Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LztToIfHj5MPHP69zf_0q_SimrU.roa
File: LztToIfHj5MPHP69zf_0q_SimrU.roa (raw, json)
Hash identifier: 0JPoHmLHmn9stIi7tg5FnXzBytZDbUKqcPQHQVNsAoU=
Subject key identifier: 2F:3B:53:A0:87:C7:8F:93:0F:1C:FE:BD:CD:FF:F4:AB:F4:A2:9A:B5
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01942825749833D5A08D7D9CB240C99ED77F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LztToIfHj5MPHP69zf_0q_SimrU.roa
Signing time: Thu 02 Jan 2025 17:52:10 +0000
ROA not before: Thu 02 Jan 2025 17:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202427
IP address blocks: 2a0f:b241:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:74:98:33:d5:a0:8d:7d:9c:b2:40:c9:9e:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f3b53a087c78f930f1cfebdcdfff4abf4a29ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:6d:24:fc:b7:41:7c:e4:cd:5b:c4:26:f9:
af:b9:84:a4:5f:c2:e9:e3:02:26:36:be:78:d6:0a:
95:26:76:77:25:a0:e6:1d:45:e0:50:d2:a0:01:cf:
20:ff:79:be:fa:f6:c1:87:4d:10:0b:9a:b4:88:26:
bc:79:51:68:e5:65:42:6b:0d:2d:a7:79:bb:73:62:
e7:07:00:68:7c:67:85:75:6a:52:3d:78:db:07:46:
37:45:1e:d3:09:bc:03:bc:d9:3c:2a:3d:b0:b3:50:
16:19:0e:10:27:93:11:15:83:82:4c:21:81:a0:7d:
d0:59:04:91:e9:3b:94:da:1f:6d:30:d5:f4:41:1c:
be:a2:ef:86:4a:bc:48:ae:a6:25:b8:fd:0f:58:b8:
22:89:64:37:fa:7d:13:31:4e:89:69:3b:28:58:d7:
ab:9b:19:18:38:3c:15:72:4c:b8:8a:7a:ac:d4:03:
cd:54:c7:8e:bd:32:3e:5a:61:48:c9:bd:a6:90:c5:
b0:8b:75:97:2f:43:3e:d9:dc:0d:72:fc:a7:df:d0:
af:09:13:8b:27:24:95:c9:91:4b:d5:a6:de:69:59:
e5:9b:3f:c5:7f:78:e0:fe:b9:6f:ac:ca:1b:1a:6c:
f0:87:44:ae:8a:8b:0a:2d:ab:a7:05:5d:6c:fb:17:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3B:53:A0:87:C7:8F:93:0F:1C:FE:BD:CD:FF:F4:AB:F4:A2:9A:B5
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LztToIfHj5MPHP69zf_0q_SimrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:e7:c8:fe:6d:47:c0:35:b6:26:c8:25:1e:08:ec:62:91:3d:
3c:7d:91:5c:d3:4f:2e:e6:2d:0f:44:42:b7:e2:fa:e5:41:10:
0e:c1:d0:82:42:6e:6c:0d:0a:83:0a:de:cf:71:10:5c:87:54:
da:73:fa:fe:25:9f:27:4e:4e:66:dd:aa:70:c5:10:8c:f0:a9:
b2:96:9b:5f:50:56:33:59:6a:3a:eb:50:14:d3:37:9d:8a:39:
17:fd:d0:6e:56:51:7a:3d:fc:4b:09:07:a6:9f:cb:f2:33:9c:
14:ab:29:b1:bb:80:93:bb:29:9a:7b:c1:bf:2d:9e:73:e4:a3:
aa:2e:d2:11:0e:47:05:d8:23:3f:01:57:a0:7c:04:84:d9:6d:
02:6f:c3:5d:3c:8b:c4:92:8b:2b:33:61:ff:e4:8e:e8:de:1c:
e4:ea:2c:df:08:98:e9:84:8a:a0:71:ab:b5:26:d4:2c:b6:3b:
b6:23:b1:81:b4:de:27:8c:10:dc:05:22:45:d6:7e:32:c3:01:
8d:55:68:18:33:a3:89:7b:ae:aa:70:a7:9f:6a:43:40:05:de:
f3:cb:84:24:6e:6f:40:f8:a8:3b:bb:77:6a:cc:0f:12:c5:90:
9f:de:1a:ae:9a:5c:f6:50:e2:e3:58:86:9b:a7:03:94:d1:de:
ae:11:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:56 2025 by rpki-client