Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LbixXXbyotZpK80enpv4ByjA6DM.roa
File: LbixXXbyotZpK80enpv4ByjA6DM.roa (raw, json)
Hash identifier: o/C49cksEkCHlLps1ViUp2/mMa2wVUjR8YmUnROZN+M=
Subject key identifier: 2D:B8:B1:5D:76:F2:A2:D6:69:2B:CD:1E:9E:9B:F8:07:28:C0:E8:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D426DAAEA69A92E9058E0063062F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LbixXXbyotZpK80enpv4ByjA6DM.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49195
IP address blocks: 2a0e:b107:1c50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d4:26:da:ae:a6:9a:92:e9:05:8e:00:63:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2db8b15d76f2a2d6692bcd1e9e9bf80728c0e833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:c3:9d:1a:4c:39:04:e0:e6:1b:46:dc:b6:
e6:95:ab:0a:ae:72:5e:60:e4:4c:a1:d7:20:14:64:
20:e5:b4:a1:d1:6c:40:8a:e1:ae:41:6f:8e:a3:c7:
b1:f3:cd:a2:fe:d6:54:1b:35:af:2e:47:5b:96:5b:
e2:e8:8c:1e:30:5c:d2:c5:93:78:3d:bc:3e:13:70:
90:58:d8:82:d1:4a:30:02:b3:5d:24:40:37:51:6f:
6c:6b:3f:8e:4e:86:c6:82:93:28:60:f1:3e:46:49:
01:9c:f0:2b:46:0f:cb:b8:59:30:87:07:93:28:26:
20:44:e6:fb:b0:77:a6:26:94:3e:21:a3:b1:88:43:
6f:c5:2b:00:1b:9c:c0:a4:5d:09:d2:5c:cb:52:09:
23:6c:a0:df:2b:9b:64:97:b5:43:c1:5f:6e:19:4b:
2e:ec:de:c1:29:71:cd:e4:cb:39:86:01:09:d7:8f:
2c:c3:78:b0:b0:7f:45:09:21:4d:4f:9d:80:9c:d9:
6b:ff:3e:50:59:a9:2d:54:c6:a1:e1:fb:c6:d2:40:
1d:f4:a5:69:96:2e:06:03:ef:4f:28:7a:32:96:07:
c5:ed:46:21:90:44:37:3b:52:dd:66:a2:5c:57:32:
8d:da:06:63:93:09:20:24:c4:38:04:66:e5:64:d3:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:B1:5D:76:F2:A2:D6:69:2B:CD:1E:9E:9B:F8:07:28:C0:E8:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LbixXXbyotZpK80enpv4ByjA6DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c50::/44
Signature Algorithm: sha256WithRSAEncryption
4a:0f:89:0c:33:f2:b6:e8:96:d0:94:4e:59:3d:8f:99:98:fc:
50:da:78:49:1b:d9:16:b0:4f:d3:be:81:b9:13:b1:56:89:b2:
5f:bf:c2:2a:81:8a:76:53:22:b0:57:a0:b1:2e:ee:28:7b:4f:
c1:d5:be:08:b1:73:ce:64:dc:41:73:54:83:6b:90:01:45:3c:
5f:b0:ad:4d:f5:91:4c:8a:50:cf:63:b8:6a:6f:0b:51:2b:e4:
c2:53:41:77:b1:6b:d0:ca:2e:9c:5f:a3:0a:07:13:85:77:bd:
bc:8a:2d:12:d1:87:94:35:d9:ef:1d:67:70:c4:d2:96:91:08:
a7:23:45:cd:cc:09:45:bd:84:ff:a3:d6:ca:b2:c9:e3:97:bd:
fe:d2:7f:fd:6b:27:71:8f:8d:e9:e3:70:a3:ea:ce:21:dc:4c:
16:33:d2:fd:b6:34:54:7d:8f:e5:87:8a:5e:7b:a3:05:c7:60:
b2:9b:62:46:a4:75:3c:5d:d8:b8:b6:a6:26:12:53:bc:ee:aa:
53:d5:30:83:fa:3a:ea:95:ef:4b:ea:42:b4:1c:8d:f1:16:d2:
e0:ce:1c:01:4a:c4:4b:b8:4a:66:8d:84:36:9c:38:97:80:fd:
1e:7a:0b:f5:e4:c3:d1:cf:d8:0b:83:4a:a2:2b:85:aa:47:34:
ba:53:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:37:38 2025 by rpki-client