Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa
File: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (raw, json)
Hash identifier: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=
Subject key identifier: D8:B3:61:D8:82:B8:8D:99:F5:CD:41:81:A1:27:AE:38:27:47:B1:72
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019420D631941B194889AB62B3CE1AACDF37
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208293
IP address blocks: 78.109.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:31:94:1b:19:48:89:ab:62:b3:ce:1a:ac:df:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8b361d882b88d99f5cd4181a127ae382747b172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:e7:e8:2a:0d:0c:9d:da:49:b9:f3:92:81:
a9:1b:19:1b:66:02:ab:e9:20:40:21:79:0d:88:45:
31:91:1e:cd:74:08:b2:85:3b:86:c8:98:f5:de:54:
1c:51:0d:9c:5b:7b:8d:15:0d:4c:5b:d0:df:eb:17:
c6:0c:05:f6:b5:58:87:fb:fb:cf:d7:ed:26:d6:74:
34:6a:4d:55:8d:dd:e5:31:e9:3f:cd:ee:3d:67:7f:
7d:9c:26:01:95:90:65:62:35:11:6b:10:4e:61:e6:
16:12:2b:a7:d6:99:55:9b:4d:93:01:d5:2c:43:a9:
69:64:16:b2:80:79:2a:9e:ba:1f:b3:c5:aa:6b:08:
fb:a6:8f:f1:2b:fe:7d:19:af:28:e6:3d:26:0f:79:
01:7e:b7:0c:e0:c6:0d:3c:c0:1e:e0:ae:69:7e:55:
9f:f0:92:72:f5:99:37:cf:3f:5b:93:f0:6c:3f:34:
3b:55:35:a4:a4:bc:fa:55:39:db:aa:d3:f5:b9:56:
e5:45:50:9b:ba:48:83:3b:ee:68:4d:eb:03:29:12:
ac:56:9c:bc:af:2b:0e:4d:ae:4a:63:8d:62:17:19:
72:2a:80:20:51:51:6f:10:9e:03:6e:4a:c4:99:7d:
59:c9:ee:92:90:98:11:70:f4:0d:33:97:5a:4c:0c:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:61:D8:82:B8:8D:99:F5:CD:41:81:A1:27:AE:38:27:47:B1:72
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.225.0/24
Signature Algorithm: sha256WithRSAEncryption
21:dc:d5:b7:cd:5a:87:56:c4:61:0a:07:c7:94:36:87:10:10:
13:5e:0c:e5:95:c1:1b:c9:fb:d2:3b:e3:a6:f3:a7:32:56:e8:
ae:b1:5d:86:9e:c6:17:5a:76:7f:74:95:72:81:40:a4:d3:6c:
00:46:8a:8c:27:f2:93:91:3d:50:f5:51:cc:f6:ec:da:63:15:
53:f2:a2:af:db:8e:af:14:bc:00:96:af:f3:59:ab:6a:aa:19:
d3:f4:7c:b8:c8:ec:a5:60:d3:21:a2:af:11:1d:e4:51:57:87:
5f:3e:76:db:1d:5f:6c:87:b9:c4:98:7f:a5:f1:72:d0:6d:4f:
c8:b9:6b:a4:57:19:59:50:f4:72:54:a8:c7:f2:75:87:20:49:
04:5f:8d:91:34:b3:5d:a1:1d:fd:70:6e:74:3f:35:b1:6e:94:
66:7c:66:79:d3:43:9d:d7:8e:ce:1a:b9:dd:18:84:93:90:91:
e2:be:f8:bc:71:be:ab:40:43:7b:30:c2:09:3e:6e:ae:30:72:
2b:e4:4a:fe:f3:06:7e:68:cf:a9:8a:f7:ae:af:e6:cf:e1:17:
8d:72:a6:0b:a7:ce:98:06:b4:cc:2f:e8:24:b3:3b:71:f3:a9:
e3:52:b4:dc:88:44:b9:1f:96:dc:27:9f:42:c8:d4:ac:bb:da:
f9:72:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:34:30 2025 by rpki-client