Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa
File: Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa (raw, json)
Hash identifier: VGsuyNfzfr/GzDDdXYimTSNFocuLHOKMiHb8B0Qh1O4=
Subject key identifier: 2E:6D:7B:A6:03:24:D8:10:D5:D8:E7:88:71:BE:81:04:BA:68:41:65
Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial: 019427481D00CAF868E8AE5DDE2608CEA7A3
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 89.45.84.0/22 maxlen: 22
185.39.228.0/22 maxlen: 22
2a01:4aa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1d:00:ca:f8:68:e8:ae:5d:de:26:08:ce:a7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e6d7ba60324d810d5d8e78871be8104ba684165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:3e:5d:b0:06:11:0d:ca:06:ee:41:22:05:
9a:df:97:11:2d:71:1a:0f:7f:9b:21:db:a8:eb:f8:
7a:38:c5:78:1b:a5:82:dd:bc:bd:0a:d8:28:63:6c:
88:a1:4d:d3:f8:c3:92:b4:eb:ce:b0:6a:c4:14:72:
46:22:c5:ca:cc:e7:74:a6:0f:7b:19:ff:fb:54:54:
1d:a6:ed:07:10:d5:02:70:26:b7:b3:5f:36:14:41:
45:f7:da:e7:fa:a9:87:59:06:37:37:90:33:e7:ed:
6e:9c:ab:0c:1e:aa:66:4e:3a:07:8f:12:44:67:a4:
76:67:c2:90:53:58:27:05:99:68:99:c4:9b:75:b8:
fc:d6:63:bf:35:db:50:a0:20:e9:3d:1c:99:e3:72:
77:13:0f:4d:35:82:ff:ae:39:56:e9:c6:58:a7:01:
0d:17:2c:e3:d1:e9:16:ac:36:c8:38:2a:c8:01:e3:
35:97:75:a1:29:34:e5:92:51:4d:46:c0:34:2d:1c:
d6:f3:76:19:0c:38:38:a9:06:81:90:9f:03:3e:d3:
24:81:bc:32:67:2c:92:a7:ac:d8:5b:58:e3:b1:72:
22:8e:51:35:1b:87:8e:c8:ca:cf:d1:37:8f:78:f6:
a9:5d:1f:1b:a2:09:64:40:57:0e:e0:55:d5:0b:52:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:7B:A6:03:24:D8:10:D5:D8:E7:88:71:BE:81:04:BA:68:41:65
X509v3 Authority Key Identifier:
keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.84.0/22
185.39.228.0/22
IPv6:
2a01:4aa0::/32
Signature Algorithm: sha256WithRSAEncryption
95:50:20:7b:d4:44:b5:f7:87:6e:39:ed:24:ea:4c:2b:db:a5:
62:c0:78:b0:36:df:2d:ed:7c:fa:f2:c7:64:74:59:3c:ae:ef:
12:04:d1:4b:d8:54:a2:76:28:c8:03:ca:cc:fa:45:f8:d1:50:
4f:bb:b1:75:90:b0:f8:18:36:ec:2b:d7:20:59:48:4c:24:df:
b0:82:81:bf:b1:04:45:32:66:28:de:a0:73:f0:65:55:0c:fe:
dd:9c:23:c1:56:a8:49:00:6a:b9:45:e5:fc:4c:08:70:6f:ab:
bf:d5:38:97:e8:f7:6c:f4:37:cc:d2:f7:a3:67:84:68:b3:e9:
9a:7d:a6:fe:60:f6:3b:6f:bd:43:3d:a5:63:1c:ec:c7:a1:a2:
82:4e:22:30:c7:99:a1:5b:5b:11:52:35:ce:fc:77:a9:d2:3a:
f2:a2:0c:32:8f:81:0f:b6:63:a5:eb:5d:8b:06:bf:a2:19:d2:
2b:9e:5b:56:0d:9f:b8:6c:e7:30:d4:e8:3c:91:78:9e:d0:6d:
db:3d:15:ba:a6:ee:75:3e:e5:fa:78:e8:8b:81:9b:40:14:81:
df:ad:68:8a:57:45:fe:ff:b4:44:1e:7a:7e:4d:bd:ac:c6:f9:
c1:82:17:67:ac:2f:75:64:15:17:91:b3:0a:c9:5f:68:64:b7:
98:e3:7a:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQnSB0Ayvho6K5d3iYIzqejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTdkNjYxYWZjYTNkMzM3MGI4ZTYzNDQ5NGQ1MjQ2Yjgz
ZDU4NWYwHhcNMjUwMTAyMTM1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTZkN2JhNjAzMjRkODEwZDVkOGU3ODg3MWJlODEwNGJhNjg0MTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxM+XbAGEQ3KBu5BIgWa35cRLXEa
D3+bIduo6/h6OMV4G6WC3by9CtgoY2yIoU3T+MOStOvOsGrEFHJGIsXKzOd0pg97
Gf/7VFQdpu0HENUCcCa3s182FEFF99rn+qmHWQY3N5Az5+1unKsMHqpmTjoHjxJE
Z6R2Z8KQU1gnBZlomcSbdbj81mO/NdtQoCDpPRyZ43J3Ew9NNYL/rjlW6cZYpwEN
Fyzj0ekWrDbIOCrIAeM1l3WhKTTlklFNRsA0LRzW83YZDDg4qQaBkJ8DPtMkgbwy
ZyySp6zYW1jjsXIijlE1G4eOyMrP0TePePapXR8boglkQFcO4FXVC1J6iwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFC5te6YDJNgQ1djniHG+gQS6aEFlMB8GA1UdIwQY
MBaAFJrn1mGvyj0zcLjmNElNUka4PVhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt
M2I2OGE0OWRjMDQyLzEvTG0xN3BnTWsyQkRWMk9lSWNiNkJCTHBvUVdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy
LzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWS1UAwQC
uSfkMA0EAgACMAcDBQAqAUqgMA0GCSqGSIb3DQEBCwUAA4IBAQCVUCB71ES194du
Oe0k6kwr26ViwHiwNt8t7Xz68sdkdFk8ru8SBNFL2FSidijIA8rM+kX40VBPu7F1
kLD4GDbsK9cgWUhMJN+wgoG/sQRFMmYo3qBz8GVVDP7dnCPBVqhJAGq5ReX8TAhw
b6u/1TiX6Pds9DfM0vejZ4Ros+mafab+YPY7b71DPaVjHOzHoaKCTiIwx5mhW1sR
UjXO/Hep0jryogwyj4EPtmOl612LBr+iGdIrnltWDZ+4bOcw1Og8kXie0G3bPRW6
pu51PuX6eOiLgZtAFIHfrWiKV0X+/7REHnp+Tb2sxvnBghdnrC91ZBUXkbMKyV9o
ZLeY43q/
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:37 2025 by rpki-client