Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LMCYpwd4vHsNqjHBwKEahjEIuYI.roa
File: LMCYpwd4vHsNqjHBwKEahjEIuYI.roa (raw, json)
Hash identifier: ZvRj2f9qCn+btvoRrYuncsE+f7BgOz9ffh3+5Iemc1U=
Subject key identifier: 2C:C0:98:A7:07:78:BC:7B:0D:AA:31:C1:C0:A1:1A:86:31:08:B9:82
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0196C47789B367CBD0B20F775148C47BD431
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LMCYpwd4vHsNqjHBwKEahjEIuYI.roa
Signing time: Mon 12 May 2025 12:28:10 +0000
ROA not before: Mon 12 May 2025 12:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47645
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.64.0/21 maxlen: 21
94.137.72.0/24 maxlen: 24
94.137.73.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.77.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.80.0/22 maxlen: 22
94.137.84.0/22 maxlen: 22
94.137.88.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
94.137.95.0/24 maxlen: 24
2a05:c440::/48 maxlen: 48
2a05:c441::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:77:89:b3:67:cb:d0:b2:0f:77:51:48:c4:7b:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: May 12 12:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc098a70778bc7b0daa31c1c0a11a863108b982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:01:b3:c2:5d:af:b6:df:56:12:11:b8:fd:
f2:10:61:eb:0b:11:1e:ad:10:e4:ff:6d:d7:13:e7:
59:45:a3:55:79:24:1b:6b:f4:26:a8:00:a5:e4:a5:
d3:20:2f:c5:ad:0b:1e:61:04:b1:75:19:e3:2c:a1:
87:d4:fc:69:6c:9b:21:93:e9:2e:95:d6:e4:c4:26:
25:a9:7a:64:35:b4:81:16:3d:37:ef:98:7e:39:d8:
6b:69:61:d1:6c:43:f5:76:78:95:fe:46:d2:a2:b0:
9e:a6:8d:98:db:59:39:22:9b:7c:76:0d:ef:bd:f7:
c9:65:36:df:ae:f2:04:a8:c6:ca:2a:fe:98:7a:29:
6e:df:eb:34:a9:16:d3:51:5d:55:da:56:b3:4c:62:
5c:7a:18:62:3a:d4:3f:49:6c:34:46:1d:86:1f:76:
c3:f6:27:d8:99:59:64:41:35:13:21:29:28:8b:40:
b8:19:42:21:79:77:e4:84:e3:1c:c9:96:a8:98:16:
02:2b:f7:74:2d:d9:b4:47:21:67:6d:be:92:7c:64:
f8:e2:54:38:f3:10:c9:6a:10:5e:a4:75:1f:ee:92:
5f:a1:bc:e1:e5:c1:08:55:3d:52:19:c5:5f:ae:24:
9a:d5:35:e8:56:2f:75:56:f1:bd:c4:4e:98:54:59:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:98:A7:07:78:BC:7B:0D:AA:31:C1:C0:A1:1A:86:31:08:B9:82
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LMCYpwd4vHsNqjHBwKEahjEIuYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/23
94.137.64.0-94.137.88.255
94.137.92.0/24
94.137.94.0/23
IPv6:
2a05:c440::/48
2a05:c441::/32
Signature Algorithm: sha256WithRSAEncryption
9a:93:41:61:80:f5:18:4f:c0:91:15:52:df:b5:14:61:11:3d:
f9:9a:cf:04:64:a6:0c:4b:74:58:e1:a9:eb:b0:29:8f:b6:1a:
9f:1d:45:58:0e:ce:ac:6b:31:68:bf:91:9c:b5:d2:96:df:18:
31:f5:24:98:78:cf:ae:34:40:a3:06:7b:12:af:ca:28:b5:3b:
a1:c5:90:28:f1:fe:dd:56:7b:37:56:d4:c1:75:4d:b1:e4:20:
82:c3:f0:24:00:88:17:e1:92:bf:b9:70:37:7f:18:c0:7e:e8:
97:69:3b:7a:31:2b:17:dc:e5:2d:e5:0e:a0:0a:ca:77:3c:81:
e7:0a:b8:ed:5b:a9:03:2e:0f:e9:a6:ee:63:04:94:d1:02:9d:
b3:93:44:ac:ef:da:57:44:e3:b6:b0:8a:d0:e4:99:89:c0:78:
c8:27:f3:7c:69:ee:29:6b:71:3a:d7:01:7a:4b:41:01:49:b9:
5b:03:51:8f:0b:fa:8e:1a:ba:88:1a:fa:2d:26:58:80:fa:e1:
a4:53:11:15:c2:a4:b5:b9:ab:ad:4b:27:05:50:bd:cd:31:14:
67:6c:31:82:55:a4:db:a4:62:29:1c:78:56:6b:a9:72:c6:20:
c1:0a:de:5f:6a:cb:b1:bd:ac:0a:4b:0d:fd:d2:6a:a4:33:93:
0c:40:eb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:13 2025 by rpki-client