Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/LZgYbKjkOtUPhNFG5OkE-hyXe7c.roa
File: LZgYbKjkOtUPhNFG5OkE-hyXe7c.roa (raw, json)
Hash identifier: /SD3+46KNIrKvI3QCCYJR/mvU4EV+yloct/MsFkYqcA=
Subject key identifier: 2D:98:18:6C:A8:E4:3A:D5:0F:84:D1:46:E4:E9:04:FA:1C:97:7B:B7
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 0194A785B9F510D85C9FDC1A059E97A906FA
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/LZgYbKjkOtUPhNFG5OkE-hyXe7c.roa
Signing time: Mon 27 Jan 2025 11:29:06 +0000
ROA not before: Mon 27 Jan 2025 11:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35263
IP address blocks: 86.109.64.0/19 maxlen: 19
2a00:1b90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:85:b9:f5:10:d8:5c:9f:dc:1a:05:9e:97:a9:06:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Jan 27 11:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d98186ca8e43ad50f84d146e4e904fa1c977bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:c0:16:14:96:51:0e:f3:34:da:ba:6a:a5:
c7:6c:60:1f:c7:a3:21:c7:4d:7f:6d:20:13:1b:69:
8a:bc:7d:4a:bb:23:d1:48:f5:11:db:5a:86:29:86:
f1:3b:ab:72:1a:22:ff:26:41:43:79:ce:07:c2:d7:
24:90:71:d2:c6:98:28:2d:1c:4c:e1:ae:1b:0c:c0:
30:7c:95:66:68:fe:14:fe:2f:db:6b:0e:17:e2:b3:
36:2d:37:c3:5b:22:45:68:4f:4c:52:dd:9b:54:d7:
f1:d6:3d:a7:72:5b:d0:7f:50:bd:ef:72:09:0a:41:
a3:1f:2e:90:bd:74:89:d1:d0:78:d8:ba:27:e7:2c:
4a:93:16:22:a8:f5:d6:b9:a1:58:98:71:cd:77:28:
39:11:00:8d:6d:ec:19:d6:ec:d9:8d:06:41:89:f5:
23:8f:11:08:73:57:9f:25:a2:06:ef:43:c7:57:87:
6d:dc:b2:71:8c:a6:84:01:7b:4a:f5:9f:51:1c:ae:
87:b7:32:ca:5c:51:f9:1a:de:4a:de:f7:7b:f4:da:
c2:0e:ce:87:28:d0:98:ee:2d:a5:07:f7:61:82:23:
3b:ca:9b:f3:e3:32:37:cf:a1:c1:2b:74:b2:31:64:
f6:ac:c0:16:45:1c:50:4a:3e:ae:60:bd:63:50:ba:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:18:6C:A8:E4:3A:D5:0F:84:D1:46:E4:E9:04:FA:1C:97:7B:B7
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/LZgYbKjkOtUPhNFG5OkE-hyXe7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.64.0/19
IPv6:
2a00:1b90::/32
Signature Algorithm: sha256WithRSAEncryption
8f:c0:54:3b:d8:e2:fb:42:99:5e:ac:5d:31:28:fe:3d:1a:21:
31:a9:dd:bf:cb:10:49:2e:73:83:1e:10:88:9d:1b:8a:94:e4:
77:96:45:78:fb:e6:35:6c:dd:04:43:61:66:da:b2:96:c5:2b:
94:c6:e7:e4:66:0b:ce:5a:9e:28:cf:5b:71:db:69:bf:73:bd:
a7:49:8a:cb:32:31:a9:30:cb:08:08:5a:90:8d:55:82:72:8d:
8e:c4:16:a4:be:6f:85:2b:6d:77:d9:9f:83:f2:c1:c4:5e:7a:
fc:d3:1e:f8:c3:45:0d:ba:15:ab:33:43:07:84:a7:c6:4a:5f:
b8:bb:c2:6a:af:6c:c6:8d:8a:14:87:ee:b3:0d:2f:64:fe:76:
4e:b2:80:e9:29:31:6c:3d:a4:3b:a9:eb:6a:67:09:9f:a0:ba:
3d:0b:37:11:c9:65:6f:07:0c:08:80:53:0c:56:06:25:b7:66:
51:ba:00:a0:fd:25:ae:c6:88:9d:a0:44:77:39:79:01:7b:73:
8a:4d:61:ce:33:6e:b9:6b:31:be:eb:17:c6:16:c8:2a:1b:09:
21:be:b7:b7:19:92:11:7a:a5:ef:f1:34:5e:ee:33:bc:b8:bd:
ca:73:8e:0d:be:3a:a8:ea:44:31:a7:3a:61:6b:81:81:42:da:
a2:d4:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:28 2025 by rpki-client