Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/lsyqD2gTgikkDZqsbqed-AvQOFE.roa
File: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (raw, json)
Hash identifier: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=
Subject key identifier: 96:CC:AA:0F:68:13:82:29:24:0D:9A:AC:6E:A7:9D:F8:0B:D0:38:51
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8D54999CAFFFD37F9CDF4B83CD14
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/lsyqD2gTgikkDZqsbqed-AvQOFE.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2471
IP address blocks: 193.51.134.0/24 maxlen: 24
193.51.135.0/24 maxlen: 24
193.52.35.0/24 maxlen: 24
193.54.56.0/24 maxlen: 24
194.57.236.0/24 maxlen: 24
194.57.237.0/24 maxlen: 24
194.199.93.0/24 maxlen: 24
194.199.94.0/24 maxlen: 24
194.199.96.0/24 maxlen: 24
194.254.98.0/24 maxlen: 24
194.254.197.0/24 maxlen: 24
195.83.189.0/24 maxlen: 24
195.221.169.0/24 maxlen: 24
195.221.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8d:54:99:9c:af:ff:d3:7f:9c:df:4b:83:cd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96ccaa0f68138229240d9aac6ea79df80bd03851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:bd:9d:4b:e9:05:e6:d7:0d:60:f6:ba:4a:
75:59:82:41:02:3f:23:2b:e7:c4:97:4c:14:db:f9:
81:6c:d6:c0:24:35:e5:fc:88:d8:b8:94:29:45:7e:
f1:99:f3:6c:2f:fe:cc:ec:44:29:74:62:3c:d1:d2:
78:7d:e1:87:6c:c2:b4:ad:ef:4b:0c:26:c8:88:1a:
79:e9:64:1d:4d:ab:28:5c:4f:dc:fb:66:3b:bb:63:
6d:93:bf:75:c9:55:c1:2b:eb:d5:b6:9b:7b:87:9c:
08:03:b7:30:5e:1b:fa:88:df:15:7e:2f:2b:23:b9:
5a:23:87:1d:06:39:e8:42:dd:1b:19:aa:05:af:3d:
b6:8c:01:4a:2d:b0:de:4d:85:c8:60:7c:37:db:d6:
1b:e2:a4:72:dc:59:a7:85:38:ea:b5:91:c2:ca:f4:
46:03:b3:61:ca:d9:3c:fe:50:56:04:3a:b0:f9:05:
36:96:b4:97:e6:1d:c2:8b:f8:b2:62:2a:45:5d:1f:
e6:db:ca:04:97:94:6b:b5:b4:70:2c:fd:11:90:3a:
6f:18:12:20:86:ce:bc:a9:93:b9:1c:eb:0b:26:04:
85:24:52:3f:bd:f5:f0:50:e1:15:af:f5:b7:95:46:
62:a2:b1:0c:f7:f8:77:b7:d3:22:a0:fc:7e:49:f8:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CC:AA:0F:68:13:82:29:24:0D:9A:AC:6E:A7:9D:F8:0B:D0:38:51
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/lsyqD2gTgikkDZqsbqed-AvQOFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.51.134.0/23
193.52.35.0/24
193.54.56.0/24
194.57.236.0/23
194.199.93.0-194.199.94.255
194.199.96.0/24
194.254.98.0/24
194.254.197.0/24
195.83.189.0/24
195.221.169.0/24
195.221.172.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d4:ac:ac:75:34:ba:b9:3c:c4:ef:86:1f:4f:3d:11:c4:74:
7b:36:65:16:ee:bc:8f:fa:63:17:7a:5b:87:87:b3:68:95:f8:
ae:fd:d5:c4:d5:da:ba:77:a1:f8:87:ca:14:4d:9f:00:9f:6c:
7a:6d:b8:cc:5d:4e:9a:4e:b7:18:98:85:33:e2:10:08:fc:56:
cd:7e:b9:4c:fe:53:49:5e:de:be:aa:13:ce:6e:8c:18:76:ed:
f4:ae:05:02:8f:a1:fa:a9:43:ec:a4:b2:3a:57:66:8d:d8:0d:
ec:39:07:fc:7f:cd:41:ef:62:c4:b2:a2:92:c5:f5:f7:ee:46:
89:35:62:e2:26:71:e4:e6:b3:e4:ff:51:a1:2d:c2:1f:f1:0c:
17:67:9c:50:f2:fa:20:30:e7:44:15:8b:4b:b5:ff:a4:23:88:
53:d6:e1:b7:79:e9:63:3d:e8:6b:7a:1b:de:33:12:f1:5b:db:
00:c7:e8:b9:5a:36:6c:42:4f:ac:91:85:1a:f2:2d:35:52:12:
9c:c9:47:31:15:29:39:6c:46:18:b2:df:a8:e4:97:cc:d3:14:
0f:bd:b7:4c:84:d5:50:4f:75:76:b2:17:04:03:32:23:8c:1b:
2a:6a:f0:50:00:96:5e:6b:ac:4a:a4:e6:c2:33:af:d1:35:3d:
8d:63:97:98
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZQlj41UmZyv/9N/nN9Lg80UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjUwMTAyMDU0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmNjYWEwZjY4MTM4MjI5MjQwZDlhYWM2ZWE3OWRmODBiZDAzODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BG9nUvpBebXDWD2ukp1WYJBAj8j
K+fEl0wU2/mBbNbAJDXl/IjYuJQpRX7xmfNsL/7M7EQpdGI80dJ4feGHbMK0re9L
DCbIiBp56WQdTasoXE/c+2Y7u2Ntk791yVXBK+vVtpt7h5wIA7cwXhv6iN8Vfi8r
I7laI4cdBjnoQt0bGaoFrz22jAFKLbDeTYXIYHw329Yb4qRy3FmnhTjqtZHCyvRG
A7Nhytk8/lBWBDqw+QU2lrSX5h3Ci/iyYipFXR/m28oEl5RrtbRwLP0RkDpvGBIg
hs68qZO5HOsLJgSFJFI/vfXwUOEVr/W3lUZiorEM9/h3t9MioPx+Sfid5wIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFJbMqg9oE4IpJA2arG6nnfgL0DhRMB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEvbHN5cUQyZ1RnaWtrRFpxc2JxZWQtQXZRT0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQBwTOGAwQA
wTQjAwQAwTY4AwQBwjnsMAwDBADCx10DBADCx14DBADCx2ADBADC/mIDBADC/sUD
BADDU70DBADD3akDBADD3awwDQYJKoZIhvcNAQELBQADggEBAEXUrKx1NLq5PMTv
hh9PPRHEdHs2ZRbuvI/6Yxd6W4eHs2iV+K791cTV2rp3ofiHyhRNnwCfbHptuMxd
TppOtxiYhTPiEAj8Vs1+uUz+U0le3r6qE85ujBh27fSuBQKPofqpQ+yksjpXZo3Y
Dew5B/x/zUHvYsSyopLF9ffuRok1YuImceTms+T/UaEtwh/xDBdnnFDy+iAw50QV
i0u1/6QjiFPW4bd56WM96Gt6G94zEvFb2wDH6LlaNmxCT6yRhRryLTVSEpzJRzEV
KTlsRhiy36jkl8zTFA+9t0yE1VBPdXayFwQDMiOMGypq8FAAll5rrEqk5sIzr9E1
PY1jl5g=
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:46 2025 by rpki-client