Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/L5n__TlZWPdvDvLr4ZFidz4XLKs.roa
File: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (raw, json)
Hash identifier: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=
Subject key identifier: 2F:99:FF:FD:39:59:58:F7:6F:0E:F2:EB:E1:91:62:77:3E:17:2C:AB
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 01942745D5BB0D638F69C1B1C77D344D0AB2
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/L5n__TlZWPdvDvLr4ZFidz4XLKs.roa
Signing time: Thu 02 Jan 2025 13:47:55 +0000
ROA not before: Thu 02 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.4.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d5:bb:0d:63:8f:69:c1:b1:c7:7d:34:4d:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Jan 2 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f99fffd395958f76f0ef2ebe19162773e172cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:b3:d7:59:d0:22:2a:5f:fb:c2:88:ec:bd:
c6:69:be:cb:49:a5:17:74:bd:3d:21:b4:1a:20:a0:
1d:4a:d6:b2:f1:ec:78:98:df:3e:74:97:11:8e:18:
6c:2d:74:8e:79:99:59:83:d0:f2:20:89:90:1a:99:
45:89:ee:9e:2a:9b:a1:71:61:23:9a:9c:a8:80:04:
75:72:93:80:f7:78:ff:e3:48:ad:71:2f:97:37:44:
4e:0d:d6:9c:72:70:7c:ef:f3:54:e6:cb:c2:92:f7:
e4:e3:5d:0c:28:9b:33:f8:ff:c7:7f:fe:c1:19:d8:
ac:a6:8e:47:45:6c:80:41:45:ed:87:e3:06:fc:eb:
7a:bb:05:39:96:f0:a8:b2:8c:9d:83:c1:98:a7:f3:
9c:b9:d1:11:10:cd:e1:33:b1:c7:5f:7e:69:24:7f:
40:6e:99:8f:d1:b4:00:5d:37:b9:24:41:5c:27:3f:
9a:02:16:f7:53:eb:c5:47:4b:48:e6:d5:74:63:ec:
67:ba:5b:e2:42:9e:2a:30:6a:4a:c2:01:4d:51:0a:
2e:bb:ae:aa:15:f2:fd:73:6e:02:d1:52:5d:4f:57:
83:bc:82:d3:62:cf:e5:a9:d4:c3:2e:86:d7:af:a8:
3c:6f:3d:81:03:78:46:20:c6:ea:26:cb:c4:aa:83:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:FF:FD:39:59:58:F7:6F:0E:F2:EB:E1:91:62:77:3E:17:2C:AB
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/L5n__TlZWPdvDvLr4ZFidz4XLKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:fc:24:f1:b0:6e:c2:74:79:59:ad:e6:fc:db:f4:2b:57:62:
1c:31:b5:47:c2:cf:f9:cf:31:31:a6:95:26:f9:78:cf:a2:eb:
61:dd:98:59:b1:ed:2e:78:f8:e2:b1:4e:97:f4:1c:91:2e:17:
35:9c:57:ed:ab:91:9a:1c:f5:f2:31:8d:3e:72:6c:b9:65:01:
36:1c:e2:1c:b4:08:3c:a5:a4:e6:a3:7d:53:90:46:a6:37:31:
d2:f9:c5:6a:bb:91:39:9c:84:3a:c1:20:af:9a:c5:4c:b7:e5:
d9:f3:7d:70:88:c4:89:48:0a:a9:15:e8:18:cd:7e:82:35:cb:
fc:5d:74:fd:0e:5f:86:14:d1:26:3a:18:35:16:8e:c6:08:f3:
a0:76:61:39:d0:8e:8a:5f:70:ee:84:f2:46:a2:eb:71:46:23:
c1:82:94:eb:f6:21:21:ea:fb:95:3e:b5:b6:31:a8:92:ae:fe:
37:eb:68:23:be:f4:14:85:a0:8b:0e:94:dc:d1:b1:74:14:08:
3f:de:74:45:39:58:70:fe:6b:02:0f:48:dd:80:11:69:e7:0d:
ef:5d:68:74:e7:53:c1:2a:23:ae:90:00:0b:0a:e3:78:99:d6:
0c:bb:92:23:21:13:12:78:b5:3d:cb:9c:83:2c:eb:23:0f:f5:
fa:8a:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:22:24 2025 by rpki-client