Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_LGC1QM7cHLoY7DaStVJrWs3FSQ.roa
File: _LGC1QM7cHLoY7DaStVJrWs3FSQ.roa (raw, json)
Hash identifier: WayafHPKu/gPCreUKMLT6uq2+L4/EvXK5gRQjWcpXL8=
Subject key identifier: FC:B1:82:D5:03:3B:70:72:E8:63:B0:DA:4A:D5:49:AD:6B:37:15:24
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ECBDB95C5D8AD2531AD418AC415FC
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_LGC1QM7cHLoY7DaStVJrWs3FSQ.roa
Signing time: Thu 02 Jan 2025 05:48:22 +0000
ROA not before: Thu 02 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140972
IP address blocks: 2a0e:aa07:e015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cb:db:95:c5:d8:ad:25:31:ad:41:8a:c4:15:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcb182d5033b7072e863b0da4ad549ad6b371524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:9c:63:a5:f3:04:c8:78:0c:2f:5c:22:68:
60:10:57:6b:87:c6:f4:1e:34:ec:a7:27:e0:d6:18:
71:93:96:c6:28:2b:07:00:5c:d0:71:1f:6a:c2:d5:
64:9b:ed:16:4f:27:17:8d:32:8b:10:e4:81:27:43:
98:84:cf:11:85:ce:55:6b:b3:73:3b:9d:8a:32:c4:
7c:6b:dd:3b:b2:eb:51:da:3c:eb:77:e4:c8:8f:2d:
cb:92:81:9a:7e:35:e3:fc:95:f2:d6:de:e4:1a:31:
d6:1b:e5:f9:1d:8b:80:00:fe:0f:10:0e:36:53:3e:
91:a5:2e:74:32:0e:e6:13:b0:44:b6:23:f2:12:77:
39:26:c6:3c:ae:37:07:dd:83:ad:4c:78:15:e3:37:
d6:23:05:86:2e:61:b9:b3:16:44:ee:7f:e6:0d:9a:
46:26:c0:c6:cf:43:f2:e4:f4:a5:65:04:06:55:d1:
3a:6d:19:c5:f2:d4:16:34:ad:f2:1b:0e:09:64:d5:
70:bd:bc:f2:44:ad:ca:75:3f:2d:49:be:ac:54:fe:
1c:a5:c6:6f:39:b1:c0:48:5e:dc:56:17:94:3c:b5:
d8:de:ba:6d:b3:a5:bd:4e:05:51:ab:2f:48:e3:08:
a6:47:75:49:a9:98:c9:d9:ca:b3:2a:78:38:a8:52:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B1:82:D5:03:3B:70:72:E8:63:B0:DA:4A:D5:49:AD:6B:37:15:24
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_LGC1QM7cHLoY7DaStVJrWs3FSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e015::/48
Signature Algorithm: sha256WithRSAEncryption
4a:c5:9a:a9:95:f1:45:e8:9d:42:19:d9:7b:83:32:c7:05:7d:
d1:1a:60:27:69:19:d8:5f:14:4d:8f:58:6a:b6:64:5f:23:b5:
29:0c:83:f6:ca:f0:e1:6d:f2:28:fd:b2:fe:57:fb:f1:31:9b:
53:53:90:de:7d:b4:0a:73:7f:0b:67:10:3c:3d:76:2d:9d:61:
40:20:a0:d2:51:02:bc:93:80:2f:57:5c:1a:88:a4:57:f0:3d:
8b:17:93:e9:9a:67:ef:ab:53:5e:89:b8:33:83:62:a5:67:ae:
df:ac:28:13:2f:fb:77:e9:8d:3b:a1:16:90:90:6b:33:e9:01:
fd:75:1d:0d:1e:41:59:3c:88:ca:04:81:9d:9a:7d:3c:f4:9f:
c1:48:90:1f:09:66:a9:2f:2f:17:d9:4b:2f:da:2e:0f:78:7b:
37:66:3d:51:0f:f1:45:4c:9c:72:de:76:7b:c9:6e:f3:7c:09:
e0:91:4e:ac:55:52:8a:e0:49:3f:19:c0:53:0f:09:db:1d:9b:
43:41:85:c3:70:91:8c:05:96:39:91:fc:c4:bc:22:43:ce:9f:
d2:e7:26:66:6d:d8:c2:c6:a5:d3:bc:59:67:a9:ab:53:22:51:
8a:47:34:a9:d1:c1:91:5e:1e:7e:73:72:cc:c0:2a:ab:31:08:
9b:7a:e0:a0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljsvblcXYrSUxrUGKxBX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2IxODJkNTAzM2I3MDcyZTg2M2IwZGE0YWQ1NDlhZDZiMzcxNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ+cY6XzBMh4DC9cImhgEFdrh8b0
HjTspyfg1hhxk5bGKCsHAFzQcR9qwtVkm+0WTycXjTKLEOSBJ0OYhM8Rhc5Va7Nz
O52KMsR8a907sutR2jzrd+TIjy3LkoGafjXj/JXy1t7kGjHWG+X5HYuAAP4PEA42
Uz6RpS50Mg7mE7BEtiPyEnc5JsY8rjcH3YOtTHgV4zfWIwWGLmG5sxZE7n/mDZpG
JsDGz0Py5PSlZQQGVdE6bRnF8tQWNK3yGw4JZNVwvbzyRK3KdT8tSb6sVP4cpcZv
ObHASF7cVheUPLXY3rpts6W9TgVRqy9I4wimR3VJqZjJ2cqzKng4qFKK8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPyxgtUDO3By6GOw2krVSa1rNxUkMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvX0xHQzFRTTdjSExvWTdEYVN0VkpyV3MzRlNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+AV
MA0GCSqGSIb3DQEBCwUAA4IBAQBKxZqplfFF6J1CGdl7gzLHBX3RGmAnaRnYXxRN
j1hqtmRfI7UpDIP2yvDhbfIo/bL+V/vxMZtTU5DefbQKc38LZxA8PXYtnWFAIKDS
UQK8k4AvV1waiKRX8D2LF5Ppmmfvq1Neibgzg2KlZ67frCgTL/t36Y07oRaQkGsz
6QH9dR0NHkFZPIjKBIGdmn089J/BSJAfCWapLy8X2Usv2i4PeHs3Zj1RD/FFTJxy
3nZ7yW7zfAngkU6sVVKK4Ek/GcBTDwnbHZtDQYXDcJGMBZY5kfzEvCJDzp/S5yZm
bdjCxqXTvFlnqatTIlGKRzSp0cGRXh5+c3LMwCqrMQibeuCg
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:06:02 2025 by rpki-client