Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lakNGIHUgcn6UKwdVo4OxV9sHyU.roa
File: lakNGIHUgcn6UKwdVo4OxV9sHyU.roa (raw, json)
Hash identifier: aFoG4y5uaHj/rfiT0o09JJpVEi7UfU1x/oN+QiewPRY=
Subject key identifier: 95:A9:0D:18:81:D4:81:C9:FA:50:AC:1D:56:8E:0E:C5:5F:6C:1F:25
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019425219A741E88E54960C10FC425E53D87
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lakNGIHUgcn6UKwdVo4OxV9sHyU.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62246
IP address blocks: 2a13:a5c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9a:74:1e:88:e5:49:60:c1:0f:c4:25:e5:3d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95a90d1881d481c9fa50ac1d568e0ec55f6c1f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:13:8a:f0:b6:c0:4b:c0:98:f5:0a:82:63:
a3:2b:3c:3b:73:f8:2a:36:b7:50:66:6a:9b:e9:87:
bc:10:11:af:ba:62:50:19:e1:bb:9c:2c:a9:01:5d:
fb:df:ef:7b:1d:78:b4:ba:26:e4:d3:bf:df:28:9d:
39:b9:65:06:ee:50:48:d0:9b:c8:1d:9d:1f:80:6c:
ed:61:61:06:77:d9:ca:cb:9e:56:3d:a4:c1:7e:ae:
a5:5d:6d:2a:87:93:68:e8:40:c0:f1:fa:29:20:fd:
fd:1b:8d:67:2a:ad:a5:ab:6e:1f:ae:2d:da:a6:b2:
22:b2:ad:32:ee:34:ff:92:15:df:1c:56:81:6e:d4:
85:fa:6c:ba:96:e4:20:5c:6d:ca:09:5e:38:8a:1d:
39:ed:5b:e7:1a:22:a4:bc:8d:ed:c9:4c:0e:a0:01:
16:1c:05:8f:1d:fa:d8:d7:1a:cd:4a:7a:8e:43:32:
03:29:00:19:3c:f8:5e:0b:c2:aa:5c:df:e7:7f:37:
22:c7:74:51:2b:18:ad:83:0f:7a:19:c4:42:ad:6c:
d2:f6:94:38:db:a5:53:d9:ed:01:b3:d4:38:fc:3a:
ab:33:4f:53:ee:56:16:b2:b0:8c:9e:43:c9:e2:10:
3b:97:2e:94:76:4f:ad:7e:4e:e8:26:2d:de:52:78:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:0D:18:81:D4:81:C9:FA:50:AC:1D:56:8E:0E:C5:5F:6C:1F:25
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lakNGIHUgcn6UKwdVo4OxV9sHyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c0::/32
Signature Algorithm: sha256WithRSAEncryption
20:56:62:c8:a1:0c:02:6d:6c:4e:d8:35:a1:68:a8:23:91:33:
25:72:61:7e:e6:10:6a:a7:06:58:af:21:56:6f:31:a3:24:25:
43:9e:74:d9:8c:a2:32:d5:34:db:4c:ff:b2:d8:db:cf:12:b2:
22:93:9e:ec:dc:12:aa:34:04:c0:04:d9:1a:c1:79:76:4b:20:
c6:c0:80:73:d8:47:89:5d:84:15:2c:ec:9e:64:a7:b9:bd:b3:
a2:6c:40:5d:17:cc:b8:7d:48:3a:2c:6d:48:1d:0c:06:ae:e9:
fc:1a:ee:ec:4b:5f:7c:06:d9:40:b1:da:80:52:33:19:2f:27:
35:ef:ca:40:50:1d:0e:5a:75:9d:da:74:fa:70:45:70:c4:e7:
fe:a6:b4:9d:1a:55:ab:41:65:b6:5a:56:fa:ef:e1:b9:64:05:
35:03:66:85:fb:da:54:d0:b0:0d:2f:f9:67:e6:2c:77:86:7b:
17:1b:39:ad:49:e8:a5:01:02:99:3a:70:90:be:61:69:bf:ad:
f1:0a:b8:88:d4:ce:b0:4d:c3:e0:9b:22:50:c1:f7:0d:6d:d3:
e7:cf:49:72:f5:bd:b5:bb:a2:34:f5:21:7b:17:82:c7:b3:13:
7b:d3:f6:35:75:b0:37:58:a8:10:0b:53:1e:f1:08:55:91:02:
52:6f:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:23 2025 by rpki-client