Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/LfyCocTCxKL8V3zHoX1xFiZMk8Q.roa
File: LfyCocTCxKL8V3zHoX1xFiZMk8Q.roa (raw, json)
Hash identifier: V9KPs5yiTRXqdL9lcAPgAPfn6nhC2WxPwKEIJHJAwEE=
Subject key identifier: 2D:FC:82:A1:C4:C2:C4:A2:FC:57:7C:C7:A1:7D:71:16:26:4C:93:C4
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 01946052923D220932101018517DE2B1CE9E
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/LfyCocTCxKL8V3zHoX1xFiZMk8Q.roa
Signing time: Mon 13 Jan 2025 15:40:11 +0000
ROA not before: Mon 13 Jan 2025 15:40:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8613
IP address blocks: 185.8.204.0/22 maxlen: 24
195.200.128.0/19 maxlen: 24
212.102.192.0/19 maxlen: 24
2a00:b300::/29 maxlen: 48
2a00:b300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:52:92:3d:22:09:32:10:10:18:51:7d:e2:b1:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Jan 13 15:40:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dfc82a1c4c2c4a2fc577cc7a17d7116264c93c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:e0:fb:2f:9d:75:dd:7f:20:bc:9b:60:2a:
e7:ad:d5:b7:c5:de:1a:6a:9d:53:ab:51:7f:2b:4d:
c3:b6:ad:19:7b:ee:cc:98:6a:1c:39:a1:14:32:33:
04:44:75:4a:d6:a2:40:d1:3d:96:27:0c:01:36:af:
12:83:90:a5:ee:b6:9e:e5:5d:26:15:62:fa:81:e4:
f4:7f:de:3a:2d:e2:de:fa:e8:ae:dc:d9:f0:c8:b0:
50:d7:63:c4:0d:db:83:da:75:ec:61:ac:f3:04:ed:
98:4a:1b:4d:ff:ba:f7:58:b2:0d:6c:fc:35:97:1b:
57:8e:7b:57:12:39:4f:28:7f:1f:e5:1a:cd:22:27:
b1:99:30:db:0f:df:28:9d:dd:0e:7e:6c:55:90:dc:
cd:0f:cb:07:5a:ba:4b:d8:20:36:84:a9:e0:b5:c8:
de:31:bb:69:02:e9:99:29:2e:07:c5:26:c0:33:03:
aa:2a:c9:c0:0e:98:74:a0:f7:ec:f5:89:3f:98:7b:
49:3b:b9:17:2f:89:1b:44:57:4b:45:11:20:14:c4:
f1:0e:2f:ad:57:f7:fa:59:c9:bf:5c:9e:7c:7e:50:
88:76:d4:9c:87:0b:eb:80:d1:1c:3a:bc:4c:0d:1a:
25:bd:b8:54:ac:b9:fe:cf:5d:fa:92:86:f1:32:e8:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:82:A1:C4:C2:C4:A2:FC:57:7C:C7:A1:7D:71:16:26:4C:93:C4
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/LfyCocTCxKL8V3zHoX1xFiZMk8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.204.0/22
195.200.128.0/19
212.102.192.0/19
IPv6:
2a00:b300::/29
Signature Algorithm: sha256WithRSAEncryption
59:cc:5a:ee:7d:73:90:c2:60:d5:c5:00:c3:1c:f6:cc:1d:6a:
a8:03:96:8f:a1:39:e7:86:f2:58:11:a4:c6:f9:42:bb:7d:ca:
70:1f:68:5f:18:46:0a:1b:5b:0e:a2:73:c4:65:e0:2d:4b:4b:
17:97:b4:14:b8:c3:b3:1a:c5:ff:f1:54:f1:5e:1b:bd:16:a0:
ac:22:f8:0a:ce:78:0d:a3:0e:c6:c0:77:a6:00:8e:7a:e5:1d:
ac:80:5f:96:e4:dd:9e:72:92:e2:a7:8e:6c:07:60:35:9d:62:
e3:e3:f4:d8:d5:2d:b2:b6:2e:29:e6:50:02:42:af:06:07:91:
e0:8b:d0:b5:47:98:a9:83:d1:fd:a5:0c:d4:0f:a3:75:8f:d0:
88:90:f6:98:9d:28:2e:7f:1d:0d:46:f5:ae:e1:68:96:cc:c3:
e9:12:3f:1f:c8:b9:2a:51:4f:3f:7e:46:1d:b0:b0:06:4e:84:
cc:a8:99:a6:47:55:ad:2a:da:f1:f5:25:06:2f:fe:f7:f8:40:
c1:30:32:e8:50:2d:48:cb:92:c8:1c:36:80:d7:a2:7f:6f:44:
d1:c4:9c:d3:af:d1:c2:bc:0f:22:cb:80:67:7a:d2:6b:ed:f2:
dd:b3:4c:cc:32:17:51:03:39:23:e8:62:51:37:cd:69:86:fc:
90:bc:c1:f8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZRgUpI9IgkyEBAYUX3isc6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5
MWExODYwHhcNMjUwMTEzMTU0MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGZjODJhMWM0YzJjNGEyZmM1NzdjYzdhMTdkNzExNjI2NGM5M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg/g+y+ddd1/ILybYCrnrdW3xd4a
ap1Tq1F/K03Dtq0Ze+7MmGocOaEUMjMERHVK1qJA0T2WJwwBNq8Sg5Cl7rae5V0m
FWL6geT0f946LeLe+uiu3NnwyLBQ12PEDduD2nXsYazzBO2YShtN/7r3WLINbPw1
lxtXjntXEjlPKH8f5RrNIiexmTDbD98ond0OfmxVkNzND8sHWrpL2CA2hKngtcje
MbtpAumZKS4HxSbAMwOqKsnADph0oPfs9Yk/mHtJO7kXL4kbRFdLRREgFMTxDi+t
V/f6Wcm/XJ58flCIdtSchwvrgNEcOrxMDRolvbhUrLn+z136kobxMuh7mwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFC38gqHEwsSi/Fd8x6F9cRYmTJPEMB8GA1UdIwQY
MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt
MTYxOWQwOGM2OTY1LzEvTGZ5Q29jVEN4S0w4VjN6SG9YMXhGaVpNazhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1
LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuQjMAwQF
w8iAAwQF1GbAMA0EAgACMAcDBQMqALMAMA0GCSqGSIb3DQEBCwUAA4IBAQBZzFru
fXOQwmDVxQDDHPbMHWqoA5aPoTnnhvJYEaTG+UK7fcpwH2hfGEYKG1sOonPEZeAt
S0sXl7QUuMOzGsX/8VTxXhu9FqCsIvgKzngNow7GwHemAI565R2sgF+W5N2ecpLi
p45sB2A1nWLj4/TY1S2yti4p5lACQq8GB5Hgi9C1R5ipg9H9pQzUD6N1j9CIkPaY
nSgufx0NRvWu4WiWzMPpEj8fyLkqUU8/fkYdsLAGToTMqJmmR1WtKtrx9SUGL/73
+EDBMDLoUC1Iy5LIHDaA16J/b0TRxJzTr9HCvA8iy4BnetJr7fLds0zMMhdRAzkj
6GJRN81phvyQvMH4
-----END CERTIFICATE-----
Generated at Tue Apr 15 04:38:28 2025 by rpki-client