Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa
File: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (raw, json)
Hash identifier: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=
Subject key identifier: 95:BC:D9:E5:77:7E:07:1C:7B:E3:E1:DD:16:E8:00:B4:B5:9F:A9:3D
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019422FB97FF922A83278547C28E8C776CAC
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198627
IP address blocks: 2001:67c:ca0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:97:ff:92:2a:83:27:85:47:c2:8e:8c:77:6c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95bcd9e5777e071c7be3e1dd16e800b4b59fa93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:a2:ff:cf:d5:1d:a5:50:bb:22:7a:02:85:
46:a2:84:a7:32:27:13:ac:6b:af:28:90:2d:ad:b4:
8b:91:c5:06:7c:a8:1a:bf:48:ec:e6:34:ec:90:d3:
49:98:86:85:a4:a0:12:2c:c5:df:13:53:85:45:45:
90:1f:b7:3a:ba:d4:c7:23:6b:da:ef:af:c2:7c:52:
cd:c6:81:00:a1:ec:01:14:b6:97:ee:a2:f9:8d:2d:
8b:31:25:ed:cf:86:da:03:a7:a2:53:a3:43:71:37:
65:d4:8f:4a:ce:ce:01:c7:2c:2e:71:44:69:a2:99:
9f:39:fa:88:61:99:24:e1:3d:e0:cc:a7:76:f3:e1:
0d:e8:71:fb:a9:a9:67:b4:4a:69:65:f0:59:4e:ba:
7e:91:f8:ab:55:6a:f0:73:ac:f7:e2:51:07:97:21:
b0:41:cf:60:cc:ea:0c:84:2f:5f:3c:91:fa:f6:5c:
52:97:a4:69:6f:96:c3:00:9d:84:39:a8:7b:2b:f6:
fd:65:31:3e:17:46:e9:12:98:06:70:d4:32:1a:94:
b0:a0:d6:90:21:a4:96:d3:77:df:1b:f1:eb:a2:b9:
5a:f4:61:a9:d5:a5:51:0e:a6:5e:80:6d:8a:a3:f8:
8b:7a:82:7c:3a:bb:20:61:22:1d:46:df:0f:5e:62:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:D9:E5:77:7E:07:1C:7B:E3:E1:DD:16:E8:00:B4:B5:9F:A9:3D
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ca0::/48
Signature Algorithm: sha256WithRSAEncryption
79:5e:96:0b:82:e3:89:47:16:55:6b:d2:67:5c:da:ad:7f:1e:
a2:af:f2:5c:35:94:a2:5d:58:c2:47:26:5c:62:1f:99:d2:84:
23:ee:77:2d:5b:09:85:b7:da:a7:b9:18:26:62:87:98:7d:3e:
fd:72:d5:5b:0b:ca:c5:9b:e0:96:d4:d6:3a:6b:59:b5:95:be:
02:13:fb:83:10:ce:56:9f:28:42:9c:18:d8:a1:f9:46:80:c1:
b7:93:bd:c5:69:af:5f:6b:96:19:07:11:4a:74:0d:ea:fa:fe:
63:32:de:07:a2:c8:ab:1f:45:4b:26:b8:bc:6f:5d:d8:b8:dc:
7b:22:4d:f6:7c:5d:2f:58:94:9b:e7:3a:19:c7:25:d6:92:ed:
66:be:f1:c7:a9:b7:28:55:f4:ac:f6:f3:a1:ec:55:13:06:a6:
2b:23:98:c8:1d:0f:23:6f:71:97:3b:b7:29:c3:e1:2e:78:3f:
6d:6d:e3:8d:8d:fb:56:68:77:4d:cb:3c:86:65:47:49:8f:8b:
1e:bd:1b:c0:77:7b:05:7b:3b:59:a8:fd:fe:23:4b:e0:30:13:
b2:4f:c0:9e:40:94:fd:bd:71:43:c9:30:9f:07:14:6e:eb:90:
09:b0:12:22:2d:3a:f5:07:a0:73:c4:ab:c4:8f:14:cc:67:8f:
5d:8d:b1:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+5f/kiqDJ4VHwo6Md2ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4
NzJiMDUwHhcNMjUwMTAxMTc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWJjZDllNTc3N2UwNzFjN2JlM2UxZGQxNmU4MDBiNGI1OWZhOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Wi/8/VHaVQuyJ6AoVGooSnMicT
rGuvKJAtrbSLkcUGfKgav0js5jTskNNJmIaFpKASLMXfE1OFRUWQH7c6utTHI2va
76/CfFLNxoEAoewBFLaX7qL5jS2LMSXtz4baA6eiU6NDcTdl1I9Kzs4BxywucURp
opmfOfqIYZkk4T3gzKd28+EN6HH7qalntEppZfBZTrp+kfirVWrwc6z34lEHlyGw
Qc9gzOoMhC9fPJH69lxSl6Rpb5bDAJ2EOah7K/b9ZTE+F0bpEpgGcNQyGpSwoNaQ
IaSW03ffG/Hrorla9GGp1aVRDqZegG2Ko/iLeoJ8OrsgYSIdRt8PXmJYPQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJW82eV3fgcce+Ph3RboALS1n6k9MB8GA1UdIwQY
MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et
YmE0ZmJkOGQ1ZDhlLzEvbGJ6WjVYZC1CeHg3NC1IZEZ1Z0F0TFdmcVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl
LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAyg
MA0GCSqGSIb3DQEBCwUAA4IBAQB5XpYLguOJRxZVa9JnXNqtfx6ir/JcNZSiXVjC
RyZcYh+Z0oQj7nctWwmFt9qnuRgmYoeYfT79ctVbC8rFm+CW1NY6a1m1lb4CE/uD
EM5WnyhCnBjYoflGgMG3k73Faa9fa5YZBxFKdA3q+v5jMt4HosirH0VLJri8b13Y
uNx7Ik32fF0vWJSb5zoZxyXWku1mvvHHqbcoVfSs9vOh7FUTBqYrI5jIHQ8jb3GX
O7cpw+EueD9tbeONjftWaHdNyzyGZUdJj4sevRvAd3sFeztZqP3+I0vgMBOyT8Ce
QJT9vXFDyTCfBxRu65AJsBIiLTr1B6BzxKvEjxTMZ49djbEP
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:30:31 2025 by rpki-client