Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lqb8JuesgYqLunGIxtg9prdvKKI.roa
File: Lqb8JuesgYqLunGIxtg9prdvKKI.roa (raw, json)
Hash identifier: RUslHAbhOwFIr5EtQYu+AV125tUbd+AeD3JFZXPgLdU=
Subject key identifier: 2E:A6:FC:26:E7:AC:81:8A:8B:BA:71:88:C6:D8:3D:A6:B7:6F:28:A2
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C7B9362781EA218438248D5FF95C7
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lqb8JuesgYqLunGIxtg9prdvKKI.roa
Signing time: Thu 02 Jan 2025 09:50:31 +0000
ROA not before: Thu 02 Jan 2025 09:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44237
IP address blocks: 77.51.247.0/24 maxlen: 24
77.51.249.0/24 maxlen: 24
77.51.250.0/24 maxlen: 24
77.51.252.0/22 maxlen: 22
85.94.0.0/23 maxlen: 23
85.94.0.0/24 maxlen: 24
2a02:930::/32 maxlen: 32
2a02:930::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:7b:93:62:78:1e:a2:18:43:82:48:d5:ff:95:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ea6fc26e7ac818a8bba7188c6d83da6b76f28a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:b9:6c:54:54:7c:3d:90:38:5c:40:00:21:
6e:30:2f:32:72:3d:47:43:4e:ac:18:fd:6d:c9:8b:
b8:f3:0a:61:7c:e7:74:d7:31:bc:b3:66:8b:25:63:
85:65:55:01:e8:48:10:17:2f:36:db:49:0c:5c:60:
f0:f2:c5:4e:c1:62:1a:e7:21:9b:bf:3b:80:2a:e5:
61:b1:3a:3d:bf:59:b5:54:b6:3b:ee:f7:d4:9c:e3:
df:2e:67:22:79:58:6d:1f:8c:dd:52:e4:9c:13:e0:
a1:83:98:1c:a7:5c:6c:cd:a7:cb:3b:68:9a:3f:aa:
74:45:32:e2:13:e2:f2:56:23:cb:a1:a6:4b:19:c3:
0b:5e:6b:d9:0a:a9:bc:d2:58:eb:9c:22:d0:6f:1d:
fe:d2:cb:96:ad:87:11:78:0c:2c:44:42:44:7e:72:
7a:7b:04:6f:a6:2e:e1:b1:6d:5e:71:3b:eb:4c:2e:
25:4c:f5:e3:ce:b4:87:f7:d6:52:e7:bc:3e:f0:4a:
ab:25:c9:40:f3:a0:57:95:25:b8:ec:ac:df:e7:55:
f9:8d:dc:94:69:48:85:d6:d8:94:e1:4b:d0:fe:7b:
09:3e:c9:cc:42:31:e2:3c:2f:9b:32:de:14:3c:de:
f0:0e:0d:c3:8c:08:a0:4d:5f:7d:b4:a4:9a:38:c7:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:FC:26:E7:AC:81:8A:8B:BA:71:88:C6:D8:3D:A6:B7:6F:28:A2
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lqb8JuesgYqLunGIxtg9prdvKKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.51.247.0/24
77.51.249.0-77.51.250.255
77.51.252.0/22
85.94.0.0/23
IPv6:
2a02:930::/32
Signature Algorithm: sha256WithRSAEncryption
5c:36:e9:7c:c2:03:0e:81:2a:89:fa:58:09:1e:a4:a1:bd:e8:
cb:6d:ce:d4:3e:1e:36:c0:41:18:ef:5c:8f:22:fb:8a:a7:38:
f0:13:2a:e6:e8:e5:b7:33:ed:05:f1:66:31:a4:5d:d9:6b:cb:
29:60:d6:7d:01:70:fa:4c:7c:c2:1b:c8:7e:08:1e:f9:ab:12:
df:1c:de:c5:f6:04:ad:a2:60:1d:bb:5c:5e:84:56:f6:39:75:
44:f0:d1:2d:8a:8c:90:0c:af:76:f9:0a:1e:47:59:e8:0d:70:
59:8e:2b:17:7f:97:2a:4c:00:2f:b5:90:a2:63:1a:70:ca:89:
bb:36:94:ff:7f:59:65:bc:51:c6:b3:f6:c3:9f:9e:5f:de:9f:
d4:c3:72:c7:14:56:1f:51:13:84:4c:12:68:9e:55:dd:c7:b3:
b7:d8:de:71:f8:4d:42:d4:ef:ef:a8:ee:32:1d:a2:b7:eb:b5:
9d:b0:99:29:7d:4e:6e:e4:bf:e8:46:d0:99:22:ac:9e:9d:82:
30:28:70:82:94:e4:0a:d1:25:f0:5d:7c:04:d6:8c:5f:af:b5:
81:72:1b:ce:19:29:c2:08:69:b6:46:7e:d9:0e:ca:4d:23:22:
98:d7:05:7f:b1:c5:a4:6e:4c:60:f4:52:3f:4e:97:82:67:01:
fc:c9:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:12 2025 by rpki-client