Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/lzqQLxCOgbmMsFjIF9l6yOZ5_lM.roa
File: lzqQLxCOgbmMsFjIF9l6yOZ5_lM.roa (raw, json)
Hash identifier: NYvys6J3TneEgOXNsSuYqj8xqnd3SH7BGXlv5Qny2EY=
Subject key identifier: 97:3A:90:2F:10:8E:81:B9:8C:B0:58:C8:17:D9:7A:C8:E6:79:FE:53
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 018CC795583A399FC914730337CA6861E380
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/lzqQLxCOgbmMsFjIF9l6yOZ5_lM.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206731
IP address blocks: 2a04:ff00:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:58:3a:39:9f:c9:14:73:03:37:ca:68:61:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=973a902f108e81b98cb058c817d97ac8e679fe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:b8:ed:d4:ca:ee:cc:2a:cd:57:48:61:8e:
c2:6e:e8:df:90:b1:c9:70:1d:24:15:0a:49:a3:b2:
f3:1d:b4:5d:e4:1e:00:4d:84:69:31:7b:8e:71:04:
d3:a8:ed:6f:f1:9e:1b:4a:0b:78:3d:43:b5:5e:6f:
24:1b:59:e1:97:80:b7:de:27:de:eb:1a:5b:dd:25:
0c:16:a1:77:52:f7:4e:22:86:f9:5a:2b:e2:1a:9d:
e1:80:17:d7:1f:45:09:7c:8e:c7:00:b6:cc:ca:8f:
58:d2:d3:3c:8a:7c:67:e1:f0:31:14:76:1d:29:1f:
d5:91:10:6a:05:1e:96:81:c8:72:c2:e2:13:cc:28:
c8:ef:7b:84:f7:34:bc:26:e4:d1:3a:1c:e5:8c:d7:
e8:8f:a6:cf:0d:7a:b1:e0:b7:10:26:67:3b:db:e6:
5c:6a:05:7f:67:1a:10:e5:e8:a5:9e:d8:7b:bf:89:
8b:bd:0f:2c:5c:bb:63:0c:13:35:a7:4e:49:b6:29:
f4:00:98:a1:1d:92:0f:a0:de:47:13:ef:88:bf:59:
10:d6:a1:b6:8c:f2:fe:78:c5:29:df:bf:c7:ba:37:
65:1f:e7:a3:af:72:96:b1:04:7e:55:07:80:6f:93:
ad:a9:2a:c8:0a:0f:99:4b:90:be:0b:84:12:a2:f5:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:90:2F:10:8E:81:B9:8C:B0:58:C8:17:D9:7A:C8:E6:79:FE:53
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/lzqQLxCOgbmMsFjIF9l6yOZ5_lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:300::/40
Signature Algorithm: sha256WithRSAEncryption
4e:39:00:4e:2c:d5:1a:27:82:80:cd:27:0d:2a:f4:8a:15:91:
3d:bf:9b:64:10:7c:c1:1e:8a:e8:f0:05:51:b4:e5:3a:ce:bf:
8e:b3:fc:bd:93:0d:56:5f:42:9a:ba:2c:fb:3e:e2:35:db:cc:
06:8c:75:31:be:a0:89:09:fa:03:84:29:9f:37:fc:eb:91:24:
e4:ba:60:1c:b4:70:02:a3:cb:2b:8c:0d:26:04:93:92:80:08:
13:67:13:0f:ce:bb:bc:d3:f4:b0:88:9e:ae:6f:71:18:cb:d9:
07:4c:3f:aa:bc:79:8e:9c:ff:80:6d:8e:7a:96:21:d4:30:bc:
8a:23:f0:65:42:05:a1:34:6c:b8:c8:ec:39:e9:dc:8b:e7:c9:
5c:c8:6d:b8:ee:62:52:85:d7:ab:30:ce:ea:86:ed:76:75:2e:
db:cf:05:f4:74:94:c7:5c:af:c0:f6:e2:b3:26:26:fd:6c:53:
3c:58:cf:86:a7:40:c1:35:45:1b:a1:17:2b:0a:d6:43:ed:fd:
14:75:78:f2:cd:f1:b8:2b:c9:3a:9d:2d:03:cf:f0:34:11:97:
f3:8c:f0:2f:ae:e1:78:06:fb:a8:84:c0:7a:c2:2c:c0:7c:ea:
86:11:bc:a8:55:7e:b3:41:6f:03:e7:f6:69:3f:d9:34:d0:80:
db:ac:3c:03
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlVg6OZ/JFHMDN8poYeOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk
MGEwYTkwHhcNMjQwMTAyMDAzMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzNhOTAyZjEwOGU4MWI5OGNiMDU4YzgxN2Q5N2FjOGU2NzlmZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8a47dTK7swqzVdIYY7CbujfkLHJ
cB0kFQpJo7LzHbRd5B4ATYRpMXuOcQTTqO1v8Z4bSgt4PUO1Xm8kG1nhl4C33ife
6xpb3SUMFqF3UvdOIob5WiviGp3hgBfXH0UJfI7HALbMyo9Y0tM8inxn4fAxFHYd
KR/VkRBqBR6WgchywuITzCjI73uE9zS8JuTROhzljNfoj6bPDXqx4LcQJmc72+Zc
agV/ZxoQ5eilnth7v4mLvQ8sXLtjDBM1p05Jtin0AJihHZIPoN5HE++Iv1kQ1qG2
jPL+eMUp37/HujdlH+ejr3KWsQR+VQeAb5OtqSrICg+ZS5C+C4QSovWjvQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJc6kC8QjoG5jLBYyBfZesjmef5TMB8GA1UdIwQY
MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt
ZTYzZTk0Y2JhMDlmLzEvbHpxUUx4Q09nYm1Nc0ZqSUY5bDZ5T1o1X2xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm
LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgT/AAMw
DQYJKoZIhvcNAQELBQADggEBAE45AE4s1RongoDNJw0q9IoVkT2/m2QQfMEeiujw
BVG05TrOv46z/L2TDVZfQpq6LPs+4jXbzAaMdTG+oIkJ+gOEKZ83/OuRJOS6YBy0
cAKjyyuMDSYEk5KACBNnEw/Ou7zT9LCInq5vcRjL2QdMP6q8eY6c/4BtjnqWIdQw
vIoj8GVCBaE0bLjI7Dnp3IvnyVzIbbjuYlKF16swzuqG7XZ1LtvPBfR0lMdcr8D2
4rMmJv1sUzxYz4anQME1RRuhFysK1kPt/RR1ePLN8bgryTqdLQPP8DQRl/OM8C+u
4XgG+6iEwHrCLMB86oYRvKhVfrNBbwPn9mk/2TTQgNusPAM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:42:18 2024 by rpki-client on console-ams.rpki-client.org