Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/lN-t97gLRpuQiIuZBao3sqyhivU.roa
File: lN-t97gLRpuQiIuZBao3sqyhivU.roa (raw, json)
Hash identifier: +mDT0U1tA2WAtk/Z2ZEI8eZRiQJYovhUI82zz7zEdzc=
Subject key identifier: 94:DF:AD:F7:B8:0B:46:9B:90:88:8B:99:05:AA:37:B2:AC:A1:8A:F5
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01964C8DE82EDF8C52C8D9BF7E5BF54D6187
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/lN-t97gLRpuQiIuZBao3sqyhivU.roa
Signing time: Sat 19 Apr 2025 05:38:10 +0000
ROA not before: Sat 19 Apr 2025 05:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213771
IP address blocks: 2a14:67c1:80::/46 maxlen: 48
2a14:67c1:84::/46 maxlen: 48
2a14:67c1:88::/46 maxlen: 48
2a14:67c1:8c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:8d:e8:2e:df:8c:52:c8:d9:bf:7e:5b:f5:4d:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Apr 19 05:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94dfadf7b80b469b90888b9905aa37b2aca18af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:97:da:6d:7f:2d:73:fa:72:66:cf:e0:85:
f1:74:7d:94:93:4b:93:aa:46:9e:da:c3:3a:8a:04:
66:4d:c6:0e:1f:6d:ca:87:fd:df:60:59:7b:75:63:
23:59:75:96:93:a7:32:17:c3:1d:f0:8b:08:c4:70:
c6:e3:1a:75:ae:0c:34:89:d9:4b:3a:40:49:8d:24:
91:16:c1:2e:5b:be:66:fa:02:93:18:fe:28:fe:21:
c0:59:30:25:ae:5a:e4:25:b1:3f:98:a7:84:99:72:
a7:24:81:8e:46:c6:c3:a5:cd:1d:42:f8:1a:b6:f7:
1b:ed:18:f1:6b:2d:5b:e1:07:1c:ac:af:e4:5e:47:
92:9e:b8:1e:8e:85:4a:99:25:6e:4a:d6:84:9a:b1:
fc:69:1a:92:cd:f8:4e:6a:6d:44:cb:25:1b:4c:a8:
5e:ec:66:b8:58:36:7a:d1:59:44:80:f4:1c:d0:f9:
60:2e:f1:47:a4:e7:5d:f0:88:c6:1a:c5:a4:ae:4b:
4a:1a:e4:4f:28:4f:40:3f:6c:8e:01:ee:a7:62:b0:
5d:ed:b8:bb:e3:f1:cc:30:bc:e6:bb:4c:b1:4c:5b:
dd:f6:28:eb:b1:ca:92:6d:1b:50:fb:28:cb:fd:f3:
ca:be:ed:fb:89:f8:6e:d1:b1:b0:04:5d:66:5e:06:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DF:AD:F7:B8:0B:46:9B:90:88:8B:99:05:AA:37:B2:AC:A1:8A:F5
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/lN-t97gLRpuQiIuZBao3sqyhivU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:80::/44
Signature Algorithm: sha256WithRSAEncryption
be:63:19:87:13:48:de:16:0e:67:8c:d2:f6:df:65:db:8f:a8:
65:9b:83:71:1c:04:f4:88:d3:51:81:fe:1b:c2:13:5d:2f:0c:
07:81:2e:94:c3:b1:e3:1c:6d:f8:d2:30:b5:91:9a:20:de:14:
a6:13:71:22:49:98:3a:69:c9:c9:f4:55:50:69:c0:c4:81:5e:
3d:41:a4:54:1b:fb:e1:5f:27:eb:f5:e9:93:07:4e:9b:1b:f8:
18:d4:af:fe:88:5f:f2:27:e7:81:32:d0:5a:64:06:6f:a1:16:
06:6d:53:30:83:38:12:b1:25:61:0a:c2:ff:cd:75:9c:a3:31:
cb:ae:1f:9f:3c:10:df:37:da:33:19:b3:ec:51:82:fd:de:c1:
95:ce:b7:1e:21:5a:15:74:3f:53:64:cd:14:bf:14:bd:5e:f2:
24:9a:c1:8e:dd:fe:1f:24:9c:de:b4:ed:b7:eb:d9:13:ef:0a:
9d:1b:3d:15:75:45:5d:ce:81:02:be:65:9c:b3:20:91:d6:fc:
cc:6b:8b:03:d9:1e:f3:2c:cc:6e:c6:fa:9a:28:c4:c8:e8:8b:
a6:b3:63:4f:4a:e7:60:c2:d8:a2:a8:50:e6:1c:dd:c8:54:94:
62:f2:3f:44:4b:ee:1e:e5:20:38:b9:6e:b2:a7:ed:6a:02:72:
cf:fe:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:36 2025 by rpki-client