Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/lhffJwZbVCS9uhY0p10SH3Oz6Y8.roa
File: lhffJwZbVCS9uhY0p10SH3Oz6Y8.roa (raw, json)
Hash identifier: iIoIfAWmeGMjoRI/egAoCgDlOBJ3pj4fCxJGNN8st/0=
Subject key identifier: 96:17:DF:27:06:5B:54:24:BD:BA:16:34:A7:5D:12:1F:73:B3:E9:8F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195683C9EBD20C715FC4CFEC87E75D290AF
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/lhffJwZbVCS9uhY0p10SH3Oz6Y8.roa
Signing time: Wed 05 Mar 2025 21:35:58 +0000
ROA not before: Wed 05 Mar 2025 21:35:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205964
IP address blocks: 2a0e:d300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:3c:9e:bd:20:c7:15:fc:4c:fe:c8:7e:75:d2:90:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 5 21:35:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9617df27065b5424bdba1634a75d121f73b3e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:bb:ee:28:0e:bf:bf:9e:b9:a0:8f:a2:72:
f0:80:00:06:35:5c:20:7d:5f:1e:cf:63:12:ca:e0:
4f:c0:04:de:47:98:47:21:09:0a:e9:b9:20:33:a7:
9d:b3:de:e5:7d:a1:fb:5c:d0:aa:85:31:7f:51:0d:
ff:e4:cf:39:de:9e:ca:6b:97:aa:e9:fc:69:38:5e:
1d:28:7d:f3:c7:ff:6f:1e:cd:25:dd:0f:e5:ed:cf:
8a:0e:2b:88:46:3f:46:4e:4e:2a:4b:b3:5f:5c:e0:
49:2a:eb:f5:84:02:2d:f5:22:c4:2c:ad:38:eb:e7:
d1:9b:f9:1b:85:d5:55:f0:5d:f0:4b:d8:62:4d:2c:
ad:5c:a5:c4:98:03:82:97:bb:f0:6f:85:7c:8a:8b:
47:21:2c:24:4b:c1:2d:10:50:b4:8d:8b:00:77:e4:
34:0c:94:47:2d:85:7b:ec:c7:a0:1d:65:5b:fa:73:
f7:93:71:c6:e6:84:ed:66:c2:17:32:1f:b4:36:81:
8d:e3:5c:a0:9c:4c:a4:82:cc:ba:63:6d:f0:38:1a:
aa:3f:60:c3:33:71:d1:95:98:a8:1b:c1:65:cb:fb:
80:5c:5d:7c:aa:6d:7e:ce:26:53:b0:2b:df:48:7e:
a5:ce:d1:4e:0c:0f:5f:ee:8c:f5:d0:3c:1c:9d:b2:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:17:DF:27:06:5B:54:24:BD:BA:16:34:A7:5D:12:1F:73:B3:E9:8F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/lhffJwZbVCS9uhY0p10SH3Oz6Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d300::/29
Signature Algorithm: sha256WithRSAEncryption
34:94:5b:91:fe:f8:77:3b:97:69:22:2c:48:71:69:97:a5:c7:
73:40:8d:99:59:82:80:19:ef:74:37:6c:03:fc:98:72:9e:b9:
c5:cf:ac:9e:35:e0:8f:d7:62:8a:b4:31:18:91:7b:65:7d:f3:
9b:1c:86:3c:c1:05:e5:d0:fb:c1:7c:9c:11:ba:fa:e3:03:bb:
62:3e:8a:e0:b3:0e:07:9c:49:bb:b1:41:67:7f:3a:5b:5c:44:
3f:6d:86:f3:d7:36:49:73:b3:ce:66:6e:27:e5:c9:37:df:9a:
83:40:3b:90:04:6f:c8:62:1f:68:e5:3a:f8:33:7c:9e:3d:b6:
53:32:8e:f3:3d:5c:0f:7d:e4:a5:28:3d:ea:41:e0:d6:04:d2:
0a:07:3f:a7:20:73:56:dd:51:99:77:4d:25:84:07:90:55:96:
c6:ba:35:79:c8:2e:00:48:14:93:9e:43:ec:bd:11:32:50:e2:
a8:5e:d6:af:fa:43:09:59:38:da:7a:78:be:ed:7f:b2:45:ba:
4d:30:06:c5:22:33:3a:45:6b:66:ec:49:1b:f4:ab:bf:6f:23:
c6:6f:60:84:4d:10:89:64:75:13:5e:66:96:cc:6e:da:e8:73:
7b:33:ef:1a:33:d1:1d:f7:02:38:0e:07:eb:1c:8d:e4:47:7c:
0d:d0:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:07 2025 by rpki-client