Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa
File: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (raw, json)
Hash identifier: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=
Subject key identifier: 95:FA:C2:E0:1F:3C:01:FA:68:D5:30:4F:64:CC:4E:2C:87:14:D4:29
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019421444E28D8B2196655BA0DC175AE040E
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48753
IP address blocks: 2a0f:5f44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4e:28:d8:b2:19:66:55:ba:0d:c1:75:ae:04:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95fac2e01f3c01fa68d5304f64cc4e2c8714d429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:30:6c:c8:61:43:b1:0c:a3:5d:97:04:d0:
66:e1:38:6e:ce:b8:41:5f:39:a2:ea:28:f2:98:cd:
1d:ba:4f:de:9d:c7:50:c9:96:e4:f0:9a:1e:66:f2:
b7:25:c5:22:40:aa:7b:b8:d2:4e:94:25:9d:c8:86:
a0:1e:87:aa:d9:7c:07:54:e2:60:29:dd:8d:81:71:
d8:27:ba:f4:d9:02:29:7f:be:c7:8e:7c:7d:62:0a:
8c:32:65:fb:2e:60:0d:8e:97:f7:ad:60:7a:7c:ba:
79:67:ea:a0:3c:6c:c9:7a:9d:f5:f7:8f:9c:82:71:
5e:b8:0c:f2:ae:87:8b:bf:d0:70:1c:a7:8c:99:64:
72:43:f3:ff:7b:11:7a:ae:86:22:cc:54:3a:99:f3:
1e:38:68:e3:d9:ff:ab:5c:21:3d:09:58:3b:22:85:
b0:1b:7b:ca:fd:21:6b:79:72:fa:2f:50:59:76:53:
dc:b7:b5:9c:ed:b6:2e:8f:69:b6:03:8e:4f:c0:ce:
15:68:21:6d:fc:d7:0d:73:01:d6:6b:7f:a5:82:8f:
4f:b1:26:b2:87:9b:92:c8:5d:78:0d:96:75:61:42:
1b:30:b8:49:71:62:d5:de:c8:e8:94:61:d2:6c:ac:
3e:d4:12:a8:dc:28:56:7c:14:51:7e:c8:4f:1f:10:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:C2:E0:1F:3C:01:FA:68:D5:30:4F:64:CC:4E:2C:87:14:D4:29
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5f44::/48
Signature Algorithm: sha256WithRSAEncryption
63:16:7f:26:9a:75:bc:ce:b8:ad:57:9d:b7:97:c8:dd:71:c0:
eb:ae:6c:d4:f9:8b:8c:8f:60:38:7c:2d:68:cd:07:ba:f3:0b:
08:61:dd:3a:1f:fb:9e:f9:97:da:e2:6e:6a:f6:3e:2e:9c:be:
83:79:86:97:ab:3f:e0:03:58:86:b9:c7:43:b6:5b:c5:30:f2:
8c:dd:f5:24:61:99:15:c7:e0:70:df:50:8e:fd:71:85:9e:99:
14:a9:5f:3c:99:fc:a7:29:d7:be:14:37:99:b1:43:c3:13:80:
ce:e9:42:de:cd:9d:ea:16:44:6d:3b:21:9a:83:d2:71:31:a3:
01:6b:fe:fc:da:73:11:5e:ac:c9:db:44:ca:f7:2a:f8:db:c5:
67:9f:a1:a3:06:7f:d1:ca:6a:7b:ca:97:0a:0c:91:64:a3:83:
29:6f:22:fd:e8:fb:6d:dc:db:af:5d:9c:58:ba:6c:e6:d7:ad:
79:e0:e8:68:b3:bb:4e:0e:1f:6e:22:6c:c9:cd:ab:8f:34:a5:
63:55:cf:9f:0e:01:a0:c5:17:29:0d:e3:b5:30:cd:8a:8d:2d:
ae:47:04:b2:6c:9e:31:36:7e:2c:81:f6:d9:a1:d1:19:17:64:
db:4b:8c:48:4f:e0:45:dd:2d:29:dc:ed:ba:4d:d1:be:e9:c3:
48:a7:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:17:00 2025 by rpki-client