Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lGX3Drj82-i-bicYoCcSUmxmY4o.roa
File: lGX3Drj82-i-bicYoCcSUmxmY4o.roa (raw, json)
Hash identifier: iezkXaQTdgyuzY5IRz3xOLL4zDLHAOui8BtxZ1oVGFE=
Subject key identifier: 94:65:F7:0E:B8:FC:DB:E8:BE:6E:27:18:A0:27:12:52:6C:66:63:8A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522558E044258A0D8839B6793BB3F56
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lGX3Drj82-i-bicYoCcSUmxmY4o.roa
Signing time: Thu 02 Jan 2025 03:49:54 +0000
ROA not before: Thu 02 Jan 2025 03:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211688
IP address blocks: 2a0e:97c0:240::/44 maxlen: 48
2a0e:97c1:110::/44 maxlen: 48
2a10:ccc0:120::/44 maxlen: 48
2a10:ccc0:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:55:8e:04:42:58:a0:d8:83:9b:67:93:bb:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9465f70eb8fcdbe8be6e2718a02712526c66638a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:4e:1e:50:44:63:b3:7b:23:75:e5:f3:1e:
42:8b:a1:0c:b0:83:e9:75:f4:02:91:af:95:36:92:
cd:f6:f7:25:f3:b8:18:fd:bf:ae:88:32:d2:96:38:
1d:70:29:14:40:64:f8:ad:e6:2d:ab:67:ab:af:c4:
08:5b:53:fd:39:e3:6b:88:72:e1:1b:d8:c9:09:9c:
66:58:99:fa:8f:79:f4:38:87:f5:0b:cb:62:6f:c6:
00:bb:60:8d:cc:13:e0:11:c6:9d:79:e6:6e:d0:fd:
19:8b:4e:e3:70:1b:47:27:86:b3:a1:33:eb:21:fc:
ea:67:7a:53:fd:97:5e:a5:ce:e7:a0:f3:60:b5:a3:
66:6c:37:86:ef:d9:ed:2d:8a:0e:d4:ef:5c:e0:8d:
72:50:95:ea:d6:f2:05:a5:ce:58:95:f1:f1:25:b4:
97:51:e8:83:f5:f0:40:15:ab:be:a3:ef:26:86:6d:
a7:7a:6e:64:0f:26:be:e1:54:eb:f2:f9:a2:e2:eb:
27:1d:44:fa:c5:da:dd:df:3e:e6:8d:84:1d:95:f9:
7c:9c:67:15:7d:08:2b:d6:ec:99:67:f3:69:9e:2e:
f7:fa:6c:29:03:e2:07:c4:d5:22:36:5a:ac:e3:a7:
a1:af:40:54:74:55:cf:cf:8a:0a:e7:c8:b5:f0:12:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:F7:0E:B8:FC:DB:E8:BE:6E:27:18:A0:27:12:52:6C:66:63:8A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lGX3Drj82-i-bicYoCcSUmxmY4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:240::/44
2a0e:97c1:110::/44
2a10:ccc0:120::/43
Signature Algorithm: sha256WithRSAEncryption
68:31:34:b0:20:13:4d:6c:57:17:bb:f1:c9:10:44:80:0c:2b:
ea:c4:64:9c:a7:d8:d8:5c:04:cf:21:33:b4:92:a7:e1:78:60:
ab:b8:84:e5:ac:61:bc:74:a9:fc:92:ad:90:f9:7c:27:c8:64:
ea:07:68:60:32:c2:da:92:e2:4d:67:b2:57:33:9e:16:33:91:
cf:26:a8:9c:14:ad:e7:b3:7d:34:f0:45:7c:04:59:cf:c3:78:
00:e9:2c:f5:6d:d4:38:3c:c8:ab:af:e5:fe:8a:42:76:c3:93:
7e:bc:76:3b:1a:79:e8:96:33:0d:6c:5b:59:5d:7b:95:e4:7c:
88:17:88:98:52:bc:25:76:61:d2:5f:7a:a4:34:2e:c2:04:f4:
46:ae:6b:59:9b:49:47:25:c9:5a:11:58:a3:e2:1a:26:33:42:
ec:7b:35:94:a2:38:09:4c:fd:7b:f1:92:b3:b2:05:b4:24:77:
91:02:af:01:cd:3f:44:7e:f2:f6:b3:75:fc:ef:ca:e6:f8:fc:
81:a7:f3:45:16:01:e4:cc:49:23:79:e1:ef:7c:fd:83:fa:1e:
76:f8:4b:8f:dd:85:e4:11:8e:81:3a:3a:60:a3:06:c1:cd:00:
6a:6c:40:f6:52:d8:3c:09:12:0e:2a:39:c6:f0:5d:47:5a:66:
27:88:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:25 2025 by rpki-client