Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Lp19ExcxOy2pe6wR8shEjFdvANU.roa
File: Lp19ExcxOy2pe6wR8shEjFdvANU.roa (raw, json)
Hash identifier: JveLFtUkTPJjh4D4xqcaYE7S7KeRiwShMSZAvuL1TfI=
Subject key identifier: 2E:9D:7D:13:17:31:3B:2D:A9:7B:AC:11:F2:C8:44:8C:57:6F:00:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196744C2B3A80CDD70E63018F1AE5E3F363
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Lp19ExcxOy2pe6wR8shEjFdvANU.roa
Signing time: Sat 26 Apr 2025 22:51:10 +0000
ROA not before: Sat 26 Apr 2025 22:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215011
IP address blocks: 2a06:de01:d0::/44 maxlen: 48
2a0e:97c0:8a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:4c:2b:3a:80:cd:d7:0e:63:01:8f:1a:e5:e3:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 22:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e9d7d1317313b2da97bac11f2c8448c576f00d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:32:41:9d:3c:9b:84:89:93:a7:c1:c9:b9:
f3:9a:64:f4:97:b5:8e:45:ea:68:e5:14:d3:25:39:
f8:aa:ef:1c:d1:7a:35:ea:f8:cd:fe:50:2a:c8:9f:
8a:e9:22:ab:cc:56:ce:cb:17:0c:71:31:1d:c9:f1:
d2:f1:43:d2:68:ae:76:8b:d8:a7:ab:38:87:f8:e7:
5c:20:c5:10:d1:f0:41:b0:52:60:fc:34:8c:8d:29:
ef:87:4b:4d:d7:55:b9:9d:f3:ba:42:49:ed:53:c1:
f7:47:71:e0:64:46:8b:a0:5a:d3:f9:13:48:21:b5:
38:d1:0b:37:15:bf:59:9d:a3:1d:df:01:64:bc:0b:
3a:59:e3:9e:f4:96:01:cb:fb:45:fd:2e:02:83:ba:
2f:62:7b:a0:aa:f0:0c:8f:31:13:c3:7e:82:14:8c:
63:cb:1f:68:c2:30:2c:81:95:87:fb:0d:30:98:08:
33:54:f4:60:03:8e:1c:0c:41:5c:c9:7c:7a:ee:6a:
1a:25:8a:4f:12:c6:0b:73:7e:ed:11:ad:30:36:da:
9a:c7:f9:ac:87:7b:2f:ee:4e:e3:46:f6:0e:5f:c4:
b4:0d:45:74:5d:d3:d6:6c:7f:5b:29:42:dd:2b:95:
b3:41:b5:06:af:cc:12:09:41:ae:d9:ce:41:e5:73:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:7D:13:17:31:3B:2D:A9:7B:AC:11:F2:C8:44:8C:57:6F:00:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Lp19ExcxOy2pe6wR8shEjFdvANU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:d0::/44
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
0f:fb:d2:bc:2a:cd:7b:8e:4a:9c:54:24:32:20:d4:49:75:23:
fd:69:f1:d6:36:f4:e4:bf:21:2c:8a:13:47:5e:3d:9c:0a:d4:
a9:61:e9:a8:71:af:72:ce:56:39:aa:9b:6b:72:fb:ff:d0:af:
f5:5f:eb:18:ec:05:a2:49:95:56:24:16:65:b5:a4:d6:4b:cf:
13:6b:76:b9:b5:c8:b6:df:8f:f5:2e:a9:3c:af:1f:95:82:8f:
4e:d2:39:35:1a:89:b2:ea:7d:6a:7a:76:a5:2e:e7:78:c0:e7:
ae:26:94:17:0b:ab:c7:06:17:9a:cd:52:37:04:8b:08:d2:8c:
96:bc:0a:e4:91:00:e7:9b:26:5d:2b:06:bb:f6:94:e1:42:91:
b1:67:9f:1a:e9:af:fc:69:e3:42:27:bd:6f:8a:9d:a2:fa:fc:
99:63:ad:ee:bb:0c:76:58:77:2f:a9:d7:6e:7a:6f:c6:18:4f:
07:65:7a:ae:17:a3:aa:0d:e7:2c:f1:91:7c:6d:b6:a5:0d:b0:
69:61:10:18:d2:ee:e1:c5:d9:7f:05:60:bd:54:96:38:9a:8f:
13:07:14:eb:c3:fa:b5:1d:fe:59:64:16:c5:2e:2f:6f:ed:71:
06:19:79:99:c8:8d:0e:a4:bf:54:16:02:f6:41:fd:fb:f6:f8:
8c:68:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:39:33 2025 by rpki-client