Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/LpPDa_hMKwPOheYcHrNv5BDTWog.roa
File: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (raw, json)
Hash identifier: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=
Subject key identifier: 2E:93:C3:6B:F8:4C:2B:03:CE:85:E6:1C:1E:B3:6F:E4:10:D3:5A:88
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 0196CDB0AE8B710EFC1DB54623D530A25061
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/LpPDa_hMKwPOheYcHrNv5BDTWog.roa
Signing time: Wed 14 May 2025 07:27:10 +0000
ROA not before: Wed 14 May 2025 07:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34576
IP address blocks: 2a10:da00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:b0:ae:8b:71:0e:fc:1d:b5:46:23:d5:30:a2:50:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: May 14 07:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e93c36bf84c2b03ce85e61c1eb36fe410d35a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:8e:b9:0b:7f:11:33:9e:6a:a1:be:32:8a:
9b:34:0c:7f:bf:42:5a:86:56:78:79:f8:d0:25:4c:
fe:44:ce:ee:70:94:ce:a0:2f:b1:22:32:59:c5:ec:
11:c5:40:a7:ac:96:ec:3c:f8:fe:d6:b3:7e:e6:56:
39:6a:a6:62:c6:bb:0f:ec:55:4f:9b:68:30:c3:02:
d9:6f:43:e9:13:33:ec:df:cf:07:87:1c:9c:71:f4:
89:dc:57:78:a3:e7:de:0b:58:6d:9a:09:ca:2a:5f:
5b:77:9f:90:22:35:13:c1:34:5d:7c:52:a8:c4:f2:
87:5c:55:6a:96:6f:2f:69:8e:cf:21:fe:95:b6:f4:
1c:8f:c9:31:07:1c:87:6c:a2:21:45:02:ae:18:01:
42:0b:ac:bc:f5:29:4e:da:65:75:e4:16:d2:54:68:
f2:4d:2e:6a:a3:b5:49:f4:99:03:4e:d2:cd:46:12:
f5:85:ca:78:99:da:c6:d6:4c:ae:bd:e8:b2:c4:4d:
fd:82:29:d0:03:24:3a:f1:48:2c:16:23:cb:46:8b:
d0:52:e4:d7:1b:0e:95:b8:f4:42:dd:1c:7c:0a:03:
86:72:dd:bc:90:4e:db:90:0b:e8:26:2c:d2:8b:88:
80:a8:7b:d5:2c:92:a4:ce:d3:75:fe:48:08:77:02:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:93:C3:6B:F8:4C:2B:03:CE:85:E6:1C:1E:B3:6F:E4:10:D3:5A:88
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/LpPDa_hMKwPOheYcHrNv5BDTWog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:da00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:87:ad:5f:27:a7:35:05:26:95:d1:d4:a3:44:13:c8:5d:5e:
6c:13:78:d6:bc:5f:78:a2:e3:27:15:76:49:c3:84:2e:16:10:
e0:d0:04:69:be:98:91:b9:7e:d6:31:95:ae:77:93:78:6d:82:
76:92:1d:84:de:8e:79:13:0f:7b:8a:ba:d2:68:c5:63:17:74:
c3:2b:47:af:2a:ad:d0:e1:d3:42:61:ca:c5:40:10:fe:3f:33:
ad:a2:e0:04:bc:f1:db:58:00:ad:90:aa:6f:7d:04:77:8d:4e:
91:63:2f:08:54:1c:fa:ed:a6:28:7f:91:51:a4:9d:8b:4f:97:
26:f8:51:88:b7:98:f6:7d:44:6f:f6:ee:9b:6e:48:fa:5b:46:
72:0e:2a:f2:ed:f8:0e:c5:24:f1:89:f7:2b:4c:db:d9:e3:16:
1e:91:c1:f6:3c:58:c9:de:92:fc:88:91:90:30:27:5d:8e:ec:
74:7c:db:3b:28:b9:ed:2a:07:f2:f9:ec:df:c7:2f:a3:8e:e0:
81:18:cc:68:60:fb:bf:4c:42:9f:d3:13:98:ea:47:6a:13:3a:
6b:bb:10:c5:15:60:07:3b:05:d8:60:56:c7:eb:29:98:5c:53:
f2:03:40:2f:34:9b:ae:a4:e8:f4:2a:e4:5d:8f:b8:2b:c7:e5:
1b:35:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:13:47 2025 by rpki-client