Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/LyUeFaQumjkEXGwuTN3adk_CmUQ.roa
File: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (raw, json)
Hash identifier: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=
Subject key identifier: 2F:25:1E:15:A4:2E:9A:39:04:5C:6C:2E:4C:DD:DA:76:4F:C2:99:44
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 01941F8CA41DA8B7AFBDFCE1123CFB1C885B
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/LyUeFaQumjkEXGwuTN3adk_CmUQ.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42723
IP address blocks: 91.193.80.0/22 maxlen: 22
194.28.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jan 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:1d:a8:b7:af:bd:fc:e1:12:3c:fb:1c:88:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f251e15a42e9a39045c6c2e4cddda764fc29944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:16:61:7c:95:3d:ef:98:66:11:ae:76:b7:
40:56:e3:44:bd:56:65:c4:80:7c:ad:c1:6f:dd:ec:
3d:b7:bf:63:f3:66:ac:2e:3e:db:e6:e5:c0:62:30:
73:f0:ec:42:b2:bb:a1:35:8e:ef:c5:5e:74:3f:03:
81:90:97:fd:56:1c:e6:89:ec:a5:f5:af:35:43:50:
0a:c6:96:1d:09:e7:5e:57:57:2e:c7:17:c9:99:1f:
48:61:0f:52:e5:55:8d:3d:f9:eb:e1:b5:d9:88:4c:
f8:27:c6:77:c4:1d:01:f5:c7:d5:c2:d0:72:e1:6c:
9b:d4:71:ce:ae:c1:21:1d:c5:a9:2c:98:5b:cd:de:
88:71:a0:e5:a6:d1:3b:1a:25:25:23:f8:c7:ab:93:
ef:ca:91:75:04:9e:91:a2:4e:8e:55:72:9a:04:93:
99:d1:1a:cf:50:49:86:18:55:09:fb:12:cd:1d:31:
00:aa:64:74:1c:55:75:1f:51:6f:45:a7:70:73:b0:
c6:0c:6a:0a:34:0a:1b:c2:4b:ee:25:5f:bc:9f:98:
5e:e8:ac:fb:85:34:2c:a0:8a:7b:72:02:6f:eb:6d:
c9:9a:aa:80:fa:59:47:a1:72:4e:53:24:b0:e4:e4:
d1:61:ce:ae:04:ad:68:1f:d8:59:da:98:c9:0b:ac:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:1E:15:A4:2E:9A:39:04:5C:6C:2E:4C:DD:DA:76:4F:C2:99:44
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/LyUeFaQumjkEXGwuTN3adk_CmUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.80.0/22
194.28.64.0/22
Signature Algorithm: sha256WithRSAEncryption
75:33:dd:29:75:e1:8b:98:b2:4d:13:97:77:ba:91:35:53:d3:
95:f3:f3:65:9d:00:9a:0a:d5:20:ed:b4:8b:5f:8d:99:b9:92:
45:24:2d:7c:b0:bc:7a:f4:cf:20:56:1c:c0:84:3d:fc:6c:ab:
ee:55:f8:08:3f:b6:7b:24:ad:9f:22:9b:3c:f8:45:1d:00:e0:
ea:c8:f7:69:62:90:36:72:24:2f:a2:7e:d0:bd:43:17:a0:43:
e8:9e:7f:ea:3a:cd:67:dd:80:75:67:3e:83:3e:2f:7e:0b:13:
b7:17:3d:3c:49:79:62:ac:b8:7d:1a:6c:5e:7b:81:47:03:d5:
20:38:e8:15:78:88:7e:5b:4e:43:f7:49:dc:41:32:9d:9e:9c:
91:70:8f:66:36:23:86:18:e9:61:0c:dd:4f:3c:86:0b:62:fa:
d5:7a:01:8b:7f:7f:6b:7c:06:61:2e:45:fe:c9:25:32:35:c5:
bd:bc:dd:21:24:c6:7f:6c:c5:d2:75:74:4d:54:cb:73:3f:a4:
10:22:e0:0d:9f:ff:a9:de:3d:07:60:ad:0d:64:0d:a8:72:fa:
6f:6d:c1:70:cf:66:84:95:4b:51:70:d0:73:a5:56:f0:12:d2:
18:78:52:57:03:f7:c5:1f:7c:a6:ea:be:86:35:7b:aa:47:aa:
ab:77:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 14 14:55:53 2025 by rpki-client on console-fra.rpki-client.org