Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/LYJYFx2T8LJuRb12iyxKMr93evo.roa
File: LYJYFx2T8LJuRb12iyxKMr93evo.roa (raw, json)
Hash identifier: YqeTPnX1EtI+d0+m7mdzwt1Rn2TJyLXd1g7Ztcm9f4Y=
Subject key identifier: 2D:82:58:17:1D:93:F0:B2:6E:45:BD:76:8B:2C:4A:32:BF:77:7A:FA
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 01942521B3ED2224758E9F6480561D596BBA
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/LYJYFx2T8LJuRb12iyxKMr93evo.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62313
IP address blocks: 185.63.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b3:ed:22:24:75:8e:9f:64:80:56:1d:59:6b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d8258171d93f0b26e45bd768b2c4a32bf777afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:0d:5a:2c:66:87:dd:d8:7d:7b:42:42:ad:
d3:98:ff:5d:f5:c2:22:87:df:ef:dc:a3:07:e1:bd:
1e:3f:6d:cd:7a:81:70:aa:e8:50:d3:56:be:0d:2a:
22:a5:13:4d:95:6f:de:b3:82:5f:68:97:0a:d8:e4:
46:fb:25:60:f0:6a:d9:4f:2c:d3:65:a9:42:07:7f:
88:c8:4c:d6:08:65:65:9d:9d:da:83:2d:10:36:8c:
c7:04:f6:eb:73:2d:8b:b9:cc:c5:41:d2:bc:82:98:
14:d9:a9:67:28:60:bf:92:fc:ad:bf:27:7b:c7:f9:
48:ec:bf:29:0c:30:2b:46:12:39:a9:c8:a2:1a:e8:
3c:f3:b3:38:67:c5:71:e6:0f:e1:91:b7:85:88:da:
f2:a7:84:c8:23:22:fc:d4:3f:2c:52:f1:48:40:56:
6f:67:31:91:5d:2b:6a:29:92:dd:b1:5c:9e:2b:5b:
b1:c2:fd:9c:60:a0:45:64:d4:b5:65:30:45:c9:87:
3c:69:a0:78:36:f3:9d:d4:af:49:c7:ad:63:36:4a:
bb:9b:08:36:2a:f6:85:50:9a:5a:c2:84:96:46:4a:
93:dc:9c:2d:7b:e9:ad:e9:b9:ab:8c:79:e2:ca:a5:
b8:cd:d7:7e:40:5a:8d:f7:63:e7:38:b4:f7:41:6c:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:58:17:1D:93:F0:B2:6E:45:BD:76:8B:2C:4A:32:BF:77:7A:FA
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/LYJYFx2T8LJuRb12iyxKMr93evo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.128.0/22
Signature Algorithm: sha256WithRSAEncryption
52:73:18:b2:43:e8:90:ff:c3:1e:42:f0:16:25:ce:1b:ba:32:
5b:01:02:b0:21:96:7b:89:f0:68:9c:31:24:77:7e:ae:89:a3:
c5:ff:6f:83:06:aa:b8:f2:dc:87:90:70:5a:08:ad:7f:d6:d6:
82:d1:30:f7:76:d3:7e:c8:09:d6:38:b1:16:54:42:62:aa:d8:
32:29:8e:ad:3b:47:7c:61:a5:1f:a9:b9:39:15:2e:e7:c0:e7:
08:48:1b:7c:c8:26:4e:3f:b5:1b:93:b9:a5:f6:95:8a:9d:cc:
e4:fa:10:30:41:2c:07:29:7d:20:4c:67:9d:1c:60:04:6d:0d:
bc:dd:9d:6d:87:54:5a:8a:77:ae:75:5a:23:56:26:a5:cd:15:
6d:d9:6d:7e:8b:07:6a:e5:7c:dd:36:0b:ca:52:49:c8:56:ce:
07:56:bf:32:e0:1d:73:c6:a8:dc:b1:d0:c4:a7:2e:55:05:7d:
d5:a6:9c:db:da:a9:77:91:99:74:7d:99:e4:0f:92:1f:fa:60:
68:0d:3a:2f:43:0c:50:c9:37:1c:fb:3d:df:ad:85:b6:3f:3c:
db:59:56:7f:c7:63:5a:04:d5:a7:8e:19:15:2a:ab:d9:5f:34:
4e:92:d7:9f:53:96:be:7e:16:93:90:7b:88:3d:11:d9:aa:92:
eb:9f:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:54:56 2025 by rpki-client