Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/LO-lQuCqbX-vzrEDWaS2yzD8HPo.roa
File: LO-lQuCqbX-vzrEDWaS2yzD8HPo.roa (raw, json)
Hash identifier: 2Ab5VCBVIHwbJUy5TszPUSkoTaAoMm4DE4cVzWjji7Y=
Subject key identifier: 2C:EF:A5:42:E0:AA:6D:7F:AF:CE:B1:03:59:A4:B6:CB:30:FC:1C:FA
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0196DA1412E758733FBA116993BE1483087F
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/LO-lQuCqbX-vzrEDWaS2yzD8HPo.roa
Signing time: Fri 16 May 2025 17:11:10 +0000
ROA not before: Fri 16 May 2025 17:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141883
IP address blocks: 46.8.120.0/21 maxlen: 24
109.248.16.0/21 maxlen: 24
109.248.24.0/22 maxlen: 24
109.248.28.0/22 maxlen: 22
188.130.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:14:12:e7:58:73:3f:ba:11:69:93:be:14:83:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: May 16 17:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cefa542e0aa6d7fafceb10359a4b6cb30fc1cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:1a:c2:81:6c:2f:00:c3:1d:08:26:cb:0b:
7e:34:fc:85:e9:22:c6:3a:6b:d8:26:7a:42:18:72:
4e:ee:8b:bc:70:a6:75:6f:43:0a:86:71:cd:2c:dc:
5f:a4:56:ba:e6:d9:18:e7:88:de:b1:c2:49:f6:46:
84:8f:f4:b8:f6:08:a2:02:a3:34:c1:e8:8b:ca:70:
49:9e:be:4b:19:42:86:16:9a:7c:68:ac:4c:7e:82:
11:56:40:52:05:a1:ab:b7:b8:c9:b9:40:69:8f:d0:
28:da:b6:da:2c:60:ff:74:be:ee:20:d1:36:45:92:
bc:3a:62:5c:2a:44:90:67:27:bc:6d:1f:03:b7:93:
cd:9a:92:12:d2:ab:5e:b4:74:bd:42:09:1b:78:74:
c8:84:a6:d8:f5:59:2c:31:75:11:30:5c:44:7f:32:
fe:50:21:64:66:6e:4b:af:5f:cf:17:e2:30:fb:5a:
09:22:fa:c6:b0:01:fb:10:02:21:b1:3c:b4:c0:7c:
c0:70:16:e9:bf:91:c4:2a:27:51:fe:d4:e4:41:f9:
fe:96:da:66:f5:c7:d2:0e:77:bd:64:61:e6:2f:d3:
47:e0:bd:61:1c:9e:be:2f:81:3f:3f:1a:ee:4b:0b:
06:dc:bf:5b:91:a5:00:a8:7b:a6:fc:78:c3:5d:fd:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:A5:42:E0:AA:6D:7F:AF:CE:B1:03:59:A4:B6:CB:30:FC:1C:FA
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/LO-lQuCqbX-vzrEDWaS2yzD8HPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.120.0/21
109.248.16.0/20
188.130.228.0/22
Signature Algorithm: sha256WithRSAEncryption
80:15:1a:2f:6a:58:8e:92:a5:01:96:45:01:8b:c8:28:4e:87:
2b:23:50:b3:ee:73:84:0f:77:15:f4:d3:c2:c4:ac:1f:14:91:
19:4e:d5:46:d2:f8:26:74:d4:69:f0:59:f7:bd:ef:c9:ec:c8:
63:b4:e8:39:49:90:8e:8c:f8:e8:54:cd:f4:5a:16:41:d3:0d:
cc:ac:58:36:f6:da:41:bb:44:e2:f5:6e:c3:06:7e:de:db:38:
eb:b2:fd:ba:aa:3a:da:91:a8:77:2f:f4:ec:1a:cd:be:13:53:
6c:5c:d8:91:81:d9:61:0a:8d:72:16:94:55:23:7f:55:d9:e3:
0f:a3:5b:18:e9:e8:7a:51:aa:fe:e3:72:c3:5e:3b:03:a9:94:
01:de:c4:b7:9c:7b:84:f7:e2:06:56:6e:35:60:33:6d:89:8e:
13:82:0b:1d:95:ba:48:fd:ed:80:a7:7d:4c:5e:fc:e8:cf:63:
26:06:f9:63:05:3e:95:c1:c3:c6:b5:9c:78:f8:af:96:ee:6b:
1b:b3:04:08:30:1f:06:ae:00:e4:90:cd:84:b9:fa:68:23:ef:
9c:95:33:f6:cc:73:00:0e:2f:f5:41:4b:7b:9b:95:f1:d4:a5:
4c:7d:ab:02:eb:55:81:e2:d9:ab:f4:ca:d5:4f:fa:fe:ab:c4:
59:05:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:51:35 2025 by rpki-client