Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lam263IzZBkw5ESWEqoxsUhVynI.roa
File: lam263IzZBkw5ESWEqoxsUhVynI.roa (raw, json)
Hash identifier: fUJRA2N7Nc+U4SPHM/iqnayJoy4xvN8rjCUfaWgVkmU=
Subject key identifier: 95:A9:B6:EB:72:33:64:19:30:E4:44:96:12:AA:31:B1:48:55:CA:72
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223F32194C29113EC40FC015494AF9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lam263IzZBkw5ESWEqoxsUhVynI.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210426
IP address blocks: 2a0e:97c0:5e0::/44 maxlen: 48
2a0e:97c0:5e0::/48 maxlen: 48
2a0e:97c0:5e1::/48 maxlen: 48
2a0e:97c0:5e2::/48 maxlen: 48
2a0e:97c0:5e3::/48 maxlen: 48
2a0e:97c0:5e4::/48 maxlen: 48
2a0e:97c0:5e5::/48 maxlen: 48
2a0e:97c0:5e6::/48 maxlen: 48
2a0e:97c0:5e7::/48 maxlen: 48
2a0e:97c0:5e8::/48 maxlen: 48
2a0e:97c0:5e9::/48 maxlen: 48
2a0e:97c0:5ea::/48 maxlen: 48
2a0e:97c0:5eb::/48 maxlen: 48
2a0e:97c0:5ec::/48 maxlen: 48
2a0e:97c0:5ed::/48 maxlen: 48
2a0e:97c0:5ee::/48 maxlen: 48
2a0e:97c0:5ef::/48 maxlen: 48
2a0e:b107:17e0::/44 maxlen: 48
2a0e:b107:17e0::/48 maxlen: 48
2a0e:b107:17e1::/48 maxlen: 48
2a0e:b107:17e2::/48 maxlen: 48
2a0e:b107:17e3::/48 maxlen: 48
2a0e:b107:17e4::/48 maxlen: 48
2a0e:b107:17e5::/48 maxlen: 48
2a0e:b107:17e6::/48 maxlen: 48
2a0e:b107:17e7::/48 maxlen: 48
2a0e:b107:17e8::/48 maxlen: 48
2a0e:b107:17e9::/48 maxlen: 48
2a0e:b107:17ea::/48 maxlen: 48
2a0e:b107:17eb::/48 maxlen: 48
2a0e:b107:17ec::/48 maxlen: 48
2a0e:b107:17ed::/48 maxlen: 48
2a0e:b107:17ee::/48 maxlen: 48
2a0e:b107:17ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3f:32:19:4c:29:11:3e:c4:0f:c0:15:49:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95a9b6eb7233641930e4449612aa31b14855ca72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:bf:ba:69:ea:7d:84:cc:ae:14:26:2a:3e:
77:33:e9:af:d4:ac:d9:52:83:22:0a:b0:f7:29:cf:
36:fd:58:17:b7:78:ef:29:b9:bb:cb:58:26:5e:5d:
92:d6:8e:4b:8d:12:d3:49:e2:76:9b:7f:f0:82:75:
62:27:30:2e:87:69:18:cc:78:32:c8:ac:d4:3d:7e:
ee:18:cf:75:2d:b1:05:62:a0:7d:70:44:2b:af:87:
d3:27:5e:4a:b2:8e:4f:29:30:0d:ee:8a:cc:fd:2d:
a5:eb:71:5c:31:52:d0:59:0e:2c:0d:99:61:98:ea:
03:17:68:bb:e5:19:aa:fb:d2:06:0c:73:9a:e1:95:
e4:ca:35:bb:67:c9:1c:84:1b:cc:fa:21:3e:59:b3:
e7:c0:34:fa:4e:b3:6e:ed:00:a0:19:36:85:a5:f9:
f3:91:98:f1:f5:2b:70:8e:8e:f3:b1:fd:f1:d0:b3:
f8:33:f0:1e:bd:8a:22:2a:74:56:f6:63:44:b8:d8:
b3:fd:a3:59:f4:e0:81:a8:21:a3:0c:53:7d:f9:12:
d2:4f:5d:80:97:76:ec:81:cc:2f:df:e3:ec:88:28:
e6:47:94:3f:0e:3f:4c:a6:60:67:f1:19:34:c1:f1:
06:e4:1d:cf:9e:79:87:10:16:13:c2:aa:7c:2d:18:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:B6:EB:72:33:64:19:30:E4:44:96:12:AA:31:B1:48:55:CA:72
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lam263IzZBkw5ESWEqoxsUhVynI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5e0::/44
2a0e:b107:17e0::/44
Signature Algorithm: sha256WithRSAEncryption
40:ad:c1:4b:63:fc:73:c7:cb:70:7f:87:44:73:ca:03:61:43:
94:29:65:fb:3a:22:04:13:64:86:f7:e5:af:4c:53:9c:14:c4:
d7:db:0c:53:ab:97:82:a7:f1:29:3d:49:28:1e:d1:da:61:b6:
38:8c:2d:95:5e:bc:f5:a0:b2:33:cb:4d:8b:8c:50:0a:b3:e2:
15:ed:2d:97:e8:b0:f8:af:d1:f3:f7:a0:1a:4d:1b:20:50:30:
2b:a7:fe:a7:3c:b2:b4:7b:b2:8a:be:31:f9:8c:b1:c0:e9:45:
be:44:91:d2:c9:93:e1:64:6a:74:89:8e:b8:35:9a:33:58:21:
66:8c:12:c9:f9:27:b8:d5:ba:45:b1:89:2a:cd:cd:b8:1e:f0:
de:38:67:1e:3a:b1:bf:fa:ff:94:e8:b1:ef:d4:85:ab:f4:9f:
ea:2a:c0:58:5f:55:3c:0b:a7:c9:c6:78:a7:53:6a:f4:a5:b2:
e5:d8:17:5c:af:7d:f5:e8:08:c0:73:59:a5:8c:af:2b:70:5b:
55:69:7f:b0:af:22:03:c9:13:99:d4:0a:f9:13:ba:93:e5:4c:
d9:da:e8:37:3e:e2:fb:ef:cb:67:30:5e:82:c9:80:3c:60:06:
bd:fa:8d:63:44:78:45:4c:40:2a:3e:60:25:6a:73:c2:c1:49:
9f:c2:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:37 2025 by rpki-client