Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lIy4Q2drplE2HReItuheKqByU3U.roa
File: lIy4Q2drplE2HReItuheKqByU3U.roa (raw, json)
Hash identifier: yu887leeXYO4V6K4MDTQEtRVm03/Sc7SXha1jzS5JZs=
Subject key identifier: 94:8C:B8:43:67:6B:A6:51:36:1D:17:88:B6:E8:5E:2A:A0:72:53:75
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451DC428830E460E5F8CCE665DB593
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lIy4Q2drplE2HReItuheKqByU3U.roa
Signing time: Wed 01 Jan 2025 23:48:16 +0000
ROA not before: Wed 01 Jan 2025 23:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50809
IP address blocks: 37.77.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1d:c4:28:83:0e:46:0e:5f:8c:ce:66:5d:b5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948cb843676ba651361d1788b6e85e2aa0725375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:49:20:70:8d:18:5e:1b:36:fc:a9:a7:b2:
dc:dd:01:de:50:e8:42:8d:56:ed:2b:30:62:94:d3:
66:7b:2a:02:bf:04:d0:2d:0b:3e:91:bb:d5:0a:3d:
b1:c7:7d:a9:c2:c4:a7:47:f9:1d:13:83:84:09:d4:
5b:56:fe:fa:3a:1f:4e:17:c7:50:28:0e:90:b8:7b:
a4:56:d7:38:1a:a2:7a:9b:15:17:a5:1a:d4:d0:3f:
84:4c:bc:0f:2c:8c:f6:80:84:93:5e:13:5b:a8:bc:
c4:f4:8c:13:ab:4c:b8:3c:5b:f1:05:b8:1c:2a:63:
b1:57:1b:ee:68:f1:a7:9d:94:51:da:e9:16:bf:62:
08:e8:ae:f5:46:d6:f9:b8:71:d2:ec:68:41:d1:3f:
09:03:f6:22:6e:93:28:b5:58:16:37:da:e3:9a:cf:
62:c2:62:e9:27:e0:43:6a:87:84:f3:f2:58:a9:00:
ce:04:46:ac:59:a3:a0:22:8a:85:bd:55:c8:71:c3:
64:b4:79:d5:c7:2a:36:71:d5:d1:5a:e5:61:08:cf:
2c:06:e2:39:04:17:b4:c4:05:0f:93:e9:d7:cb:d5:
fb:52:f5:a3:f9:40:e1:b5:42:05:fa:10:d4:76:57:
4d:8b:49:ab:6d:ab:ef:8e:56:51:1b:ab:87:42:f8:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:B8:43:67:6B:A6:51:36:1D:17:88:B6:E8:5E:2A:A0:72:53:75
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lIy4Q2drplE2HReItuheKqByU3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.148.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2f:cc:ea:72:2a:fc:00:a4:c6:b9:a1:53:b3:f4:56:59:f6:
4e:2b:b3:c7:43:83:0f:fc:e6:1a:34:4b:5c:c3:2e:3f:a1:04:
df:90:7f:bf:21:d3:8f:04:ba:ea:8e:53:87:3b:0f:fc:11:f2:
89:0c:dc:f7:ec:d8:ab:0c:07:21:e0:62:25:12:66:29:c0:4e:
13:aa:86:2a:44:64:c2:1c:86:67:25:bb:b0:ec:7e:bb:4a:4b:
d7:24:18:5c:41:d9:4e:d5:2c:40:46:be:b0:d3:a2:d7:8d:7f:
ca:99:e6:ad:81:51:b5:9d:68:22:8e:53:07:97:05:f3:25:2c:
f1:e6:a7:bd:dc:8e:95:4b:b7:14:98:ff:f6:06:04:7c:e7:67:
9a:fd:cb:34:96:5c:92:88:61:cf:2f:0b:d5:59:39:81:7f:87:
18:b8:e5:71:99:38:79:a4:76:96:53:49:2a:68:65:36:df:28:
d1:a2:95:8e:6a:15:6e:1d:fc:21:74:7c:66:d5:e3:f7:07:06:
3a:94:71:f8:91:56:6f:6a:28:40:2d:dc:f2:d8:16:15:57:b1:
fd:7d:f9:9e:14:43:c6:f9:2b:6d:85:0b:50:8d:71:42:54:4e:
e6:88:18:43:3c:0e:4f:bc:38:dd:e0:6c:19:64:94:ff:7b:e5:
0a:0c:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:59 2025 by rpki-client