Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/luLxlcgh627v0OkdM0129_I_xLE.roa
File: luLxlcgh627v0OkdM0129_I_xLE.roa (raw, json)
Hash identifier: 0IA00NfTMeZkBm2M+KVm/0zXxqax1M++emDllDikDHM=
Subject key identifier: 96:E2:F1:95:C8:21:EB:6E:EF:D0:E9:1D:33:4D:76:F7:F2:3F:C4:B1
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01965C91A31138A2E2CA2F771803239BDCE6
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/luLxlcgh627v0OkdM0129_I_xLE.roa
Signing time: Tue 22 Apr 2025 08:16:10 +0000
ROA not before: Tue 22 Apr 2025 08:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204457
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:91:a3:11:38:a2:e2:ca:2f:77:18:03:23:9b:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Apr 22 08:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96e2f195c821eb6eefd0e91d334d76f7f23fc4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:42:fc:7c:5b:a2:10:78:02:21:cf:36:77:
c1:48:41:d2:30:b3:d7:6a:26:6c:4d:43:6a:57:38:
71:45:4d:86:70:69:49:0d:aa:cf:71:c4:2c:35:79:
d3:2e:99:d5:be:31:07:2f:71:30:97:ce:84:95:69:
80:cd:8e:f8:78:d5:96:a9:35:67:5b:66:3d:2f:94:
c7:5d:af:5c:da:cf:c9:bb:78:95:ec:7e:44:53:24:
25:06:6d:80:48:de:60:e0:ae:77:a4:34:03:fa:60:
90:80:4e:de:6f:02:21:a5:4e:b0:4a:0a:73:20:c0:
1a:59:52:f9:b8:7c:88:80:3c:e2:d9:de:d7:c8:be:
18:bd:ec:c7:d0:96:04:01:63:e5:72:b9:c2:18:d3:
67:58:54:b2:bc:e9:3b:91:04:6b:92:2c:08:4a:b5:
b0:42:65:b4:25:19:a1:06:1c:5a:9a:86:da:04:8b:
ac:21:59:e1:54:b9:d7:b7:7a:32:56:b9:04:cb:94:
e4:84:07:f8:e7:af:76:24:69:69:37:ce:72:16:17:
29:45:50:f0:3e:0d:d5:68:e3:59:a3:a0:4a:73:b0:
61:d6:70:d6:b4:dc:54:df:ea:06:87:17:ef:ae:77:
d6:e9:20:1e:5a:24:8e:d0:9c:e2:0e:66:a0:38:45:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:F1:95:C8:21:EB:6E:EF:D0:E9:1D:33:4D:76:F7:F2:3F:C4:B1
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/luLxlcgh627v0OkdM0129_I_xLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:00:28:d8:ab:62:98:48:f6:80:13:ff:7b:ff:a9:87:24:64:
a9:f7:88:72:ef:b5:d1:eb:fd:b4:37:4d:e1:97:61:8f:1e:a3:
20:9e:08:96:0a:e0:d5:c3:0d:c2:e6:76:ed:78:9a:af:8c:09:
b6:0a:d2:27:c0:30:c6:bb:e7:a1:79:fe:61:fa:b8:a4:3b:b5:
d1:ed:93:cd:21:c1:b9:f9:8b:5b:90:fa:b8:85:c3:9e:f8:1e:
b4:61:11:bf:14:7c:72:42:dc:be:4c:97:48:ec:b5:df:91:49:
06:a0:85:2e:c9:ce:ee:d8:b5:9a:83:45:e3:6a:e9:5e:6a:f5:
48:e1:28:bf:5e:e5:86:7c:1b:c0:38:a9:1a:b1:e4:a3:66:8c:
26:04:af:07:86:73:0e:b7:48:16:7c:f9:16:97:87:4a:8a:2d:
a7:83:a5:ef:d7:8a:6b:cf:bf:a8:93:69:dd:ce:a0:8b:60:bb:
3c:76:c2:6b:04:da:71:0b:ad:2e:e2:e9:b0:3e:9f:b7:ef:21:
89:e4:3d:f7:73:e7:69:91:6a:75:9d:7b:07:69:db:1a:6f:d5:
6f:cb:3a:4b:5f:ba:8b:c0:ea:82:56:01:4d:79:b2:cf:7a:21:
1b:ff:c6:9b:7c:81:28:09:8d:1f:31:d4:08:1e:f0:eb:c4:a2:
f1:68:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:42:09 2025 by rpki-client