Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa
File: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (raw, json)
Hash identifier: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=
Subject key identifier: 2E:4A:F1:E2:E9:E9:DA:8D:DB:00:F3:80:1B:D9:36:4B:19:01:3C:0C
Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial: 019425FC618AD01FDD97D47DFC18783854D0
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203055
IP address blocks: 2001:678:25c::/48 maxlen: 48
2001:67c:1998::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:61:8a:d0:1f:dd:97:d4:7d:fc:18:78:38:54:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e4af1e2e9e9da8ddb00f3801bd9364b19013c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:7c:3d:b4:35:3f:44:c7:27:4f:c9:54:ec:
69:43:f0:28:ce:56:ce:de:f5:36:11:27:83:ea:65:
3c:8f:05:cf:a4:1b:21:e6:92:8c:50:cf:61:b0:19:
3d:7e:76:5e:f2:c7:5e:8e:27:ad:85:4e:73:f2:fa:
64:53:33:78:63:9a:7b:d6:17:af:f0:fc:2d:80:44:
a9:9c:4a:9f:45:20:21:73:a1:3e:66:e0:45:95:ff:
10:1c:a9:b3:67:75:24:44:88:36:96:f3:11:fa:d4:
f7:55:c9:34:ca:31:26:1d:eb:54:1b:0e:18:9d:09:
07:e6:d4:4c:89:01:8b:c5:1f:83:3a:94:d3:7e:17:
5b:13:ca:6c:7a:e0:38:85:2f:63:3c:ea:33:70:17:
d4:6f:9d:5b:27:9e:e2:3b:b5:2c:26:47:03:46:0e:
57:a0:12:0d:3e:69:9c:cd:d5:0e:0c:14:74:36:ac:
2e:0b:0f:dc:ac:a5:fd:2b:3a:28:e5:19:10:17:ff:
83:4c:23:a6:9a:61:9c:64:7c:a4:27:6b:8a:65:06:
f4:4d:b2:d1:f5:1e:d7:91:d6:87:c6:30:69:e0:71:
2c:e4:34:7d:8b:b1:60:55:47:a3:8c:3f:8a:5e:a1:
f0:2f:4f:dd:6b:73:c6:eb:17:d8:b2:c7:37:0c:f9:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4A:F1:E2:E9:E9:DA:8D:DB:00:F3:80:1B:D9:36:4B:19:01:3C:0C
X509v3 Authority Key Identifier:
keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:25c::/48
2001:67c:1998::/48
Signature Algorithm: sha256WithRSAEncryption
26:c5:e2:7f:ee:71:86:33:9e:62:f6:ec:eb:c0:d5:9f:c7:e2:
91:6b:26:4e:00:6b:b3:70:ef:6f:a7:97:41:4f:07:30:a8:f8:
db:6c:0a:49:85:4c:c9:fa:25:8b:2c:b6:b2:c1:56:32:35:01:
17:79:05:e8:dd:4c:0d:ce:bf:7d:0d:d5:a8:fc:3d:9d:81:2a:
2f:39:a1:99:3c:43:17:dc:e2:e0:12:fb:2f:25:d9:04:f9:26:
a4:8a:08:6d:d9:b9:b7:12:78:2c:17:60:d0:be:80:48:ff:a0:
5c:c7:01:2c:6d:44:fd:9d:c2:9a:57:04:43:6b:82:cd:e4:91:
06:c9:9d:b3:44:9d:6f:f5:1b:44:ce:59:75:32:04:f0:58:92:
92:0d:7d:6e:91:82:e4:b9:d3:f5:20:f1:74:4a:2c:bf:a7:38:
a6:16:80:f2:ee:e2:3d:e2:69:c4:26:09:fd:88:6f:65:f4:ff:
e2:13:68:90:48:c5:ec:ee:0b:a7:af:45:c7:cf:56:2b:96:39:
61:12:0b:63:6a:e6:1f:de:80:cd:23:e1:8e:e7:b9:f3:7d:71:
df:c2:05:4d:0e:d6:f0:1f:3a:e0:10:b2:29:bc:b4:4d:da:87:
cb:55:b2:ed:e6:1f:53:a1:de:9e:b4:23:2a:15:38:5c:b6:01:
d0:95:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:29:34 2025 by rpki-client