa
Signing time: Fri 23 May 2025 10:25:11 +0000
ROA not before: Fri 23 May 2025 10:25:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 403504
IP address blocks: 194.247.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:ac:e6:bb:97:5f:ab:51:fd:96:7a:c3:67:dd:0d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: May 23 10:25:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95cebe27e334520f2ee79395f013d6f3c2f60c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:14:52:e8:a9:4d:fc:55:de:e2:0d:23:be:
e9:52:48:1a:d4:c3:4e:c9:36:34:16:77:a0:40:94:
77:9a:d0:d3:af:1b:9d:7e:63:b0:9b:09:8c:41:e2:
3c:6c:53:91:2e:de:e4:dd:5b:d9:d5:ef:75:e5:46:
9d:5c:a7:d8:fb:69:00:51:1d:c1:90:e3:3c:02:b5:
58:e0:9a:90:00:29:c1:c6:99:48:0a:47:f3:ac:e7:
3b:54:0b:3c:cd:f4:61:12:3b:e4:19:31:4d:cc:00:
a2:c6:c9:d2:3c:36:7e:f5:cb:81:eb:07:68:e8:62:
11:32:0c:76:99:34:b9:7e:d2:15:c6:f8:68:f8:d1:
af:6a:28:68:d3:26:50:ee:33:7f:fd:dd:40:72:4e:
88:4c:e2:88:3d:11:92:d8:d1:be:22:b6:d8:53:ec:
41:cf:d2:df:71:5b:22:63:e6:ab:b7:71:cf:c3:19:
d0:b2:e9:b2:cb:d0:cf:d9:8c:73:8b:71:be:8b:a8:
c4:9c:c4:0b:53:e1:b1:51:4f:f8:29:4c:00:31:ae:
68:20:52:af:7b:07:25:0d:cb:8c:9c:2d:c4:75:33:
74:b6:0d:34:50:e1:14:ba:be:cc:88:4e:c7:fb:ff:
8f:04:dd:bf:14:c0:2a:ff:00:ee:ac:28:90:e5:6d:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:BE:27:E3:34:52:0F:2E:E7:93:95:F0:13:D6:F3:C2:F6:0C:59
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lc6-J-M0Ug8u55OV8BPW88L2DFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.45.0/24
Signature Algorithm: sha256WithRSAEncryption
37:51:ba:95:b3:23:60:38:d2:8e:a0:59:31:88:f2:1b:e0:f3:
35:29:d8:38:f7:f3:52:d0:90:d1:5f:4a:e0:b6:10:68:6b:68:
56:ac:bc:a4:8e:c6:12:3c:b3:20:b4:21:f7:17:09:ed:dd:46:
71:6b:ad:20:cc:89:7d:89:98:eb:63:0a:98:9c:cb:a0:a7:95:
9e:49:59:3e:63:4e:15:16:b8:fa:78:6c:d8:b4:1e:23:36:5a:
d6:8d:60:97:bd:fc:f9:8e:00:80:40:0f:f2:33:fd:9b:5e:4d:
81:91:cd:f3:ed:5d:75:0e:dc:66:92:5f:7f:fc:94:cc:c1:2f:
5c:92:62:af:6f:04:f3:f4:b8:7c:a2:da:00:7f:11:44:70:54:
06:2a:a5:9c:3f:3f:91:ff:7c:b4:07:60:6b:47:14:3d:de:8d:
dc:65:e0:3b:c9:11:da:4f:2d:b8:6b:cc:09:35:5c:22:d5:b8:
2e:0e:59:63:4a:e7:66:55:48:a3:b8:02:15:b8:09:5d:2c:6a:
39:62:cd:c0:c4:6b:6f:66:35:72:bb:91:28:3e:af:fc:6b:9c:
fe:b6:1e:66:39:5a:53:e4:19:58:94:99:57:30:5a:80:27:61:
96:31:03:16:a0:f4:e7:45:b9:98:0b:77:5e:47:e7:ac:bc:26:
9a:cf:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:27:37 2025 by rpki-client