Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/LkgrvRMkyor3Sl-mJe0dukFEQiw.roa
File: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (raw, json)
Hash identifier: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=
Subject key identifier: 2E:48:2B:BD:13:24:CA:8A:F7:4A:5F:A6:25:ED:1D:BA:41:44:42:2C
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0196C0A043261CE3F3960138959A1E86254A
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/LkgrvRMkyor3Sl-mJe0dukFEQiw.roa
Signing time: Sun 11 May 2025 18:34:10 +0000
ROA not before: Sun 11 May 2025 18:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200036
IP address blocks: 2a12:d8c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:a0:43:26:1c:e3:f3:96:01:38:95:9a:1e:86:25:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: May 11 18:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e482bbd1324ca8af74a5fa625ed1dba4144422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:80:f2:34:80:ae:cf:b5:56:de:40:9a:8d:
84:5f:42:d2:d5:22:b1:cb:6b:3e:4a:22:24:98:34:
49:ee:c3:16:ee:41:06:6b:c4:ab:69:9f:d6:56:39:
5c:8d:1d:4b:16:a3:c0:c0:7c:5e:af:ff:0c:10:c9:
4b:35:63:b5:b0:89:5f:25:2c:42:56:9c:e6:03:31:
d1:72:71:b1:95:c1:59:6e:7b:6f:13:f9:48:6f:d5:
2b:87:67:6e:41:f9:94:05:c4:c8:db:04:cf:6e:41:
24:55:7f:7d:cc:c6:02:71:7b:bc:4a:37:8e:55:7d:
f6:00:ae:36:c3:4c:5d:01:3b:ae:bb:1f:09:10:95:
66:c3:a1:0b:60:6a:59:4e:4d:b0:83:58:9c:70:d6:
da:f5:f2:c8:5b:1c:ce:07:f2:2a:95:16:e7:6e:59:
14:7a:81:6e:36:4f:ca:f5:4a:1b:f6:7a:b6:25:2f:
70:64:17:47:df:4c:fe:8f:5d:1d:37:01:ce:38:d1:
85:54:34:5f:56:31:a8:a6:ab:4e:18:52:27:b1:61:
75:1c:08:e6:2f:05:31:2a:ed:bf:25:bd:2b:c7:b8:
89:74:63:b5:9d:5b:1e:e6:b4:31:76:b7:d5:aa:7a:
b4:e7:c4:bb:6e:24:c5:5f:2e:e0:8e:42:6b:a5:fa:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:48:2B:BD:13:24:CA:8A:F7:4A:5F:A6:25:ED:1D:BA:41:44:42:2C
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/LkgrvRMkyor3Sl-mJe0dukFEQiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d8c6::/32
Signature Algorithm: sha256WithRSAEncryption
c1:c1:7b:ec:79:ec:97:c5:6f:5e:5d:df:39:45:27:b8:d0:01:
a2:b2:9f:c8:19:4a:da:c8:4e:17:d7:33:27:1c:50:91:b5:cc:
17:37:6e:8e:3e:35:a3:cc:08:75:63:57:2b:af:f9:08:a0:4d:
d7:67:fa:0b:95:2f:6e:01:b2:72:92:d2:26:2d:8e:d6:31:b7:
16:8e:1b:e9:32:03:e4:91:29:4f:43:8a:49:f6:52:a1:ce:fa:
7b:64:86:8b:83:ad:b8:13:b0:a5:c0:f3:4e:5c:40:fb:05:c2:
eb:75:ba:f7:0e:45:4c:62:cb:60:c8:c5:1a:05:4c:91:b2:39:
8d:1e:03:e3:89:74:81:d8:09:be:ad:95:49:32:16:74:8f:ef:
56:be:73:fc:3e:66:c1:82:20:a6:f9:e6:06:c1:55:a8:20:56:
2e:18:09:36:d0:a6:22:ec:96:30:a9:c9:41:1d:73:66:00:64:
38:e6:a5:92:c8:1d:89:05:4a:e6:5e:f6:46:1c:38:4f:52:83:
5c:bf:c2:ff:a4:be:43:c0:37:90:bd:ef:5b:54:84:ea:e3:fc:
b0:d4:9d:c1:04:2a:4f:74:41:83:a5:d5:ee:69:62:65:ce:7f:
8c:e3:ad:a7:c1:0f:68:31:99:df:2e:87:93:4f:b2:9d:fb:20:
ef:b1:86:66
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZbAoEMmHOPzlgE4lZoehiVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1
YzZkZmUwHhcNMjUwNTExMTgzNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTQ4MmJiZDEzMjRjYThhZjc0YTVmYTYyNWVkMWRiYTQxNDQ0MjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+iA8jSArs+1Vt5Amo2EX0LS1SKx
y2s+SiIkmDRJ7sMW7kEGa8SraZ/WVjlcjR1LFqPAwHxer/8MEMlLNWO1sIlfJSxC
VpzmAzHRcnGxlcFZbntvE/lIb9Urh2duQfmUBcTI2wTPbkEkVX99zMYCcXu8SjeO
VX32AK42w0xdATuuux8JEJVmw6ELYGpZTk2wg1iccNba9fLIWxzOB/IqlRbnblkU
eoFuNk/K9Uob9nq2JS9wZBdH30z+j10dNwHOONGFVDRfVjGopqtOGFInsWF1HAjm
LwUxKu2/Jb0rx7iJdGO1nVse5rQxdrfVqnq058S7biTFXy7gjkJrpfqG9wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFC5IK70TJMqK90pfpiXtHbpBREIsMB8GA1UdIwQY
MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt
ZjhhZmZlZjExMmQ4LzEvTGtncnZSTWt5b3IzU2wtbUplMGR1a0ZFUWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4
LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhLYxjAN
BgkqhkiG9w0BAQsFAAOCAQEAwcF77Hnsl8VvXl3fOUUnuNABorKfyBlK2shOF9cz
JxxQkbXMFzdujj41o8wIdWNXK6/5CKBN12f6C5UvbgGycpLSJi2O1jG3Fo4b6TID
5JEpT0OKSfZSoc76e2SGi4OtuBOwpcDzTlxA+wXC63W69w5FTGLLYMjFGgVMkbI5
jR4D44l0gdgJvq2VSTIWdI/vVr5z/D5mwYIgpvnmBsFVqCBWLhgJNtCmIuyWMKnJ
QR1zZgBkOOalksgdiQVK5l72Rhw4T1KDXL/C/6S+Q8A3kL3vW1SE6uP8sNSdwQQq
T3RBg6XV7mliZc5/jOOtp8EPaDGZ3y6Hk0+ynfsg77GGZg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:54:07 2025 by rpki-client