Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/LuIC0sdhzML0WEz28STUPHNkLeE.roa
File: LuIC0sdhzML0WEz28STUPHNkLeE.roa (raw, json)
Hash identifier: /v1zYvpPmFmj+LAx/PSmlY6IlbW8zPxz5z7eDg5yqy0=
Subject key identifier: 2E:E2:02:D2:C7:61:CC:C2:F4:58:4C:F6:F1:24:D4:3C:73:64:2D:E1
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0196C55085236F58BD8F2F8B98F24560E94A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/LuIC0sdhzML0WEz28STUPHNkLeE.roa
Signing time: Mon 12 May 2025 16:25:10 +0000
ROA not before: Mon 12 May 2025 16:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205235
IP address blocks: 2a0e:8f02:f059::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:50:85:23:6f:58:bd:8f:2f:8b:98:f2:45:60:e9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: May 12 16:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ee202d2c761ccc2f4584cf6f124d43c73642de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:f6:da:2d:50:e4:7b:38:0c:06:43:11:b2:
07:0e:2a:b6:5d:1f:3e:1e:18:68:9d:cd:c0:59:6e:
c7:97:e7:c5:0f:28:fc:62:81:04:a0:23:ff:06:e8:
f7:1b:a3:f3:2a:1a:86:32:aa:13:f3:0e:1b:06:36:
2c:1d:de:f2:db:8a:7c:e8:63:5c:2e:28:60:96:2c:
55:b9:c9:5f:9c:c2:f0:42:c0:68:86:ea:c8:03:9e:
56:32:79:01:03:f1:56:42:20:1c:84:e4:dd:90:ed:
e0:1e:5e:c7:d8:d9:b0:44:da:af:90:af:16:38:81:
fc:5d:6f:22:be:1e:b6:06:ed:92:f9:47:80:70:29:
c8:a7:db:ad:31:b3:09:1c:cd:22:10:82:47:c8:64:
c1:f3:6d:68:00:66:4f:db:ec:39:a6:c0:b7:ce:a2:
6c:63:97:40:5d:2a:e8:66:02:4f:06:cc:23:d9:9a:
1b:bb:78:1e:3a:9b:40:f6:c3:be:95:d3:47:1e:b8:
99:7b:8c:18:d4:8d:5d:f0:a0:63:1d:c8:00:99:09:
6c:79:dd:81:eb:42:b6:fe:d7:4d:1d:ea:e5:6b:02:
09:56:85:24:11:2d:4a:73:26:14:54:55:f8:4a:21:
81:d0:66:57:1c:a0:e5:2f:0b:c2:b9:b6:b2:70:87:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:02:D2:C7:61:CC:C2:F4:58:4C:F6:F1:24:D4:3C:73:64:2D:E1
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/LuIC0sdhzML0WEz28STUPHNkLeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f059::/48
Signature Algorithm: sha256WithRSAEncryption
17:9f:89:46:5c:8b:e3:80:ae:67:39:5f:2e:73:59:70:54:f2:
1c:87:95:1f:cb:94:d1:09:30:7e:77:30:91:f5:f7:fd:f2:d4:
d0:26:df:35:ad:34:c4:42:a8:f6:03:c3:77:c7:ef:53:c3:41:
db:cc:ac:6c:fa:f3:2a:57:74:ea:33:a7:37:bf:3c:c2:69:4f:
52:2f:bc:29:2d:b5:61:34:0e:e8:06:7b:81:f3:13:a7:75:bd:
c9:1d:ab:44:44:59:64:54:0f:b0:b9:c8:e1:73:0f:60:53:15:
dd:91:c2:82:87:16:b7:01:ca:07:66:03:5e:96:46:2f:6c:3d:
f4:b1:37:5e:42:90:e2:39:35:20:a3:5d:5b:f3:8c:dd:9b:0d:
7a:c1:79:b7:ac:a1:18:1f:b9:21:37:80:7f:9a:f8:5a:e0:e4:
9c:60:ab:44:16:63:27:f6:ca:91:0b:76:6b:e6:12:d9:21:3a:
49:50:23:8a:9c:22:2f:28:05:82:2c:61:41:b9:5c:b4:92:89:
be:d0:ee:eb:b6:5d:e5:7b:ec:86:a0:61:b3:88:1b:db:2a:db:
62:bb:c6:60:b0:15:a7:d9:2b:18:e7:7d:4c:01:60:a7:4d:e2:
39:d4:cf:d4:45:30:b7:8f:8f:8b:bd:45:2d:54:3b:d2:dd:7a:
be:e1:57:4d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZbFUIUjb1i9jy+LmPJFYOlKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwNTEyMTYyNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWUyMDJkMmM3NjFjY2MyZjQ1ODRjZjZmMTI0ZDQzYzczNjQyZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX322i1Q5Hs4DAZDEbIHDiq2XR8+
Hhhonc3AWW7Hl+fFDyj8YoEEoCP/Buj3G6PzKhqGMqoT8w4bBjYsHd7y24p86GNc
LihglixVuclfnMLwQsBohurIA55WMnkBA/FWQiAchOTdkO3gHl7H2NmwRNqvkK8W
OIH8XW8ivh62Bu2S+UeAcCnIp9utMbMJHM0iEIJHyGTB821oAGZP2+w5psC3zqJs
Y5dAXSroZgJPBswj2Zobu3geOptA9sO+ldNHHriZe4wY1I1d8KBjHcgAmQlsed2B
60K2/tdNHerlawIJVoUkES1KcyYUVFX4SiGB0GZXHKDlLwvCubaycIfUJwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC7iAtLHYczC9FhM9vEk1DxzZC3hMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvTHVJQzBzZGh6TUwwV0V6MjhTVFVQSE5rTGVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAXn4lGXIvjgK5nOV8uc1lwVPIch5Ufy5TRCTB+
dzCR9ff98tTQJt81rTTEQqj2A8N3x+9Tw0HbzKxs+vMqV3TqM6c3vzzCaU9SL7wp
LbVhNA7oBnuB8xOndb3JHatERFlkVA+wucjhcw9gUxXdkcKChxa3AcoHZgNelkYv
bD30sTdeQpDiOTUgo11b84zdmw16wXm3rKEYH7khN4B/mvha4OScYKtEFmMn9sqR
C3Zr5hLZITpJUCOKnCIvKAWCLGFBuVy0kom+0O7rtl3le+yGoGGziBvbKttiu8Zg
sBWn2SsY531MAWCnTeI51M/URTC3j4+LvUUtVDvS3Xq+4VdN
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:03 2025 by rpki-client