Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LYUe6KPQDbqlK1x7Ut8CutL0Dm4.roa
File: LYUe6KPQDbqlK1x7Ut8CutL0Dm4.roa (raw, json)
Hash identifier: A6MCOQ6/A9TooE4RW2vZ22SsVQp6jS91spDZ8k+dXKo=
Subject key identifier: 2D:85:1E:E8:A3:D0:0D:BA:A5:2B:5C:7B:52:DF:02:BA:D2:F4:0E:6E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019531B5C477EC718167973969A458882DC3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LYUe6KPQDbqlK1x7Ut8CutL0Dm4.roa
Signing time: Sun 23 Feb 2025 07:29:10 +0000
ROA not before: Sun 23 Feb 2025 07:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134928
IP address blocks: 151.243.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:31:b5:c4:77:ec:71:81:67:97:39:69:a4:58:88:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 23 07:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d851ee8a3d00dbaa52b5c7b52df02bad2f40e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:ba:ec:8b:5b:bb:ca:78:d7:99:59:f2:fd:
46:5f:0f:17:15:99:4a:40:47:6d:44:62:7a:e2:00:
9d:97:2c:75:0a:19:6c:95:f7:c3:a3:6f:43:82:f0:
af:26:2d:36:d7:fc:de:b6:f0:55:56:3d:21:79:b4:
2f:6c:fe:8e:e8:43:d5:7f:41:70:fa:b9:68:e7:75:
fa:6c:7a:ec:d0:8d:9d:ce:e9:fe:0f:0a:64:8a:84:
87:aa:64:20:19:dd:73:00:43:da:71:a8:d4:c9:1e:
0f:83:d9:ac:6e:23:f3:ff:fe:d3:32:28:ab:48:0b:
d0:42:ab:fe:40:b6:81:b5:f8:65:89:93:98:d2:da:
94:75:a7:b6:6f:0c:00:8c:b1:8c:cc:85:7b:3c:c7:
df:67:3e:89:36:77:0d:fa:94:22:83:e8:61:e6:ca:
39:d5:01:20:9a:8c:7b:73:fc:73:fb:6e:aa:ce:90:
b8:3d:21:ce:9f:3f:04:14:20:85:0f:2c:57:f2:30:
12:86:5d:9f:d2:95:0e:51:57:d4:1d:24:32:be:dd:
30:4f:fb:03:4b:f2:3d:11:7d:f8:0a:b9:57:a5:fa:
4c:3c:df:4f:78:e7:dd:1b:df:9e:da:59:da:61:a1:
a3:16:d2:f7:88:03:6c:b8:bd:91:51:d1:7c:38:04:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:1E:E8:A3:D0:0D:BA:A5:2B:5C:7B:52:DF:02:BA:D2:F4:0E:6E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LYUe6KPQDbqlK1x7Ut8CutL0Dm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:96:30:10:ca:81:44:1d:9f:a0:de:aa:b4:5b:7f:82:e5:e4:
ef:17:22:c4:53:c0:8b:37:33:fb:80:ac:67:e6:bb:a6:b3:04:
1b:5c:a4:69:06:bd:1d:96:cf:99:19:88:d1:a9:45:fc:a3:01:
a1:f8:62:9f:90:3c:3a:fd:df:72:42:1a:50:b6:50:33:56:0d:
27:cd:4a:67:42:4c:61:48:2f:04:d8:af:60:c5:10:ae:17:cb:
81:22:15:a7:8c:b7:cc:c9:2f:8d:88:7b:4a:07:1a:aa:26:ad:
4d:5b:f8:b7:28:97:cf:43:67:73:d9:6d:c0:10:71:50:64:30:
14:92:47:ff:03:5e:be:25:73:d3:48:24:3e:29:cb:02:0e:56:
3e:d1:67:1a:ca:7d:28:09:34:4e:04:d8:ad:0d:82:64:45:ec:
8b:e9:3e:78:e8:7f:18:12:b9:5e:02:d6:79:ef:a3:28:bc:0e:
34:24:0c:50:29:5a:2f:4b:a6:99:2f:06:79:9f:96:88:e5:99:
d1:e7:43:ef:24:bc:47:ec:f2:f5:8c:7e:ce:b4:33:95:6f:5d:
98:cd:58:cd:15:a7:57:2c:41:88:ac:6e:9f:aa:2d:7d:7a:e8:
3d:2a:98:43:78:52:8d:54:22:d1:03:6f:d4:de:4e:8b:49:ce:
c4:82:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:11 2025 by rpki-client