Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/L9Fk346-JSHBf5lZ_ZJf-LMZGWU.roa
File: L9Fk346-JSHBf5lZ_ZJf-LMZGWU.roa (raw, json)
Hash identifier: DN183lb8EchI0WiaHaTT8jaz5o7gqV8yjOyNWGuBl80=
Subject key identifier: 2F:D1:64:DF:8E:BE:25:21:C1:7F:99:59:FD:92:5F:F8:B3:19:19:65
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019634D337C6F6ED2D9039FCC672E560BD06
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/L9Fk346-JSHBf5lZ_ZJf-LMZGWU.roa
Signing time: Mon 14 Apr 2025 15:02:59 +0000
ROA not before: Mon 14 Apr 2025 15:02:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 212.116.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:d3:37:c6:f6:ed:2d:90:39:fc:c6:72:e5:60:bd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Apr 14 15:02:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fd164df8ebe2521c17f9959fd925ff8b3191965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:03:95:2e:da:fe:f8:97:03:90:ca:8b:47:
0a:70:67:53:71:0a:85:55:52:21:a0:57:ac:21:3d:
47:b0:3d:10:7e:cc:84:b4:79:99:f4:a6:22:8d:36:
45:13:55:e2:b9:64:78:e9:99:9f:75:9c:8f:4d:31:
2b:45:d2:79:45:db:96:05:72:95:b5:7f:9f:7d:e4:
43:08:cc:25:89:e5:2c:d3:1e:a6:c8:18:d7:62:0f:
c3:4b:45:00:d6:d9:81:98:07:db:6f:76:82:00:e1:
99:6b:41:1f:3b:55:70:cd:27:91:3c:9f:5e:26:bd:
43:cf:23:8c:99:20:7d:a7:25:02:cc:52:2b:bf:55:
47:f3:64:e0:39:ab:b8:5c:54:7f:cd:72:95:5d:18:
69:8e:a0:fa:7c:85:fa:67:f0:5b:6f:9c:56:8d:ae:
85:e7:38:9f:1d:43:53:22:55:a8:44:66:70:78:67:
e8:49:d0:60:05:9a:5f:91:86:f7:f4:6c:b6:c6:ee:
55:00:f7:fd:5b:4a:01:ee:e4:05:d4:5c:7e:e6:7c:
70:ad:85:b5:ea:45:28:d1:93:b7:d6:50:bc:bd:5f:
15:54:1b:0d:35:9d:97:b5:97:28:de:6e:eb:1a:97:
28:34:f0:87:87:34:e4:7f:83:76:ea:88:af:c1:be:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:64:DF:8E:BE:25:21:C1:7F:99:59:FD:92:5F:F8:B3:19:19:65
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/L9Fk346-JSHBf5lZ_ZJf-LMZGWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.227.0/24
Signature Algorithm: sha256WithRSAEncryption
32:89:30:79:8d:33:2e:0a:ec:ad:10:9f:5f:c3:09:55:d3:33:
ea:33:fa:31:b5:b1:d0:8c:88:bd:fe:d1:cd:9a:dd:a6:d8:4a:
63:89:af:04:4e:c3:74:7b:e6:81:1b:4b:fd:a5:ac:d2:e0:5c:
03:75:9f:46:ef:98:f8:d7:40:7a:7f:10:ea:50:4c:b4:3a:89:
10:e7:6d:bc:fe:4e:28:ad:bb:43:13:c1:69:12:b2:29:29:c3:
0b:3f:e4:43:4d:2f:36:74:a9:52:e5:81:19:5a:f3:99:45:08:
b4:c6:f0:2d:4d:26:1a:d1:0c:93:44:0d:98:65:c8:9a:17:f7:
ef:1a:b0:78:bf:34:17:b9:24:d1:63:26:1a:d9:b4:c4:87:28:
09:0f:34:23:72:e5:f9:a4:0e:01:bb:b5:a0:07:e1:f3:96:3b:
58:1c:1d:39:88:a7:05:55:96:13:0d:11:17:8a:ae:68:00:44:
49:9a:07:2f:54:c9:e1:ac:c0:e6:27:70:9a:1c:d2:14:28:24:
8f:ab:c3:07:60:a0:f6:28:a7:9e:b8:c0:a5:78:71:88:bb:06:
96:44:bd:76:68:e4:ea:0a:80:96:e2:96:8a:e1:42:d1:3a:37:
90:cf:97:f6:64:a1:d7:27:af:b9:05:8a:45:cb:77:11:f4:dd:
74:17:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:49 2025 by rpki-client