Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa
File: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (raw, json)
Hash identifier: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=
Subject key identifier: 2C:ED:6E:C4:B2:A2:8A:B8:22:E0:34:E3:89:C7:85:52:A1:E7:67:F4
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 01941FFA5D63AE4486BC250CCE42D79E760D
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.118.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5d:63:ae:44:86:bc:25:0c:ce:42:d7:9e:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ced6ec4b2a28ab822e034e389c78552a1e767f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:90:75:7f:51:6a:a4:04:35:bc:70:f3:87:
d7:be:ed:df:4e:5b:bd:c2:20:de:c7:54:b4:f4:c4:
51:46:37:45:ff:ab:80:ed:66:15:7f:b0:e1:76:34:
03:7f:bb:0f:1e:3b:84:78:80:4d:f5:c5:10:a7:81:
4d:74:1b:58:cc:16:07:0e:33:88:70:82:7c:42:47:
93:66:87:64:89:5d:5a:83:f3:08:d6:8c:d0:d3:d5:
0b:f9:25:71:c8:f6:94:f1:cd:22:bd:ea:33:ee:43:
4f:65:9a:cf:6f:22:76:56:3f:cf:a3:68:2b:f5:cf:
f8:17:7c:db:55:c8:3a:85:b0:7c:68:4d:49:92:2f:
ae:f1:19:e2:0b:cc:79:92:20:c4:c6:d9:88:9f:a6:
03:00:d7:46:03:e9:b2:bc:63:1e:eb:64:ef:6e:3e:
18:65:1c:ef:20:53:e1:5d:20:0a:de:a3:2f:78:05:
44:c3:38:84:23:a0:f2:e6:39:05:54:10:37:6c:15:
f8:8f:34:7a:16:28:79:de:79:b8:d5:b2:55:8e:c4:
da:76:64:48:55:3e:e4:f0:ba:66:08:e5:16:2a:56:
b2:92:81:03:9f:d7:73:ad:58:2b:aa:c0:c4:ae:c0:
0f:76:8a:96:df:cd:29:86:66:ad:b9:a7:15:31:1c:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:6E:C4:B2:A2:8A:B8:22:E0:34:E3:89:C7:85:52:A1:E7:67:F4
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.109.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:88:97:e9:dd:13:48:ac:5a:24:a1:dc:eb:6e:0f:95:be:e1:
9a:96:e0:4e:e9:ef:00:26:2d:71:ed:f8:67:5b:e1:00:ae:f0:
47:5e:7d:31:85:1b:e2:5a:b2:d8:25:a6:9b:c9:0d:cf:6c:8b:
61:20:44:da:e0:19:6c:e3:42:9c:56:ca:dd:71:8f:e4:60:ef:
72:19:ad:b2:b1:8f:15:28:65:72:2f:98:a6:5b:64:83:89:99:
04:d1:27:4b:cc:61:d2:f7:ea:02:a3:cf:16:48:e8:e1:c4:2a:
48:ad:4f:8c:93:d7:9f:2e:40:07:ed:19:f0:3f:83:86:98:27:
37:62:e5:05:f6:8d:15:aa:eb:7e:2c:f7:c5:b7:5d:9f:b0:9b:
b5:dd:b4:b3:06:00:4f:f3:da:b3:ea:f3:97:cc:a6:60:ac:7d:
58:05:15:19:39:28:5f:8c:75:fe:63:ef:d3:90:93:ef:95:2c:
ba:11:bc:64:67:97:31:c2:30:ca:de:5c:b7:4e:cc:1f:fb:ed:
e2:d4:ce:a5:4a:5e:ff:3e:a0:61:6c:ae:a5:73:7a:3d:dd:62:
4a:bd:1b:26:92:6a:a5:99:91:19:25:82:d1:54:b3:d8:f0:30:
c0:19:60:7a:76:62:95:de:ad:17:a4:65:e5:20:6c:e3:aa:07:
16:48:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:26 2025 by rpki-client