Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/lGKMR71wIiss24ARjCT6dglSzeg.roa
File: lGKMR71wIiss24ARjCT6dglSzeg.roa (raw, json)
Hash identifier: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=
Subject key identifier: 94:62:8C:47:BD:70:22:2B:2C:DB:80:11:8C:24:FA:76:09:52:CD:E8
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 019427B5D35584F658DFB578DA2F162059F4
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/lGKMR71wIiss24ARjCT6dglSzeg.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197942
IP address blocks: 2001:67c:1904::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d3:55:84:f6:58:df:b5:78:da:2f:16:20:59:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94628c47bd70222b2cdb80118c24fa760952cde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:81:44:e2:6b:70:1a:11:37:e1:de:70:27:
5c:18:bb:76:eb:4e:3f:d5:11:82:27:e0:ec:fe:e9:
8d:73:2b:6f:6e:d9:a3:f6:29:5e:b6:b7:50:84:c7:
83:29:f7:78:10:5b:4a:dd:e9:2c:a2:e8:bc:26:63:
5f:dd:9a:1e:19:4f:c7:9b:08:10:2a:cb:2c:85:23:
33:dc:59:ec:a9:52:9e:2a:c3:45:c5:41:a4:b5:8d:
ad:43:24:96:d0:49:b7:51:bc:58:86:da:d0:d2:8a:
f4:4e:d4:78:70:da:d5:70:b9:42:20:36:1d:76:5e:
72:f0:02:47:c0:be:57:32:f7:0e:0f:26:0e:ac:d1:
59:4f:26:ea:36:51:e5:75:dc:1f:05:df:82:b6:b3:
de:1a:9f:5b:06:69:e3:36:e6:e5:4a:b3:0f:44:4c:
bb:4a:54:ed:b2:84:df:cf:4f:a5:9b:48:9c:5d:1b:
44:04:05:7c:a2:b3:a8:b8:0d:25:82:b5:3a:5a:b4:
f7:6f:33:29:fd:c2:db:b7:82:f4:30:bc:b3:4d:73:
38:22:79:cd:6a:60:e8:0c:f1:b0:be:52:d7:dc:5c:
99:94:76:c5:f8:e6:b4:10:3d:25:e6:2a:95:a3:26:
33:55:59:35:86:26:89:f5:53:40:f4:bd:8a:b9:6e:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:8C:47:BD:70:22:2B:2C:DB:80:11:8C:24:FA:76:09:52:CD:E8
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/lGKMR71wIiss24ARjCT6dglSzeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1904::/48
Signature Algorithm: sha256WithRSAEncryption
33:c7:25:67:d7:34:cd:bc:8e:35:2f:72:51:df:04:76:62:9d:
4b:54:f7:43:1b:94:ff:5c:79:7a:46:f0:27:bd:7a:c5:a4:85:
45:b6:45:42:12:82:be:24:08:80:01:99:ca:06:0b:b3:04:2d:
1e:bd:b4:84:14:ad:fe:ce:b0:82:67:18:96:b5:4d:ae:eb:0b:
38:09:6f:4c:7d:f2:fa:2a:ce:45:92:fd:40:9d:6d:30:cb:d9:
79:1c:69:66:f3:95:4a:e1:a9:95:3a:be:68:e4:1f:15:b4:77:
82:2c:f9:30:d6:f3:e9:1f:e8:f2:f7:ba:07:b1:20:e0:54:f0:
43:6c:3d:ec:9d:e3:c9:ec:01:47:26:58:bd:23:b2:1d:b4:74:
28:4e:56:84:99:b0:23:21:56:7d:e5:ea:70:d5:52:b3:c1:f7:
16:66:92:03:c9:6e:77:43:90:8e:19:1f:68:fa:02:af:08:37:
d5:a2:19:ef:1e:ae:b0:15:43:70:b3:f9:10:27:e9:c7:3d:98:
28:9f:a2:c1:f4:60:87:cc:1c:d6:d6:0a:b8:6f:84:75:f6:e3:
a6:49:94:42:72:2b:db:9c:19:35:82:74:92:8f:f5:8a:c7:dd:
f9:d7:e1:64:61:39:0c:1b:56:37:c4:dd:c7:60:44:18:ca:21:
5b:3e:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:18:40 2025 by rpki-client