Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ly47ccD4fR8oB97UrRsYkE0b__M.roa
File: ly47ccD4fR8oB97UrRsYkE0b__M.roa (raw, json)
Hash identifier: 00kCX21HQCfj9WKZRbbvLNDZqmTFP7S7BEdG/X2Ry3o=
Subject key identifier: 97:2E:3B:71:C0:F8:7D:1F:28:07:DE:D4:AD:1B:18:90:4D:1B:FF:F3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01948F0E9AC93B79C3021C2EEBDC32EE55A5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ly47ccD4fR8oB97UrRsYkE0b__M.roa
Signing time: Wed 22 Jan 2025 17:28:06 +0000
ROA not before: Wed 22 Jan 2025 17:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 45.15.125.0/24 maxlen: 24
45.15.128.0/24 maxlen: 24
45.15.129.0/24 maxlen: 24
45.15.130.0/24 maxlen: 24
45.15.131.0/24 maxlen: 24
45.15.147.0/24 maxlen: 24
45.15.152.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.148.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
185.166.154.0/24 maxlen: 24
185.166.155.0/24 maxlen: 24
185.203.4.0/24 maxlen: 24
185.203.5.0/24 maxlen: 24
185.203.6.0/24 maxlen: 24
185.203.7.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
194.76.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:0e:9a:c9:3b:79:c3:02:1c:2e:eb:dc:32:ee:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 22 17:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=972e3b71c0f87d1f2807ded4ad1b18904d1bfff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:7d:2a:db:63:1c:9d:03:63:73:67:cb:4d:
c6:48:13:fe:65:58:e6:63:f0:16:14:df:79:e8:d6:
1e:ff:08:2c:7e:8c:52:81:fb:a0:87:be:f3:d3:ea:
af:d8:f5:72:8e:53:e3:78:db:20:d1:49:5d:38:ca:
e4:b8:da:45:05:b0:7b:65:28:ac:00:4f:d8:2e:6c:
33:40:80:02:47:e5:de:49:99:93:ab:7f:09:11:2a:
b1:fa:34:e7:d3:42:77:bb:2c:8e:a8:54:55:af:ba:
a0:4c:d7:88:a2:ca:a1:63:ac:92:8a:5c:2f:63:78:
68:15:ac:ae:55:bf:27:e5:2c:3c:48:5c:50:2c:5c:
54:4f:15:2e:12:e7:c2:dd:a4:c1:49:bf:6d:66:2d:
50:91:38:82:63:47:0c:39:8b:98:e6:bc:62:52:b9:
61:9a:b3:f3:b7:59:e3:ea:17:51:74:c6:b9:b8:f5:
68:23:08:cd:f4:3f:dc:2f:9b:ba:77:73:2d:63:69:
31:81:46:4b:f1:0b:74:ae:5b:b2:ef:05:21:5a:56:
5f:38:61:18:1a:3a:bf:90:98:49:1b:d4:b3:f7:69:
56:f3:6e:e4:0b:9d:66:0a:4d:32:d8:2d:f5:f0:a5:
ea:dd:3f:43:35:e7:1d:05:57:10:09:2b:1d:2d:50:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:3B:71:C0:F8:7D:1F:28:07:DE:D4:AD:1B:18:90:4D:1B:FF:F3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ly47ccD4fR8oB97UrRsYkE0b__M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.125.0/24
45.15.128.0/22
45.15.147.0/24
45.15.152.0/23
45.83.148.0/24
45.83.150.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
185.166.154.0/23
185.203.4.0/22
194.76.136.0/24
194.76.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7e:dd:cc:b7:af:3f:f0:e1:4b:d2:c7:70:8d:bc:c2:0b:46:
46:11:82:52:c2:33:59:f4:6a:ae:7d:5c:f4:b0:72:24:06:cf:
86:a1:28:93:24:a4:eb:d2:bd:28:94:c6:4e:69:42:01:9c:83:
b3:32:01:d0:d8:a1:54:d7:c5:e6:13:5a:a0:4b:0d:21:13:8f:
78:5f:7d:62:cf:a6:b9:43:62:8e:ab:57:ef:8d:c0:b9:3c:27:
77:54:36:a6:81:7c:84:af:32:46:42:69:b5:99:fe:b2:06:27:
7a:18:ec:43:42:bd:3c:d1:c7:18:7f:e6:10:de:54:89:cc:ba:
19:4b:2f:fb:4c:c8:59:37:ba:93:35:52:d5:16:59:d4:aa:61:
2b:aa:b6:d7:52:aa:8b:69:91:b6:98:6b:41:09:37:e0:83:cd:
fa:1c:e0:41:d9:57:1b:12:46:43:10:36:6f:8e:c2:74:e1:a7:
9b:21:c4:f2:a8:e1:4a:bd:7d:7c:65:08:ce:e3:89:18:eb:f2:
c4:2c:e7:63:22:62:f2:6e:dc:bb:4f:a2:cf:da:8d:ca:d9:fa:
da:93:18:38:10:ba:73:e4:d6:1a:70:93:43:31:3c:36:bd:f1:
61:00:7f:3c:2e:85:15:75:21:b1:32:5a:cd:ce:32:e9:75:ab:
93:ab:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:41:35 2025 by rpki-client