Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvnXnAVjZo65-JyR4hzupVDhWGY.roa
File: LvnXnAVjZo65-JyR4hzupVDhWGY.roa (raw, json)
Hash identifier: xzWc7IYg3KKKNYnMvOMfyCUrD1+BErLLZV85u1Sj1XE=
Subject key identifier: 2E:F9:D7:9C:05:63:66:8E:B9:F8:9C:91:E2:1C:EE:A5:50:E1:58:66
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197CC8D51DD3A3D86F0FBF6F2AFF6E90C84
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvnXnAVjZo65-JyR4hzupVDhWGY.roa
Signing time: Wed 02 Jul 2025 19:11:42 +0000
ROA not before: Wed 02 Jul 2025 19:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 151.244.0.0/24 maxlen: 24
151.244.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:8d:51:dd:3a:3d:86:f0:fb:f6:f2:af:f6:e9:0c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 2 19:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ef9d79c0563668eb9f89c91e21ceea550e15866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:97:09:23:b4:03:de:d3:29:e1:2c:f2:7a:
1d:85:5e:9b:e7:f3:75:2f:d3:d6:bc:7f:39:27:7a:
e3:db:9d:d4:02:39:8c:e5:42:6b:fb:72:ae:a9:40:
de:ec:2a:cd:6f:64:16:92:68:65:77:45:ae:fc:4a:
08:52:d9:8b:88:f0:07:11:33:66:c0:54:1a:2d:89:
a1:19:a0:c9:10:e1:f2:ee:82:7d:b5:06:6d:35:e0:
43:58:95:ac:22:05:bd:42:f3:b7:7e:37:eb:5e:cb:
c9:92:90:78:96:9e:6f:bf:f3:a3:0d:3f:a6:bb:9a:
27:dd:47:8e:01:fd:bc:4f:d4:60:27:9c:90:d7:ad:
c0:9e:6b:99:16:8e:08:af:83:fe:ed:c1:20:56:02:
8a:3b:32:d9:42:71:d7:ff:65:36:68:e5:82:fc:c2:
ba:6d:57:dd:93:4b:52:a4:68:49:46:b0:71:9a:35:
83:f6:20:d1:ff:ad:d7:98:27:d6:f3:5d:5f:ba:0c:
26:7d:bd:74:3f:77:36:d0:7f:b9:e2:a1:16:49:7f:
33:a3:e5:0b:a2:f6:64:3c:90:a3:04:60:38:bf:7b:
9a:56:49:7d:f0:a1:07:16:91:e9:be:77:64:6c:63:
9a:f3:e2:e4:6c:ec:cc:74:64:d2:4a:bd:d3:ca:8b:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:D7:9C:05:63:66:8E:B9:F8:9C:91:E2:1C:EE:A5:50:E1:58:66
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvnXnAVjZo65-JyR4hzupVDhWGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.0.0/24
151.244.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:44:fe:7b:5c:de:05:29:e3:d0:7f:f7:ff:19:dd:70:4c:db:
e3:ec:f0:f3:6c:09:f9:ff:4a:9d:f7:40:9d:ab:d4:3f:bc:a8:
ba:db:16:b8:59:c3:eb:69:61:ae:2d:48:a1:91:1a:b4:fe:ec:
c4:c3:4a:2e:14:48:c5:36:9c:d3:0a:b9:bf:4a:58:d2:20:25:
82:9e:33:7e:c6:83:08:c4:4b:92:d0:0f:4a:10:7a:2d:37:75:
3e:f2:61:3a:cf:35:f2:32:79:25:d1:6c:fd:bd:58:07:ba:19:
55:d4:f3:9c:d8:06:75:48:a3:74:4c:88:44:24:98:d6:d2:71:
bd:2a:52:59:8e:60:18:2d:ac:82:c7:b6:7c:03:36:35:3d:40:
88:68:c8:9f:52:35:3b:d0:67:0b:9e:d7:c1:4d:26:05:ee:8c:
6e:7b:33:a2:72:5d:eb:eb:ce:9c:a4:66:83:79:fb:31:85:8b:
18:9e:47:46:d6:6f:8f:d8:b4:2b:ee:12:3d:81:af:33:a6:58:
4f:a8:a2:cf:b0:d4:56:98:52:c5:76:41:d6:b5:45:88:fa:eb:
39:22:11:05:a3:e2:e9:65:cd:79:50:8c:a0:dc:bb:3a:b5:a7:
06:40:b3:3b:50:37:71:6d:68:5d:8e:ae:84:d1:a9:31:29:65:
9c:c6:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:20:36 2025 by rpki-client