Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/LKg2o2zlysSfcmScabBK3xapbdE.roa
File: LKg2o2zlysSfcmScabBK3xapbdE.roa (raw, json)
Hash identifier: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=
Subject key identifier: 2C:A8:36:A3:6C:E5:CA:C4:9F:72:64:9C:69:B0:4A:DF:16:A9:6D:D1
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 0194266B4FB378E1D5A82C7BFC9BCF55B1FA
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/LKg2o2zlysSfcmScabBK3xapbdE.roa
Signing time: Thu 02 Jan 2025 09:49:14 +0000
ROA not before: Thu 02 Jan 2025 09:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 2001:67c:ed8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4f:b3:78:e1:d5:a8:2c:7b:fc:9b:cf:55:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ca836a36ce5cac49f72649c69b04adf16a96dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:8e:0f:35:f4:69:03:c9:40:74:a6:a8:b7:
82:5a:67:d6:28:42:08:ac:d3:c4:6e:51:04:98:4d:
72:bc:2a:03:63:43:20:e2:f3:50:12:50:21:77:91:
f6:3d:5e:36:c7:59:2d:2e:66:96:ab:01:04:fd:2a:
e7:42:c8:bb:86:d0:e4:0d:89:d9:53:ac:0b:00:51:
db:e0:ca:ff:a4:91:28:c4:7e:8e:e6:93:50:08:01:
30:b7:2a:4b:f8:6a:7f:bf:19:8d:1f:6e:5b:47:04:
3b:c6:a8:65:af:ac:63:bf:8f:b8:98:97:07:19:ee:
62:03:dc:7f:b7:c9:e9:3b:32:5b:69:ea:05:76:2f:
ad:3d:db:33:95:c6:c3:08:b2:5d:3e:62:11:0e:67:
83:ce:2c:97:a6:5a:c8:ac:9a:b7:9f:54:0f:14:28:
32:0d:12:0a:d5:6c:92:36:94:3f:4e:fe:96:49:84:
11:ec:18:e2:ea:26:ad:d9:2a:55:f2:d3:4c:3d:9c:
b6:e0:c4:5f:43:b5:47:18:be:f8:f9:4e:59:58:ef:
1f:72:37:2a:b4:b4:10:3b:53:24:ae:16:72:0c:42:
62:57:89:87:3b:96:5c:72:ab:11:a9:56:a0:54:cd:
4d:13:57:2f:50:46:09:d2:03:5f:51:29:04:a0:d7:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:36:A3:6C:E5:CA:C4:9F:72:64:9C:69:B0:4A:DF:16:A9:6D:D1
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/LKg2o2zlysSfcmScabBK3xapbdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ed8::/48
Signature Algorithm: sha256WithRSAEncryption
29:f6:4d:2e:a6:b7:d2:92:51:15:e6:27:c7:c8:e6:81:a1:f4:
cc:ee:0e:e1:f8:e4:03:74:ad:de:91:0b:30:e4:9d:2f:26:90:
b8:bd:40:db:d7:6c:95:8e:f2:dc:00:93:71:17:52:50:3b:db:
a8:10:80:56:74:ba:bd:83:d9:80:35:91:3e:bf:79:aa:ef:e9:
33:c2:87:4a:76:25:53:b5:79:2b:c6:12:27:35:ee:ff:7d:59:
84:6b:af:d4:f4:07:7e:15:f6:7c:2b:7c:a7:ab:e2:58:e1:8e:
be:77:2e:7b:c8:9c:b1:54:75:da:43:39:4e:4a:a9:82:07:01:
13:87:a2:a0:e5:59:84:5d:d7:ef:d1:35:a2:7e:16:c9:1c:ff:
16:08:cd:09:66:ce:b1:20:65:43:1c:29:ce:b2:16:5b:90:55:
cf:f6:a8:4a:41:2d:6b:89:6d:0c:0e:6c:90:58:e7:2a:44:8b:
29:66:cd:45:82:9f:0f:e4:bd:2c:c4:8e:bd:4d:77:32:af:b5:
0c:aa:7b:11:52:85:ff:8b:b4:ae:e0:29:48:74:69:7f:95:f9:
38:2c:da:9f:ab:75:5c:bf:24:ad:bc:21:21:81:5f:97:81:d8:
f0:6e:02:aa:26:d4:f3:35:08:bd:fe:34:d6:56:70:20:65:3d:
df:f2:5f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:19:32 2025 by rpki-client