Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/LBBZUXMrOft_XP60iSESTKt86sM.roa
File: LBBZUXMrOft_XP60iSESTKt86sM.roa (raw, json)
Hash identifier: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=
Subject key identifier: 2C:10:59:51:73:2B:39:FB:7F:5C:FE:B4:89:21:12:4C:AB:7C:EA:C3
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 01942747E10A05DE84960193C5350C606AD8
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/LBBZUXMrOft_XP60iSESTKt86sM.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206731
IP address blocks: 2a04:ff00:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e1:0a:05:de:84:96:01:93:c5:35:0c:60:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c105951732b39fb7f5cfeb48921124cab7ceac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:d5:e6:15:9b:aa:5e:28:95:4c:04:57:a2:
33:80:36:c6:33:8d:b9:d4:95:d5:b9:f3:cd:d5:d0:
11:8c:8f:1e:bc:a4:93:63:16:34:fa:59:5d:83:40:
d9:37:40:6b:9d:e7:b7:df:7c:43:2d:1b:68:04:65:
51:3e:2d:91:9b:7a:eb:4a:68:aa:40:bd:e5:bc:66:
6d:f8:b0:54:44:30:b9:14:69:3b:b9:7e:02:1e:bc:
01:c2:af:de:ac:ef:27:65:b6:4a:ae:b3:fd:2e:f6:
ad:74:98:b0:53:b2:f0:14:9b:3f:e8:a7:90:cc:1d:
d7:85:07:24:ad:e0:4c:53:f2:2e:a1:ab:96:7c:3b:
78:8b:f6:74:d7:39:f2:f7:fd:fc:7c:4c:31:e4:14:
14:e0:9b:c2:bb:66:25:54:d1:a1:d6:8b:65:63:ae:
0a:ee:da:af:e0:88:a8:b4:a9:09:bd:7a:a2:dd:5f:
a6:00:c3:95:21:e0:b9:54:99:ae:d5:cb:7b:69:ae:
b2:75:de:4d:66:1d:a9:d9:89:94:ad:90:61:f1:49:
58:6f:53:04:4f:fd:56:64:57:a7:e0:75:b2:b1:d9:
81:de:68:15:4b:c2:2b:27:7f:42:36:79:47:ea:28:
2e:3d:e2:6c:74:f7:53:1c:62:df:79:ce:de:af:da:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:59:51:73:2B:39:FB:7F:5C:FE:B4:89:21:12:4C:AB:7C:EA:C3
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/LBBZUXMrOft_XP60iSESTKt86sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:300::/40
Signature Algorithm: sha256WithRSAEncryption
84:ed:66:eb:15:cc:31:2d:6c:3c:39:3b:6c:fa:18:23:bd:4b:
1d:26:fd:84:a3:1d:f5:cd:20:53:79:32:53:d5:1d:50:6f:44:
2f:49:32:12:f3:d1:dd:1a:26:52:9a:15:ff:10:5d:a2:e2:de:
33:55:1d:b6:8a:52:c7:20:6a:b5:39:9a:40:c3:21:84:d5:8e:
05:00:e0:5e:60:41:e9:3b:01:36:8d:99:e3:51:fa:39:f6:73:
94:40:4c:77:38:e1:c5:9d:10:9d:9f:ee:8c:f7:fe:de:ec:35:
6c:77:28:77:88:ec:13:0f:06:36:76:7d:fb:a6:37:8b:b6:f9:
6c:b4:cf:57:d1:62:ce:c1:11:75:cc:9e:32:18:93:0e:1d:98:
38:86:59:38:dc:49:63:0a:84:01:8e:4a:00:34:5d:13:07:9d:
fe:d5:2e:ed:75:1a:2f:9a:3f:b9:a5:a7:e3:b4:6c:fa:84:de:
13:5a:c2:04:ce:9f:ff:0a:e6:6a:13:84:b4:01:7b:a3:68:7a:
94:8b:fb:d3:05:bf:82:33:05:0d:5f:05:1b:90:6f:d0:cc:eb:
4b:bc:b4:c9:39:69:3b:a6:83:1f:3d:d8:05:2c:bf:a7:15:20:
db:62:f1:ba:e4:03:1b:8b:a0:19:4b:b6:ab:15:f7:0a:7b:4a:
ea:96:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:44 2025 by rpki-client