Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/LYWNFEM4isLrMZkcPOtofB7wrtQ.roa
File: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (raw, json)
Hash identifier: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=
Subject key identifier: 2D:85:8D:14:43:38:8A:C2:EB:31:99:1C:3C:EB:68:7C:1E:F0:AE:D4
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 0194258EF77B032973EA63A356D91CB9BE7E
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/LYWNFEM4isLrMZkcPOtofB7wrtQ.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.159.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f7:7b:03:29:73:ea:63:a3:56:d9:1c:b9:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d858d1443388ac2eb31991c3ceb687c1ef0aed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:27:00:c9:b4:55:62:d4:8d:66:c8:23:a0:
69:2b:c5:69:33:c3:6f:80:5d:91:84:d3:7e:84:c3:
53:09:58:87:f6:4d:79:35:7f:f7:23:72:46:e0:4c:
b0:42:f4:92:8c:04:b6:66:ab:b0:2b:67:28:86:10:
90:54:66:5f:5f:f8:4e:08:ee:73:eb:e6:cc:91:76:
0f:f0:70:c1:73:f3:88:17:71:02:2a:56:32:c2:56:
81:7c:3a:16:8f:a3:db:b4:b4:05:36:b2:95:d3:0e:
b9:53:98:cb:d0:80:c6:31:88:ee:93:63:a6:3c:ee:
ae:4a:b5:32:81:f3:9d:ab:2c:34:df:fb:08:42:9b:
67:38:12:94:3c:30:3e:de:cc:0c:52:d3:3f:55:65:
77:32:ea:9a:42:05:40:64:24:8d:41:f3:32:ef:a9:
8f:1d:da:37:ae:df:70:27:8b:13:f5:d5:de:9a:09:
37:47:ed:e7:2d:76:dd:9e:ed:56:1b:ba:45:d6:ae:
52:da:02:07:0a:97:5f:36:54:8e:63:bb:bb:48:8f:
8d:36:c8:33:c2:99:af:6a:bc:59:7a:95:8e:dd:12:
f0:4e:b8:0d:5f:71:90:21:7f:62:07:92:c6:88:e6:
7d:9a:b7:53:a9:a3:6c:4d:fb:fb:c2:21:29:ff:c4:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:8D:14:43:38:8A:C2:EB:31:99:1C:3C:EB:68:7C:1E:F0:AE:D4
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/LYWNFEM4isLrMZkcPOtofB7wrtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.224.0/22
Signature Algorithm: sha256WithRSAEncryption
52:97:3a:66:7b:50:76:07:98:1c:45:c3:6e:1a:aa:a1:7b:23:
e2:f9:e0:fc:90:30:80:96:fa:d1:f3:61:e9:34:b9:71:75:a9:
d4:cd:66:14:e7:e0:9a:74:98:9d:c2:f5:11:03:3a:0b:10:62:
57:5f:08:27:ca:7f:a8:0f:aa:01:50:1b:d3:8b:d6:cb:03:48:
50:6d:a4:25:5f:c6:6a:e5:ad:f5:90:09:bf:a2:a1:a3:e3:fa:
0e:3f:12:27:8a:1b:83:31:24:4f:ce:c4:7c:fb:b7:44:e2:8c:
f8:68:6c:f9:36:c9:bf:f3:1c:82:ab:75:eb:59:e0:ad:80:6a:
35:61:60:54:e7:56:65:af:59:1a:19:31:30:e5:d6:dd:81:64:
46:35:1e:88:1a:d2:38:fd:c1:5b:c0:c3:11:42:47:7c:23:34:
fc:bb:01:97:33:03:99:ae:0f:8b:e0:f1:6a:bd:24:47:73:69:
5d:48:e4:6a:57:c2:d3:41:02:ad:09:c5:dd:cf:ef:46:5b:76:
10:69:4d:78:4b:c1:76:fd:42:62:d4:95:5f:4a:da:0b:34:12:
5b:ba:a4:c5:ad:86:44:01:c2:c4:66:8a:04:11:30:90:42:74:
e8:f2:0a:6b:41:65:c4:6f:19:e7:19:39:d4:c3:97:6d:4e:77:
b0:cd:4c:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljvd7Aylz6mOjVtkcub5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj
MDY4NWEwHhcNMjUwMTAyMDU0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDg1OGQxNDQzMzg4YWMyZWIzMTk5MWMzY2ViNjg3YzFlZjBhZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6cnAMm0VWLUjWbII6BpK8VpM8Nv
gF2RhNN+hMNTCViH9k15NX/3I3JG4EywQvSSjAS2ZquwK2cohhCQVGZfX/hOCO5z
6+bMkXYP8HDBc/OIF3ECKlYywlaBfDoWj6PbtLQFNrKV0w65U5jL0IDGMYjuk2Om
PO6uSrUygfOdqyw03/sIQptnOBKUPDA+3swMUtM/VWV3MuqaQgVAZCSNQfMy76mP
Hdo3rt9wJ4sT9dXemgk3R+3nLXbdnu1WG7pF1q5S2gIHCpdfNlSOY7u7SI+NNsgz
wpmvarxZepWO3RLwTrgNX3GQIX9iB5LGiOZ9mrdTqaNsTfv7wiEp/8QERwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2FjRRDOIrC6zGZHDzraHwe8K7UMB8GA1UdIwQY
MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt
MzZlNjRhYzY0NTQyLzEvTFlXTkZFTTRpc0xyTVprY1BPdG9mQjd3cnRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy
LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ/gMA0G
CSqGSIb3DQEBCwUAA4IBAQBSlzpme1B2B5gcRcNuGqqheyPi+eD8kDCAlvrR82Hp
NLlxdanUzWYU5+CadJidwvURAzoLEGJXXwgnyn+oD6oBUBvTi9bLA0hQbaQlX8Zq
5a31kAm/oqGj4/oOPxInihuDMSRPzsR8+7dE4oz4aGz5Nsm/8xyCq3XrWeCtgGo1
YWBU51Zlr1kaGTEw5dbdgWRGNR6IGtI4/cFbwMMRQkd8IzT8uwGXMwOZrg+L4PFq
vSRHc2ldSORqV8LTQQKtCcXdz+9GW3YQaU14S8F2/UJi1JVfStoLNBJbuqTFrYZE
AcLEZooEETCQQnTo8gprQWXEbxnnGTnUw5dtTnewzUyl
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:49 2025 by rpki-client