Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LKybW18495AC5FUMSqSugVc8RwM.roa
File: LKybW18495AC5FUMSqSugVc8RwM.roa (raw, json)
Hash identifier: jalAzL/PMYw2Pqwd3hLOGRg6ukg06Q+/3Cty6I9RXMc=
Subject key identifier: 2C:AC:9B:5B:5F:38:F7:90:02:E4:55:0C:4A:A4:AE:81:57:3C:47:03
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0195A3F30D800FBE6E464380398869C81B44
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LKybW18495AC5FUMSqSugVc8RwM.roa
Signing time: Mon 17 Mar 2025 11:52:49 +0000
ROA not before: Mon 17 Mar 2025 11:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.72.0/24 maxlen: 24
31.22.73.0/24 maxlen: 24
31.22.74.0/24 maxlen: 24
31.22.75.0/24 maxlen: 24
31.22.76.0/24 maxlen: 24
31.22.77.0/24 maxlen: 24
31.22.78.0/24 maxlen: 24
31.22.79.0/24 maxlen: 24
46.247.108.0/24 maxlen: 24
46.247.109.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
86.54.5.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
2a14:6780:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:f3:0d:80:0f:be:6e:46:43:80:39:88:69:c8:1b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Mar 17 11:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cac9b5b5f38f79002e4550c4aa4ae81573c4703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:14:13:03:84:05:9a:df:36:92:f8:f0:34:
8f:3b:6e:14:16:0d:90:dd:4d:24:f4:00:c8:ab:ef:
2e:3f:77:84:9d:51:8d:d5:9d:0c:62:95:89:bb:98:
4f:fb:4c:fe:51:b7:1f:c9:8c:cb:a3:6f:04:4a:03:
61:af:cc:92:80:48:a0:73:55:60:1c:a8:02:6b:52:
4b:6c:64:ac:34:4c:bc:29:9a:dc:bc:06:11:fe:21:
45:d8:59:d0:65:29:09:76:81:b3:f6:75:19:72:49:
ad:f4:85:5e:ef:42:ba:1c:5a:51:58:08:3a:df:f3:
eb:20:d1:15:ba:85:7b:51:08:4b:57:06:a8:49:78:
ea:d3:0b:8c:ce:4d:62:b2:e8:4f:96:70:b3:b3:04:
12:27:26:b1:ed:fd:74:e0:09:c3:bb:32:d9:96:04:
4e:33:2f:34:64:66:a0:f1:ba:a6:e6:b2:fd:37:4b:
97:7d:b7:d5:1c:86:f2:54:3c:f3:61:e1:06:dd:3e:
31:35:f2:ee:70:d3:95:6a:14:1f:09:83:5e:f8:89:
a6:06:04:85:c1:90:a3:47:3a:2c:48:31:f2:1c:b4:
f8:f5:bc:3a:2b:89:f9:62:b7:6c:89:3d:18:df:57:
6d:5a:b6:52:8e:91:1d:c8:68:c4:59:fb:f3:e7:bc:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:9B:5B:5F:38:F7:90:02:E4:55:0C:4A:A4:AE:81:57:3C:47:03
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LKybW18495AC5FUMSqSugVc8RwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/21
46.247.108.0/23
62.169.152.0/24
86.54.5.0/24
185.144.70.0/23
194.46.60.0/24
194.117.225.0/24
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
6a:57:c1:01:b3:f5:6b:a6:2c:f2:16:38:51:bc:19:1a:ee:b2:
8c:80:5a:70:01:5d:81:4c:1d:5d:30:86:f9:fc:cd:0e:71:1f:
66:f3:76:b9:33:83:d1:59:79:c9:cf:5f:ac:d2:76:73:a4:39:
8c:6e:87:55:30:df:00:ba:cb:19:02:7f:3e:12:cb:9b:f6:30:
ae:f2:2a:c2:d1:9f:00:57:40:ff:00:ab:8f:64:a7:31:fe:e5:
19:44:e8:80:03:76:60:31:71:e0:81:ef:af:b2:af:e5:f1:7b:
63:56:63:d7:68:e0:17:d4:17:d6:ac:11:27:eb:e2:3a:20:ac:
44:b7:bb:81:83:00:60:d7:09:3d:e8:f8:8f:fc:9c:c1:8a:ee:
03:57:30:e4:ca:19:63:a8:e6:a8:b3:da:6a:d1:7a:fb:05:06:
16:c6:09:ce:4e:01:73:3f:63:c1:7f:12:25:dd:62:5d:ac:2e:
0f:c9:11:40:84:92:65:38:4b:c5:cf:8d:18:38:47:35:15:06:
2b:35:e7:1f:73:ce:37:a6:0d:57:1c:e4:bd:fe:34:51:a3:8a:
22:8a:21:16:a3:c1:fc:7a:10:85:f5:50:c0:32:36:6a:50:8d:
32:74:bf:bb:8e:43:62:ed:ad:81:00:1c:2f:db:68:46:84:c7:
60:47:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:20 2025 by rpki-client