Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/LYl-ckZTCA5UyIouoIve31n38qY.roa
File: LYl-ckZTCA5UyIouoIve31n38qY.roa (raw, json)
Hash identifier: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=
Subject key identifier: 2D:89:7E:72:46:53:08:0E:54:C8:8A:2E:A0:8B:DE:DF:59:F7:F2:A6
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 01941F8C93640A05034C2AEE550978E767B8
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/LYl-ckZTCA5UyIouoIve31n38qY.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200924
IP address blocks: 2001:678:c9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:93:64:0a:05:03:4c:2a:ee:55:09:78:e7:67:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d897e724653080e54c88a2ea08bdedf59f7f2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:1d:64:50:f9:97:70:2e:79:a9:6c:49:bf:
0c:c6:db:d8:81:42:c2:c4:03:42:93:f8:b3:09:fb:
74:02:40:10:ef:c4:a7:95:b4:36:b5:bc:8e:a0:f3:
4b:d6:f0:f9:dc:6a:cf:f8:04:99:72:6a:38:49:9f:
f0:03:e2:06:c0:ad:70:97:9a:fe:cc:84:a7:e0:1f:
13:c2:10:1d:4f:ea:ad:84:83:f4:92:84:c6:26:87:
5b:bd:88:2a:a2:0d:2f:77:09:15:cf:19:70:60:42:
5b:c0:a2:c2:90:0e:35:ed:10:98:43:dc:78:ea:26:
90:7b:db:35:45:d3:fe:7a:5f:04:9f:3f:fd:5a:3e:
26:9d:5c:30:72:79:07:6f:4d:2d:1d:28:e5:ba:c4:
19:4b:8a:96:0c:e1:79:bb:52:19:19:90:60:fa:16:
d4:fc:ce:3a:d5:8e:be:f4:4a:62:84:09:2f:6d:7f:
4a:30:6f:50:bb:ee:2c:22:1d:86:4e:8a:6d:ab:c5:
37:f3:89:ce:db:85:56:de:11:b2:8d:a7:c4:62:e8:
2e:ca:ae:ce:47:6a:ab:1b:3e:bb:bf:09:b5:f4:16:
69:a1:75:35:bd:0f:f5:f6:ad:a4:e4:89:de:09:72:
e5:2d:f2:14:89:36:a4:19:b4:63:f0:49:84:23:d8:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:7E:72:46:53:08:0E:54:C8:8A:2E:A0:8B:DE:DF:59:F7:F2:A6
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/LYl-ckZTCA5UyIouoIve31n38qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c9c::/48
Signature Algorithm: sha256WithRSAEncryption
56:a7:39:c4:01:7d:99:0a:2c:0f:f2:6f:94:27:37:14:ff:73:
7c:80:31:68:26:a3:0d:55:28:1a:85:08:12:14:34:0b:02:c1:
62:b5:b0:62:51:ab:b5:09:fc:3e:2c:57:a2:45:c1:ca:e9:90:
1e:de:8c:6e:8e:87:34:ce:09:a1:c0:87:00:89:5a:03:65:6a:
b5:07:a0:db:9e:38:6a:b7:bc:69:e3:ad:ac:6c:a5:e3:24:40:
f9:66:be:34:cd:62:ab:f7:f3:42:0c:3d:10:c3:c4:8d:1c:8e:
c8:60:86:d6:5e:ae:7b:60:f0:b3:6f:0e:e9:3c:8b:fa:cb:a8:
18:a3:c4:43:1a:65:ea:a0:28:b7:cf:a0:04:21:5e:9a:07:a9:
a3:5c:81:6b:9b:55:8d:2d:03:3c:05:21:2d:fc:c3:8c:de:58:
27:8e:6e:c1:96:52:0b:ee:a6:3c:ad:02:24:e8:10:a5:dd:1c:
48:e8:cb:46:68:aa:20:ca:b3:8a:d9:ad:43:d6:ab:bd:11:bc:
99:17:c4:55:a5:9f:24:96:6c:9c:2d:ce:23:e4:4d:91:0c:8c:
1e:e7:f8:e7:4e:89:7c:1f:6b:ac:6b:d7:02:84:ed:cc:61:b8:
66:21:4c:f6:05:95:ab:3e:21:b0:1a:7d:a0:a2:ed:13:30:e3:
81:aa:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:52 2025 by rpki-client