Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lCGLIQxi3UP-jf7F8-B5wd97Nt8.roa
File: lCGLIQxi3UP-jf7F8-B5wd97Nt8.roa (raw, json)
Hash identifier: /BchSK1YjpdB6/hS6tmy9JIDC7rvoJdI+1Rqd0seOQc=
Subject key identifier: 94:21:8B:21:0C:62:DD:43:FE:8D:FE:C5:F3:E0:79:C1:DF:7B:36:DF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252242194EC9C230E2674369DBE190D5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lCGLIQxi3UP-jf7F8-B5wd97Nt8.roa
Signing time: Thu 02 Jan 2025 03:49:49 +0000
ROA not before: Thu 02 Jan 2025 03:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 2a0e:b107:2780::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:42:19:4e:c9:c2:30:e2:67:43:69:db:e1:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94218b210c62dd43fe8dfec5f3e079c1df7b36df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:e0:2d:46:18:53:c0:7c:e3:15:87:3e:c5:
55:39:c9:24:eb:dc:52:73:60:dd:0e:ed:eb:5b:75:
1d:a6:72:54:de:d7:0e:ff:ea:f0:e0:4d:22:b2:aa:
4e:d4:79:4b:b4:da:a2:37:ad:7f:46:b6:af:1b:ae:
62:38:bd:66:18:19:c9:33:a0:7c:30:73:d8:5e:4f:
2d:54:e6:e6:a8:9d:cf:ff:3b:c2:54:14:5b:2d:f2:
10:df:c8:32:9c:c2:41:8c:de:cf:c8:fc:6a:d4:af:
f7:ef:5b:c6:d9:ef:56:4c:64:7c:6b:30:6b:16:f3:
d3:0f:f8:66:3f:1c:9d:b2:73:34:50:67:ae:db:24:
8f:fe:1d:eb:95:32:42:f0:b7:1e:43:19:ca:6f:5a:
e8:ab:64:c6:b7:01:03:8c:bc:d7:98:ca:d8:c9:d5:
c8:2f:95:74:01:b2:12:47:79:59:1c:25:78:75:a4:
7b:05:3e:82:b3:e4:a2:31:c5:cf:e7:4f:e0:80:f4:
8f:e5:10:94:8e:e1:e6:d0:dd:da:d8:b7:f7:78:61:
c9:81:af:dd:e6:71:93:e3:76:8c:a0:32:f0:8b:c3:
3b:67:05:d5:40:57:73:74:a5:d3:1d:e5:ea:e2:86:
77:05:13:a8:45:bc:93:64:e1:31:3c:e6:19:ec:b1:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:21:8B:21:0C:62:DD:43:FE:8D:FE:C5:F3:E0:79:C1:DF:7B:36:DF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lCGLIQxi3UP-jf7F8-B5wd97Nt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2780::/46
Signature Algorithm: sha256WithRSAEncryption
75:82:c6:33:43:c9:a6:ec:bf:a0:77:ca:12:72:8b:68:b2:e3:
b4:09:67:7a:f0:ba:f4:cc:d6:2b:41:f9:4d:cf:9d:d3:5f:bc:
92:71:a8:46:fb:55:ee:cd:5c:c6:5a:b4:c8:34:dd:16:01:50:
dd:a1:af:6d:bd:4b:ef:44:85:aa:ad:70:df:97:c9:70:42:c5:
7f:1a:58:ef:33:74:46:ee:12:95:99:d3:10:f7:a3:cf:96:b3:
bc:18:2c:f5:25:70:a3:82:cb:77:d6:5b:fb:9e:f9:8f:23:a2:
e1:ef:b1:80:14:99:20:e4:2d:13:55:aa:60:0c:4c:26:14:58:
30:66:20:5e:8b:8f:3f:2e:9e:53:24:9d:2c:89:8b:a4:15:b2:
f4:b5:7b:36:69:b3:81:90:ab:3f:bf:cb:31:78:df:d6:b4:78:
8c:95:77:2b:a3:c0:06:98:4c:1e:09:28:fd:81:64:27:44:d5:
47:33:53:23:c7:2f:3e:34:15:1c:a4:62:db:32:f7:67:29:28:
38:2b:b2:15:7c:5a:9f:64:ae:27:21:ff:9c:5a:6a:cc:8b:ed:
89:40:5f:31:a0:62:c7:bc:2b:6a:47:aa:c1:05:62:d7:8b:57:
ac:75:ce:38:9b:e3:0a:d7:04:7f:d4:e4:9f:d2:63:8e:d3:c5:
60:9c:6d:97
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIkIZTsnCMOJnQ2nb4ZDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDIxOGIyMTBjNjJkZDQzZmU4ZGZlYzVmM2UwNzljMWRmN2IzNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyazgLUYYU8B84xWHPsVVOckk69xS
c2DdDu3rW3UdpnJU3tcO/+rw4E0isqpO1HlLtNqiN61/RravG65iOL1mGBnJM6B8
MHPYXk8tVObmqJ3P/zvCVBRbLfIQ38gynMJBjN7PyPxq1K/371vG2e9WTGR8azBr
FvPTD/hmPxydsnM0UGeu2ySP/h3rlTJC8LceQxnKb1roq2TGtwEDjLzXmMrYydXI
L5V0AbISR3lZHCV4daR7BT6Cs+SiMcXP50/ggPSP5RCUjuHm0N3a2Lf3eGHJga/d
5nGT43aMoDLwi8M7ZwXVQFdzdKXTHeXq4oZ3BROoRbyTZOExPOYZ7LGn3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJQhiyEMYt1D/o3+xfPgecHfezbfMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbENHTElReGkzVVAtamY3RjgtQjV3ZDk3TnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg6xByeA
MA0GCSqGSIb3DQEBCwUAA4IBAQB1gsYzQ8mm7L+gd8oScotosuO0CWd68Lr0zNYr
QflNz53TX7yScahG+1XuzVzGWrTINN0WAVDdoa9tvUvvRIWqrXDfl8lwQsV/Gljv
M3RG7hKVmdMQ96PPlrO8GCz1JXCjgst31lv7nvmPI6Lh77GAFJkg5C0TVapgDEwm
FFgwZiBei48/Lp5TJJ0siYukFbL0tXs2abOBkKs/v8sxeN/WtHiMlXcro8AGmEwe
CSj9gWQnRNVHM1Mjxy8+NBUcpGLbMvdnKSg4K7IVfFqfZK4nIf+cWmrMi+2JQF8x
oGLHvCtqR6rBBWLXi1esdc44m+MK1wR/1OSf0mOO08VgnG2X
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:44 2025 by rpki-client