Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/LfLqxUaT3QrnBmzzsTl49po0YNQ.roa
File: LfLqxUaT3QrnBmzzsTl49po0YNQ.roa (raw, json)
Hash identifier: L0cl7tw/Ws1r/mR8qiaEzUND2tiL5WY6XNQQ0gamYcs=
Subject key identifier: 2D:F2:EA:C5:46:93:DD:0A:E7:06:6C:F3:B1:39:78:F6:9A:34:60:D4
Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial: 01941F8C5850859166AA7B66018F31D1DB97
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/LfLqxUaT3QrnBmzzsTl49po0YNQ.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35280
IP address blocks: 159.60.32.0/19 maxlen: 24
159.60.64.0/19 maxlen: 24
159.60.96.0/19 maxlen: 24
159.60.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:50:85:91:66:aa:7b:66:01:8f:31:d1:db:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2df2eac54693dd0ae7066cf3b13978f69a3460d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:75:24:1f:e2:15:9a:75:96:08:dc:a7:9b:
8e:92:63:78:80:6d:bb:bd:fd:a5:eb:5d:74:9c:53:
bf:8f:fa:b1:84:76:80:ec:0e:8c:a5:c2:52:6e:99:
7d:36:10:e2:63:22:2b:58:66:f7:64:18:29:74:dc:
6b:9e:18:44:ce:1f:62:00:58:3b:9e:53:cc:70:91:
97:5a:08:37:9e:e7:c4:a6:0f:f8:bb:0c:01:ac:d5:
7d:6f:08:e8:cf:4e:3f:24:8c:d8:36:4d:c1:b9:5c:
9e:9c:4d:ae:63:18:f5:d5:73:4a:2a:e5:5a:6c:5f:
9f:d8:52:9b:73:3f:6f:66:00:17:61:10:f3:c7:be:
64:6e:60:b9:ec:af:bf:1f:0a:1d:b0:53:45:a5:31:
4b:d5:ef:66:25:e3:98:6a:8f:35:86:85:5d:a1:1b:
93:fd:df:ed:e4:c6:fd:8a:c2:63:40:ae:37:f7:69:
b7:dd:22:fc:97:06:fc:f2:b0:4a:81:bb:13:1e:04:
dc:f9:bf:a9:3a:7c:fa:eb:5b:ad:ee:dd:08:56:85:
98:40:9b:55:88:7e:a3:2e:54:6b:ef:86:55:5e:2e:
30:2f:d9:20:78:49:af:63:ce:18:f5:a4:ca:39:e8:
76:a7:41:00:96:d9:1f:6d:fd:26:a7:98:91:c5:c2:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F2:EA:C5:46:93:DD:0A:E7:06:6C:F3:B1:39:78:F6:9A:34:60:D4
X509v3 Authority Key Identifier:
keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/LfLqxUaT3QrnBmzzsTl49po0YNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.60.32.0-159.60.191.255
Signature Algorithm: sha256WithRSAEncryption
78:bb:45:a1:4c:e3:e1:e1:7f:d3:1f:7c:c4:8b:f7:81:12:5d:
32:b4:d6:99:2a:1b:b3:64:13:9a:e1:c4:d4:22:2a:9e:b5:55:
b0:b6:67:d7:bc:57:3f:e6:2d:aa:42:3c:7a:8d:4e:3c:d6:5e:
9e:0d:81:67:ae:d5:ce:d0:54:ca:61:e5:02:10:7e:00:bc:ea:
00:16:5a:28:a0:57:98:93:32:8b:64:2a:95:70:aa:00:c5:f2:
48:0a:29:39:b2:b6:b8:03:ed:85:ab:da:f6:11:63:12:00:7c:
36:9c:a1:e0:75:d7:23:6f:1c:2c:25:2c:e9:37:8c:ca:fd:87:
39:62:61:40:27:05:58:f7:8e:4d:a6:eb:7d:f2:15:40:ac:3f:
b7:ef:a4:15:b2:aa:49:9f:21:0e:7e:72:b2:71:af:4f:86:6f:
72:eb:f5:3e:1b:5e:5d:65:c9:5f:4d:81:d3:cc:47:65:60:79:
04:13:d8:7f:1c:ca:7b:8a:fd:a3:ae:13:00:54:df:08:45:af:
ff:4e:bc:60:26:c7:68:35:59:bc:7c:95:ab:ee:04:ca:80:08:
85:a2:fd:df:6a:51:46:1e:da:ca:f4:cb:f6:50:d6:71:ff:7e:
5f:c6:5a:f8:b0:12:b0:ce:7b:60:bd:c8:75:20:f4:ca:9d:93:
ce:85:56:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:45:24 2025 by rpki-client